Privacy Policy
Contents
Onifast is a self-hosted server panel. We do not collect personal data from your servers or users. This policy applies specifically to data collected via the onifast.com website and download infrastructure.
Overview
Onifast ("we", "our", "us") respects your privacy. This Privacy Policy explains how we handle information in connection with the Onifast website (onifast.com), documentation portal, and download infrastructure.
Because Onifast is a self-hosted software, the server panel you install runs entirely on your own infrastructure. We have no access to your server data, your users, your files, or any information stored in your self-hosted Onifast instance.
Data We Collect
When you visit onifast.com, our web infrastructure may collect the following data automatically:
| Data Type | Examples | Purpose |
|---|---|---|
| Server Logs | IP address, request path, response code, timestamp | Security, abuse prevention, uptime monitoring |
| Download Pings | File requested, OS/arch detected, version tag | Download statistics & version tracking |
| Browser Data | User-agent, referrer | Compatibility analysis |
| Version Check | Installer script fetches latest version string | Serve correct installer version |
We do not collect names, email addresses, or any personally identifiable information unless you voluntarily contact us.
How We Use Your Data
The data collected from the website is used exclusively for:
- Monitoring server health, uptime, and performance.
- Detecting and mitigating abuse, DDoS attacks, and unauthorized access attempts.
- Understanding download volume and geographic distribution to plan CDN capacity.
- Debugging errors and improving documentation quality.
We do not use your data for advertising, profiling, or sale to third parties.
Data Storage & Security
Server access logs are stored on our infrastructure with restricted access controls. Log retention is typically limited to 30 days for standard logs and up to 90 days for security-relevant events.
We implement appropriate technical and organizational measures to protect data against unauthorized access, alteration, or destruction. However, no system is completely secure, and we cannot guarantee absolute security.
Your self-hosted Onifast instance stores its own data (PAM credentials, domain configs, SQLite databases) entirely on your server. That data is under your sole control and responsibility.
Data Sharing
We do not sell, trade, or transfer your information to third parties, except in the following limited circumstances:
- Legal compliance: If required by law, court order, or governmental authority.
- Infrastructure providers: Our hosting and CDN partners may process log data as part of service delivery, under strict data processing agreements.
- Security incidents: If necessary to prevent imminent harm or illegal activity.
Cookies & Local Storage
The onifast.com website does not use tracking cookies, advertising cookies, or analytics SDKs (e.g., Google Analytics). We do not fingerprint your browser.
The Onifast panel (self-hosted) uses a session cookie to maintain your authenticated login state. This cookie is:
- Stored exclusively on your own server's domain.
- Never transmitted to our infrastructure.
- Governed by the security settings you configure in your panel installation.
Your Rights
Depending on your jurisdiction, you may have the following rights regarding any personal data we hold:
- Access: Request a copy of data we hold about you.
- Rectification: Request correction of inaccurate data.
- Erasure: Request deletion of your data ("right to be forgotten").
- Objection: Object to processing of your data for certain purposes.
- Portability: Request your data in a structured, machine-readable format.
To exercise any of these rights, contact us at privacy@onifast.com. We will respond within 30 days.
Children's Privacy
Onifast is intended for server administrators and technical users. Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately so we can delete it.
Third-Party Links
Our website and documentation may contain links to third-party websites (e.g., GitHub, Google Fonts CDN). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.
External resources loaded on our pages include:
- Google Fonts — font delivery (subject to Google's Privacy Policy).
- jsDelivr CDN — Bootstrap Icons delivery (subject to jsDelivr's Privacy Policy).
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of our website or software after any change constitutes your acceptance of the updated policy.
For material changes, we will make a reasonable effort to provide notice via the Onifast website or documentation.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us at any time.