Privacy Policy

We store only what's necessary to provide the service:

• Account information — your email address, name, and account creation date
• Service assignments — which services you've registered, your assigned subdomain, and any custom domains
• Order history — payment amounts, status, and timestamps for billing purposes

HomeGate is a proxy — we route traffic, we don't inspect it:

• No traffic content logging — we never log, store, or inspect the content of your proxied traffic
• No browsing data — we don't track which pages your visitors access through your services
• No cookies or tracking — we don't use analytics cookies, tracking pixels, or third-party trackers on our site
• No user activity profiling — we don't build profiles of you or your visitors' behavior

We collect infrastructure metrics for capacity planning and billing purposes:

• Bandwidth counters — aggregate per-customer bandwidth usage for capacity planning
• System metrics — CPU, RAM, and disk usage of our VPS infrastructure

These are operational counters, not content inspection. We measure how much traffic flows through, not what the traffic contains.

• Account data is stored in Firestore
• Infrastructure metrics are stored in MongoDB
• SSH keys are encrypted at rest using AES-256-GCM with Argon2id key derivation, with per-VPS isolation
• All connections between your browser and HomeGate are encrypted over HTTPS/TLS
• All tunnel traffic between our infrastructure and your home server is encrypted via Tailscale (WireGuard)

We use a small number of third-party services to operate HomeGate:

• Revolut Business — payment processing. Your payment details are handled directly by Revolut; we don't store card numbers
• Resend — transactional notifications only (order confirmations, password resets)
• Cloudflare — CDN and DNS services
• Datalix — VPS infrastructure hosting

We retain your account data for as long as your account is active. Infrastructure metrics are retained for capacity planning and may be aggregated over time.

If you delete your account, we will remove your personal data (email, name) and service assignments. Order records may be retained as required for accounting and legal obligations.

To request data deletion, contact us through your dashboard.

If you have questions about this privacy policy or how we handle your data, reach out through your dashboard.