Privacy Policy

Adminium is free, open-source software that you run on your own infrastructure. This policy explains what information the Adminium website at adminium.dev collects — which is very little — and, just as importantly, how the Adminium software itself handles your data. It covers this website and its subdomains; it does not govern the third-party services we link to. If you are in the EU, the EEA, or the UK, see your rights under the GDPR below.

The short version

• There are no accounts, sign-ups, or payments — there is nothing to log in to.
• The website counts visits with Umami, an analytics tool we run ourselves on our own server in Frankfurt. It sets no cookies, stores nothing on your device, and never stores your IP address. There are no ads and no third-party trackers.
• The Adminium software runs on your servers and talks to your database directly. We never receive, see, or store your database contents.

Information the website collects

Nothing you hand us

adminium.dev has no forms, newsletters, or accounts, so we do not ask for or collect your name, email address, or any other personal detail.

Your theme preference

If you switch between light and dark mode, that choice is saved in your browser's local storage so the site can remember it on your next visit. It stays on your device and is never sent to us.

Server logs

The site is served from our own web server. Like most servers, it may keep short-lived, standard access logs — for example an IP address, a browser user-agent, and the page requested — to keep the site secure and reliable. We do not use these logs to profile you or track you across other sites, and we do not sell or share them.

Visit statistics

To see how people find the site and which pages help them, we count visits with Umami, an open-source analytics tool. We host it ourselves, on our own server in Frankfurt, Germany, at stats.adminium.dev; no analytics company receives your data.

When you open a page, a small script reports:

• the page you viewed and its title, including any campaign tags in the address (such as utm_source);
• the page that referred you, if your browser sends one;
• your browser, operating system, device type, screen size, and language;
• your approximate location — country, region, and city — which the server looks up from your IP address when the visit arrives.

Your IP address is used only for that lookup and to work out the identifier below; it is never stored. Umami sets no cookies and stores nothing on your device. To tell repeat page views apart from new visitors, it computes a one-way identifier from your IP address, your browser's user-agent, and a secret value that is replaced at the start of every month. Only the identifier is kept. It cannot be turned back into your IP address, and once the month's secret value is replaced, a new visit cannot be linked to your earlier ones.

We look at these numbers only in aggregate — how many visits, from where, to which pages. We do not use them to identify you, build profiles, or advertise, and we do not share them.

If your browser sends a Do Not Track signal, the script sends nothing at all.

When you click a Download link on a marketplace page, the page tells our server which file you chose — the app or add-on and its version — so that we can count how often each one is downloaded. Nothing about you is sent or stored with that count: no identifier, no cookie, and no IP address. So that one address cannot inflate the count, the server holds each address in memory for one minute and never writes it down.

Cookies and tracking

The site sets no cookies at all, and embeds no advertising or third-party trackers. The visit statistics described above store nothing on your device. The only thing stored in your browser is the theme preference, which you set yourself and which uses local storage rather than a cookie. Because the site sets no cookies and stores no identifiers on your device, it shows no cookie-consent banner.

Your rights in the EU, EEA, and UK

If you live in the European Union, the European Economic Area, or the United Kingdom, the GDPR and the UK GDPR give you rights over your personal data. adminium.dev has no accounts, so the only personal data we process is the limited server-log information and the visit statistics described above — and these rights apply to both.

Who is responsible (data controller)

The data controller for adminium.dev is the Adminium project, which operates this website. You can contact us about data protection through the project's GitHub repository — open an issue, or use the repository's security policy for anything private.

What we process, and why

• Server logs — including your IP address, browser user-agent, and the page requested. We process these under our legitimate interests (Article 6(1)(f) GDPR): keeping the site secure, available, and working correctly. We never use them for advertising or profiling.
• Visit statistics — the page, referrer, browser, operating system, device type, screen size, language, and approximate location described above. We process these under our legitimate interests (Article 6(1)(f) GDPR): understanding, in aggregate, how many people the site reaches, how they find it, and which pages are useful. We chose a setup that stores no IP addresses and nothing on your device so that this interest does not override yours.
• Theme preference — stored locally in your browser and never sent to us, so we do not process it as a controller.

We do not process special categories of personal data, we do not sell your data, and we do not use it for automated decision-making or profiling.

How long we keep it

Server logs are retained only as long as needed for security and reliability, then rotated and deleted. Visit statistics are kept for 24 months, so we can compare one period with the next. After that the individual records are deleted, and all we keep are monthly totals — for example, how many visits a page had in a given month, or how many came from a given country. Those totals contain no identifier and cannot be linked to anyone. We hold no other personal data about website visitors.

International transfers

The website and its visit statistics run on a server in Frankfurt, Germany, rented from our hosting provider, DigitalOcean. The statistics database lives on that server and is not sent anywhere else. If our hosting provider's handling of the server ever involves processing personal data outside the EEA or the UK, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses — where the law requires them.

Your rights

Subject to the conditions and exceptions in the GDPR, you have the right to:

• access the personal data we hold about you;
• rectify data that is inaccurate or incomplete;
• erase your data (the "right to be forgotten");
• restrict or object to processing, including processing based on our legitimate interests;
• portability — receive your data in a portable, machine-readable format;
• withdraw consent at any time, where we rely on consent (we generally do not).

Your right to object to the visit statistics. Where we rely on legitimate interests, you can object at any time (Article 21 GDPR). The quickest way is to turn on Do Not Track in your browser: the statistics script then sends nothing. Blocking stats.adminium.dev with a content blocker has the same effect. You can also object by contacting us.

To exercise any of these, contact us through the GitHub repository above. Our server logs are short-lived and our visit statistics store no IP address or name, so we may be unable to identify you from that data alone (Article 11 GDPR) and may ask for details to help locate any records.

You also have the right to lodge a complaint with a supervisory authority — your national data-protection authority in the EU or EEA, or the UK Information Commissioner's Office (ICO) in the United Kingdom.

The Adminium software and your data

This is the part that matters most. Adminium is self-hosted: you run it on your own machine or server, and it connects directly to a database you control.

• Your data stays with you. Adminium reads and writes your database on your own infrastructure. Its contents never pass through us.
• Setup reads schema, not rows. When you connect a database, Adminium introspects table and column metadata to generate the admin UI — schema only, never your rows.
• No phone-home of your data. We do not receive your records, your queries, or your database credentials.

Because you host Adminium yourself, you are the controller of the data you manage with it, and your own practices and applicable law govern that data.

Third-party links and deploy partners

adminium.dev links out to third-party sites, including GitHub, our documentation, and cloud platforms that can host Adminium for you. Those services have their own privacy policies, which we do not control. Some of the deploy links are affiliate links:

Adminium may earn a commission from these platforms; the price you pay is unchanged.

Children

Adminium is a developer tool. It is not directed at children under 13, and we do not knowingly collect information from them.

Changes to this policy

We may update this policy as the project evolves. When we do, we will change the "Last updated" date shown at the top of this page.

Contact

Questions about privacy? The project lives on GitHub — open an issue or use the security policy in the repository to reach us.