Who handles your information
gnuHQ operates this website and its membership, support and updater services. Contact the operator through our self-hosted contact form. Select “Privacy request” to ask about your information.
What we collect
- Accounts: your name, email, password hash, recovery-code hash, membership requests, membership status and expiry. Passwords and private recovery codes are not stored as readable account fields.
- Website connections: the public site address, domain label, ownership-verification state, domain-limit usage and hashed updater keys.
- Updater requests: the connected site address and installed plugin/theme identifiers and versions needed to find matching releases. The updater does not upload page content, visitor records, passwords or supplier credentials.
- Support: the name, reply email, topic and text you submit, plus replies and delivery status in the conversation. Support messages, reply history and queued email content are encrypted in the private application database.
- Operations: web-server request logs, IP addresses, request times, rate-limit identifiers, security events, administrative actions and mail-delivery status. These help us operate the service and investigate abuse.
How it is used
We use this information to maintain accounts, review membership requests, verify domain ownership, enforce hosted-service limits, return available updates, send account notifications, answer support requests and protect the service. We do not sell account information or use this site to run targeted advertising.
Hosting and email
The application, catalog, support inbox, account data, images and package storage run on our own server. Hosting infrastructure is provided by InterServer. Account and support emails are sent through our local mail service and then pass through the recipient’s email provider; they are not kept entirely within our server once sent. Authorized site administration may access records to operate the service. Owner membership alerts contain the requester’s name, email and requested plan. Support alerts link to the private inbox without including message text.
Cookies and external links
gnuHQ uses a necessary session cookie to keep sign-ins and forms secure. Blocking it prevents account and support forms from working. We do not currently load third-party analytics or advertising trackers. Product reference links open external websites with their own privacy practices.
Retention and deletion
Account and connection records are kept while needed to provide the account and investigate security issues. Completed email queue records are removed after 30 days; submitted message payloads are cleared after local mail acceptance. Support conversations, including original messages, all replies, timestamps and delivery status, stay on our server throughout an active membership. After a non-lifetime membership ends, the full history is retained for six calendar months before automatic deletion. Renewal before that deadline preserves the history. Lifetime membership history has no automatic expiry. Closing a ticket does not start or shorten the retention period. Tickets without a linked membership end date remain retained. Cleanup runs daily and waits for queued support email to finish. Clearing a submitted email’s delivery-queue payload does not remove its encrypted conversation copy. Routine server backups rotate on a seven-daily/four-weekly schedule; separate manual recovery copies may be retained until no longer needed. Backup copies are private and are not used as live customer records.
Use the contact form to request access, correction or deletion. We verify identity before releasing information or changing an account. We may retain records needed for security, disputes or applicable obligations. Information in recovery backups may remain until those copies expire or are securely removed; any restored account data must be reconciled with completed deletion requests.
Payments and your choices
Payments are off. This site does not currently collect card or bank information. You can browse without an account, disconnect domains from My HQ, request account assistance, or ask us to close an account. With an active account, transactional reset and membership emails are part of the service.
Changes
We update this page when our data practices change and change the date above. Material changes to an existing account’s data handling will be communicated through the service or its account contact details.