Privacy Policy

HOMESERVER LLC (DBA: Home Servers)
Last Updated: October 9, 2025

Our Privacy Philosophy

We build infrastructure for digital sovereignty. We practice what we preach.

This isn’t a 50-page privacy policy buried in legal jargon designed to hide data collection. This is a straightforward explanation of our commitment to your privacy.

Simple version: We collect the bare minimum needed to ship you a product and process payment. Once your HOMESERVER is deployed, we have zero access to it and collect zero data from it.

1. What We Collect

1.1 During Purchase and Shipping

When you buy a HOMESERVER, we collect:

Name and shipping address – to ship your device
Email address – for order confirmation and communication
Payment information – processed by our payment processor (we don’t store credit card details)

1.2 If You Contact Us

If you email us for support or inquiries:

Email address and message content – to respond to your inquiry
Any information you voluntarily provide – technical details, screenshots, etc.

1.3 Website Usage

Our website may collect minimal technical information:

Basic access logs – IP addresses, timestamps, pages visited (standard web server logs)
No cookies for tracking – we may use essential cookies for website functionality only
No analytics services – no Google Analytics, no Facebook Pixel, no tracking scripts

1.4 What We Do NOT Collect

We never collect:

Device telemetry or usage data
Files stored on your HOMESERVER
Network traffic or browsing history
Service access logs from your device
Location data beyond shipping address
Social media profiles or tracking
Behavioral data or profiling information
Any data from your HOMESERVER after deployment

By design, we cannot collect data from your device. There are no phone-home functions, no telemetry modules, no tracking capabilities built into HOMESERVER. We have zero visibility into what you do with your device after you receive it.

2. How We Use Your Information

2.1 Purchase Information

We use your purchase information to:

Process and fulfill your order
Ship your HOMESERVER to you
Send order confirmation and tracking information
Process warranty claims or returns if needed
Communicate about your order status

2.2 Support Communications

We use support communications to:

Respond to your questions or issues
Provide technical assistance
Improve our documentation based on common questions
Contribute to public knowledge base (with identifying information removed)

2.3 Legal Compliance

We may use or disclose information when required by law:

To comply with court orders or legal process
To respond to lawful requests from authorities
To protect our legal rights or defend against claims
To prevent fraud or abuse

3. Information Sharing

3.1 Who We Share With

Shipping carriers – Name, address, and tracking information to deliver your device

Payment processors – Transaction details to process your payment (they handle sensitive payment data, not us)

Law enforcement – Only if legally required by court order or applicable law

3.2 Who We Don’t Share With

We never sell, rent, or share your information with:

Advertisers or marketing companies
Data brokers or analytics firms
Social media platforms
Third-party services (except as noted above)
Anyone else, for any reason

No exceptions. Your data is not a revenue stream for us.

4. Data Retention

4.1 Purchase Records

We retain purchase information for:

Active orders: Until delivery is complete
Completed orders: Minimum required for tax/accounting purposes (typically 7 years per IRS requirements)
Warranty/return period: 30 days after purchase plus reasonable record-keeping period

4.2 Support Communications

We retain support emails for:

Active inquiries: Until resolved
Resolved inquiries: May be anonymized and retained for documentation purposes
You may request deletion after inquiry is resolved

4.3 Your Device Data

We don’t retain it because we never collect it. Once your HOMESERVER is deployed, all data on it is yours alone.

5. Data Security

5.1 How We Protect Your Information

Encrypted transmission – Data sent to/from our website is encrypted via HTTPS
Limited access – Only authorized personnel can access customer information
Minimal collection – We can’t lose what we don’t collect
No centralized databases – We don’t maintain massive user databases that could be breached

5.2 Your Device Security

This is your responsibility. Your HOMESERVER includes:

Encryption capabilities for sensitive data
PIN-protected admin access
Firewall and security tools
Full control over all security settings

We provide the tools. You provide the configuration and maintenance. See our documentation for security best practices.

6. Your Privacy Rights

6.1 Access and Deletion

You have the right to:

Request a copy of personal information we have about you
Request correction of inaccurate information
Request deletion of your information (subject to legal retention requirements)
Opt out of marketing communications (we don’t send marketing, but you can opt out if we ever do)

To exercise these rights: Email owner@arpaservers.com with subject “Privacy Request”

6.2 State-Specific Rights

California Residents (CCPA/CPRA):

Right to know what data we collect and why
Right to deletion (with exceptions)
Right to opt out of “sale” (we don’t sell data, so this is moot)
Right to non-discrimination for exercising rights

Other State Rights: If your state has privacy laws (Virginia, Colorado, etc.), similar rights apply. Contact us to exercise them.

6.3 Response Time

We will respond to valid privacy requests within 30 days or as required by applicable law.

7. Third-Party Services

7.1 Payment Processors

We use third-party payment processors (credit card processors, PayPal, etc.) who have their own privacy policies. They handle sensitive payment information so we don’t have to. Review their policies independently.

7.2 Services on Your HOMESERVER

Your HOMESERVER includes third-party open-source software (Jellyfin, Vaultwarden, etc.). These services run locally on your device and do not send data to us. However:

Some services may have phone-home capabilities (check each service’s documentation)
You are responsible for configuring these services according to your privacy preferences
Third-party software privacy practices are between you and those projects

We document how we configure these services, but ongoing privacy management is your responsibility.

8. Children’s Privacy

HOMESERVER is a professional infrastructure platform requiring system administrator-level technical competence. It is not designed for or marketed to children under 13.

We do not knowingly collect information from children under 13. If we learn we have collected such information, we will delete it promptly.

9. International Users

9.1 Data Location

HOMESERVER LLC operates in the United States. Your information is processed and stored in the U.S.

By purchasing from us, you consent to transfer of your information to the U.S., which may have different data protection laws than your country.

9.2 GDPR (European Users)

If you’re in the EU/EEA:

Legal basis for processing: Contract performance (we need your info to ship you a device)
Data controller: HOMESERVER LLC
Your rights: Access, rectification, erasure, restriction, portability, objection
Supervisory authority: You may lodge complaints with your local data protection authority

However, we have minimal ongoing relationship after device delivery, so most GDPR obligations are limited to the purchase/shipping phase.

10. Changes to This Policy

10.1 Updates

We may update this privacy policy:

Notice: Posted at arpaservers.com/privacy with updated date
Material changes: We’ll notify you via email if we have your address
No retroactive changes: Changes don’t affect data collected under previous policy terms

10.2 Historical Versions

Previous versions may be available upon request.

11. Anonymous Company Operation

11.1 Our Anonymity

HOMESERVER LLC operates with anonymous principals. We don’t disclose individual identities publicly to protect our ability to build privacy-focused tools without corporate retaliation.

11.2 Privacy Impact

Our anonymity enhances your privacy:

We understand why anonymity matters
We’re deeply committed to privacy because we practice it ourselves
We’re not building user databases to monetize or sell the company
We have no incentive to collect data we don’t need

11.3 Accountability

Anonymous doesn’t mean unaccountable:

HOMESERVER LLC is a registered legal entity
We have a registered agent in Iowa
We’re subject to all applicable laws and regulations
You can contact us at owner@arpaservers.com

12. Contact Us About Privacy

For privacy-related questions, requests, or concerns:

Email: owner@arpaservers.com
Subject: “Privacy Policy Question” or “Privacy Request”
Mail: HOMESERVER LLC, 315 5th St Suite 202, Waterloo, IA 50703

We will respond within 30 days.

13. Summary – What Makes Us Different

Most companies:

Collect everything they can
Sell data to advertisers
Track you across the web
Bury practices in 50 pages of legal jargon
“Privacy by policy” (we promise to protect the data we collect)

HOMESERVER LLC:

Collects only what’s needed to ship a device
Never sells data to anyone
Has zero tracking on devices
Explains practices in plain language
“Privacy by design” (we can’t violate privacy with data we never collect)

That’s the difference between renting from surveillance capitalists and owning your infrastructure.

HOMESERVER LLC – Building Infrastructure for Digital Sovereignty

HOMESERVER LLC
DBA: Home Servers
Registered Agent Address: 315 5th St Suite 202, Waterloo, IA 50703
Version 1.0 – October 9, 2025