Privacy policy
Last updated 26 October 2026
The short version. This site collects nothing. The console keeps your email, your passkeys' public keys and health reports from your server, on a server in Russia, and deletes them when you delete the account. No analytics, no ads, no third-party scripts.
Who is responsible
The operator of personal data is individual entrepreneur Denis Aleksandrovich Ilguzin (ИП Ильгузин Денис Александрович), OGRNIP 326508100228971, INN 423005820454, Dubna, Moscow Region, Russia. Questions and requests: hello@getlaavu.com.
The operator processes personal data under Federal Law No. 152-FZ "On Personal Data" of the Russian Federation. There is also a Russian version of this policy; if the two differ, the Russian one prevails.
getlaavu.com
The site is static pages and the install script. It sets no cookies, runs no analytics, loads nothing from other domains and keeps no access logs. The install script downloads releases from GitHub, so GitHub sees your address when you install; see GitHub's privacy statement.
Laavu itself, the software you install on your server, sends nothing to us. Your sessions, files and model tokens stay on your server.
What the console keeps
- Account: your email, when the account was created, your notification settings, time zone and interface language.
- Sign-in: public keys of your passkeys and their names. Signed-in sessions with the browser's user agent, for 30 days. One-time links sent to your email, until used or expired.
- Servers: each linked server's key, the name you gave it, Laavu versions, the rights you left on, and when it was online.
- Health reports from the server: versions, services, disk and memory, certificate dates, number of agents and their workers, pending OS updates. Agent names are replaced with agent-1, agent-2 unless you turn names on on the server.
- Jobs and alerts: what the console ran on your server, the result and short output, and alerts it raised.
- Browser notifications: the push subscription address your browser gave the console, if you turned push on.
- Log of what happened: sign-ins (with the user agent), links, jobs, unlinks and settings changes.
The console does not store IP addresses of visitors. It looks at them only to slow down too many requests from one network.
Why
To run the service you signed up for: sign you in, keep your server updated, show its health and tell you when something breaks. To keep the console and other people's servers safe from abuse. The legal basis is the contract between you and the operator, that is, the beta terms you accept when creating an account.
Where and who else
- The console and its database run on a server in Moscow, Russia, rented from HOSTKEY.
- Email is sent through Unisender Go, a service in Russia. It receives your address and the text of each message.
- If you turn on browser notifications, they are delivered by your browser's push service: Apple, Google or Mozilla, which may be outside Russia. The push service receives the subscription address and an encrypted message it cannot read.
We do not sell or share your data with anyone else, and we do not use it for advertising.
How long
- Health reports: 90 days, thinned to one a day after the first day.
- Jobs and their output: 90 days.
- Signed-in sessions: 30 days or until you sign out.
- Everything else: until you delete the account.
- After deletion, entries in the log of what happened are kept without your email, to investigate abuse. Backups of the database roll over within two days.
Cookies
The console sets one cookie that keeps you signed in. It is needed for the service to work, so there is nothing to opt out of. The site remembers the language you picked in your browser's storage; that never reaches the server.
Your rights
You can see your data in the console (servers, reports, jobs, the log), change notification settings there, and delete the account under Settings. You can also write to hello@getlaavu.com to get a copy of your data, correct it (including your email), have it deleted or ask how it is processed. We answer within 10 working days. If you think we break the law, you can complain to Roskomnadzor, the Russian data protection authority.
Children
The console is for people 18 and older. We do not knowingly keep data of anyone younger.
Changes
If this policy changes in a way that affects what we keep or who receives it, we will email account holders before it takes effect.