Privacy Policy

1. Overview & Scope

At tewb.net, we value transparency and respect your personal privacy. This Privacy Policy describes our practices regarding the collection, handling, storage, and protection of information obtained through your access to and use of tewb.net and its associated subdomains.

We operate on a privacy-first, local-first philosophy: we do not sell, rent, monetize, or broker personal information to advertisers or commercial brokers under any circumstances.

2. Information We Collect

Depending on how you interact with our network, we may collect the following categories of information:

A. Automatically Collected Connection Data

When you access our servers, our reverse proxies, web servers, and firewall engines automatically record standard technical log entries, which may include:

• Your Internet Protocol (IP) address.
• HTTP request headers, including date/time stamp, requested URL path, HTTP method, and response status code.
• Browser user-agent string (operating system, browser type, and version).
• Referring website address (if forwarded via a link).

B. Account and Authentication Data

For authorized users who log into private services or subdomains (such as media servers, remote consoles, or dashboards):

• Usernames, hashed passwords, and cryptographic authentication tokens.
• Session states and login timestamps.
• Application-specific preferences and configuration settings.

C. Voluntary Communications

If you contact the Operator directly via email (e.g., admin@tewb.net), we collect your email address, message content, and any metadata necessary to answer your inquiry.

3. How We Use Information

Collected information is used strictly for technical maintenance, operational stability, and security enforcement:

• Service Delivery: Routing and delivering requested web pages, streaming media, and application responses.
• Security Auditing: Detecting, diagnosing, and preventing unauthorized intrusion attempts, brute-force attacks, DDoS traffic, and protocol anomalies.
• Troubleshooting & Performance: Monitoring server resource utilization, memory consumption, latency, and uptime to ensure high availability.
• Legal & Policy Compliance: Enforcing our Terms of Service and safeguarding homelab network assets.

4. Cookies & Storage

We use only essential functional cookies and local storage tokens:

• Strictly Necessary Cookies: Required to maintain authenticated user sessions across our web applications and reverse proxy endpoints.
• Functional Preferences: Preserving user interface settings such as dark/light themes or player options.
• Zero Tracking Cookies: We do NOT employ third-party tracking pixels, Google Analytics, social media widgets, or behavioral advertising cookies on this website.

5. Information Sharing

Information may only be disclosed under the following narrow circumstances:

• Service Infrastructure Providers: Essential underlying network providers (such as authoritative DNS providers, domain registrars, and internet service providers) strictly to transmit internet packets.
• Legal Compliance: When strictly required by applicable law, court order, or governmental regulation, or to protect against imminent threat to life or physical infrastructure.

6. Data Security & Encryption

We apply defense-in-depth security measures to protect information stored on and transmitted through our infrastructure:

• End-to-End TLS Encryption: All public web traffic is encrypted using modern TLS (v1.2 and v1.3) protocols with strong cipher suites and valid Let's Encrypt certificates.
• Network Isolation: Services run inside dedicated Proxmox VE Linux Containers (LXCs) and Virtual Machines (VMs) separated by virtual bridges and isolated network boundaries.
• Firewall Perimeter: Inbound and outbound connections are inspected and filtered by dedicated OPNsense firewall routing appliances.

7. Data Retention Policy

We retain technical logs only for as long as necessary for administrative and security needs:

• Access & Error Logs: Standard web server and proxy access logs are rotated automatically on a regular schedule (typically 7 to 30 days) and purged thereafter.
• Account Data: Authorized user accounts and associated credentials are kept until access is revoked by the Operator or deleted upon user request.

8. Your Rights & Control

You have the right to:

• Inquire whether we hold personal data relating to your account.
• Request the correction or update of any inaccurate personal information.
• Request the deletion of your account and associated session records from our databases.
• Object to or restrict specific processing where applicable.

To exercise any of these rights, please email our administrative contact listed below.

9. Children's Privacy

Our Services are not directed to children under 13 years of age. We do not knowingly solicit or collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can promptly delete such data.

10. Policy Updates

We may update this Privacy Policy from time to time to reflect modifications in our infrastructure, technological updates, or legal obligations. Any updates will be posted directly to this page with a revised "Effective Date".

11. Contact Administration

For privacy inquiries, data requests, or concerns regarding your information, please reach out to: