Pular para o conteúdo
LGM-OS Enterprise
Casa Empresa
Entrar Comprar
BR

Privacy policy

Last updated: 2026-10-27

This website sells and delivers LGM-OS licences. Here is, plainly, what is kept about you, why, who it is shared with and what you can ask for at any time.

Your NAS does not pass through here. Your files, your photos, your cameras and your backups stay on your own machine, at home. Once the licence is activated, LGM-OS works with this website switched off: it is checked inside the machine itself.

Who is responsible for this website

  • Controller: Luis García Menéndez
  • Tax ID: 71726924K
  • Address: Calle Colegio San Ignacio
  • Contact: info@lgm-os.com

What is kept about you

From your account

  • Your email address. It is how you sign in, and what your licences are tied to.
  • Your password, hashed (bcrypt). The password as you type it is not stored anywhere and cannot be recovered: neither you nor we can ever read it again.
  • The language we write to you in, and when you accepted the terms and which ones (their date).
  • If you switch on two-step verification: the secret you share with your authenticator app, and the fingerprints of your recovery codes. The recovery codes themselves are not stored, which is why they are shown only once.
  • If you add a passkey (a device's face, fingerprint or PIN): that device's public key, its identifier, the name you give it and when it was last used. A public key opens nothing: whoever took that table could not sign in with it.

From your licences

  • The signed key, the plan, whether it is active or revoked, and the dates. The key carries the email of the account it was issued for: if you give a licence away, whoever gets it will see it.
  • The identifier of the purchase that paid for it, which is what stops two licences from being issued for the same payment, or the gift code you got it with.
  • The name you give it and the machine it is on.

What your NAS tells this website

  • The heartbeat, if the machine has a licence or a trial: at start-up, every twelve hours, every hour while it is in "data only" mode, when you switch on LGM Tunnel and when you press "Check now". It carries:
    • the licence number and a digest of its key (SHA-256), which proves the machine holds it without being usable as a licence. The full key only travels when you activate it, when the machine is renamed, when it asks for its LGM Tunnel address and when this website asks for it to hand over a new licence (an extended trial, or a licence you assign from your account);
    • a machine fingerprint: a one-way digest of the machine identifier (machine-id) with nothing personal inside. It only tells «the same machine again» from «a different machine», because each licence is good for one;
    • the LGM-OS version, total and free space, how many alerts are pending and whether LGM Tunnel is running;
    • the machine's name, the fingerprint of its panel's certificate and the addresses it answers on: your local network ones with their port (up to eight) and, if you have them switched on, the VPN one and your dynamic DNS domain. That is what lets your account give you the LGM Connect code, and the app find your NAS.
  • The machine's technical details, with that same heartbeat, only if you switch them on (Licence → "Share technical details"; off by default), so that we can help you if something fails: maker and model of the machine and board, BIOS, processor, memory, the disks (model, size, type and health, no serial numbers), the volumes (type, size and usage, not their names), the network and graphics cards, the system versions, the uptime and how many accounts, apps, containers, virtual machines and cameras there are. No serial numbers, no addresses and nothing of yours inside. Right there you can see exactly what is sent. If you switch it off, the next heartbeat arrives without them and the stored ones are deleted.
  • The licence check: every twelve hours (every hour while in "data only" mode), its number, to know whether it is still active.
  • The licensing query: once a day, every hour while the machine is in "data only" mode, when you open the panel (at most once a minute) and when you press "Check now". It carries no data: it is the question «are licences required?», which lets the product be freed on every machine at once. Every NAS makes it, with or without an account, so this website sees the public IP address each one asks from, as any server sees who calls it. This website does not keep it; the hosting provider does record it in its access log (see below).
  • When you activate a licence: the key, the machine fingerprint and its name. When you link the account: the fingerprint, the name and the version, a single-use code that expires after fifteen minutes and the IP address the request comes from; the code and the IP are deleted an hour after expiring.
  • Updates: when you open Updates, or once a day if you switch on automatic checking, the NAS asks here which is the latest version and downloads it from GitHub.
  • Failure reports, only if YOU send them from the panel ("Did something go wrong?"): what you write, the version, the app that failed, the licence number with the digest of its key, the machine fingerprint and —if you leave the box ticked— the technical details above and the last error lines of the panel's log, from which the NAS first strips passwords, addresses, email addresses, account names and personal folder paths.

And that is everything the machine tells this website. No file names, no folders, no user accounts, nothing about what you do with it. It is what lets your account tell you «1.68.0 · seen 3 h ago · 2.1 TB free» without opening the panel, and what tells us which version each machine runs without having to ask anyone.

From LGM Tunnel, if you use it

The name you chose for your address, the identifier of the tunnel that reaches your home and the last time your NAS asked for its token. What comes in through that address goes over Cloudflare's network (see «Who else handles them»). If you do not use LGM Tunnel, none of this exists.

Who else your NAS talks to

None of this goes through this website or reaches us, but it leaves your machine and you have a right to know. None of it carries your files.

  • The names it looks up. By default the NAS resolves internet names with the public DNS servers of Google (8.8.8.8) and Cloudflare (1.1.1.1). Change them in Control Panel → Network.
  • Whether it has internet. Every three minutes it opens and closes a connection to 1.1.1.1 and 8.8.8.8 (port 53), sending nothing, to warn you if it goes offline.
  • App icons. Your browser loads them straight from cdn.jsdelivr.net when you open the store, or the NAS downloads them from there once and keeps them. The store recipes travel inside each version: the NAS downloads no catalogue.
  • When installing and updating: Debian packages (deb.debian.org and security.debian.org), the LGM-OS package (from GitHub), Node.js (deb.nodesource.com), the Python (pypi.org) and JavaScript (registry.npmjs.org) libraries, rclone (downloads.rclone.org) and the ClamAV antivirus signatures (its mirror servers).
  • Your home's public address, only if something depends on it —dynamic DNS, the VPN, something published from the NAS or a Let's Encrypt certificate—: at most every hour (and on every dynamic DNS update), from api.ipify.org, checkip.amazonaws.com or ifconfig.me, and over IPv6 from api6.ipify.org, v6.ident.me or ipv6.icanhazip.com. Also when you open the VPN or external access screens.
  • Only if you use the feature: the dynamic DNS provider you choose (DuckDNS, No-IP or Cloudflare); Let's Encrypt, when certificates are issued and renewed; the country lists of www.ipdeny.com, if you block by country; film, series and music details and artwork (TMDb, OMDb, Wikidata and Wikimedia, TVmaze, Kitsu, MusicBrainz, Cover Art Archive, Deezer, iTunes, TheAudioDB, LRCLIB) and OpenSubtitles subtitles, when you look them up; Telegram, ntfy or the email or webhook you set up for alerts; the cloud you choose for your backups (for instance, Microsoft for OneDrive); speed.cloudflare.com and proof.ovh.net, when you run the speed test; cloud.debian.org or cloud-images.ubuntu.com, when you download a virtual machine image; and the registry its recipe names (Docker Hub, GitHub…), when you install or update an app.
  • The machine's own screen. If you plug in a monitor, what you see is a browser that only opens the NAS's own panel, with its online services switched off.

The security log

What is done from the admin side —issuing, revoking or deleting a licence, releasing a machine— and some actions on your account —asking for the recovery link, changing the password with it, linking or rejecting a machine, putting a licence on a machine or renaming it— leave one line with the date, the account's email, a short detail and the IP address. It is there to know who did what and to spot unwanted access.

From the website chat

If you write in the chat, what you write is kept, along with the date, which page you wrote from and the language of the site — nothing else: no name, no email, no account, because the chat does not ask for one. If you are signed in, you can tick a box to say who you are: your account email and which licences it has are then kept too, which is what is needed to look into a licence problem. If you do not tick it, neither is kept. Your browser keeps a key (portal-chat) that is the only thing identifying you as the person who wrote it; delete it and that conversation is no longer yours. Messages are read and answered from this site's administration. If it is switched on, Telegram only gets the notice «new chat message» with its number, so that the phone of whoever answers rings: not what you write, not the page, not who you are. Conversations are deleted after 90 days without new messages.

While you sign in

So that nobody can try passwords in bulk, the server counts attempts per IP address and per account. That count lives in the server's memory, clears itself within minutes and never reaches any database.

What is not kept

  • Your password in the clear. Never.
  • Your card. The payment screen belongs to Polar and lives on their domain: card numbers never pass through this server, not for an instant.
  • Your files. They stay on your machine.
  • No profiles, no ads, no data sold to anyone. That business does not exist here.

Your email is only used for what your account needs: the welcome, your licence key and the purchase confirmation, the link to recover your password and the security notices (password changed, passkey or two-step verification added or removed).

On top of that, two kinds of email that always carry a link to unsubscribe:

  • News and offers —new versions, features, the odd offer—, only if you say yes: with the box when you create your account or with the question shown once when you sign in. It comes unticked, and saying no changes nothing about your account.
  • Service notices, few and only when you need to know something to use what you have, such as an important update for your NAS.

To choose who gets each one, only what is already in your account is used: the licence type, your NAS version, the sign-up date and the language. Whether you open the emails or what you click is not measured: they carry no tracking pixels or tracking links.

Visits to this website

Visits are measured here, with nobody in between: no cookies and no third-party service. What is kept are daily aggregate counts —which pages were viewed, where people arrive from, and whether it is a phone or a computer—, not people's visits. Your IP address is not stored, and if your browser asks not to be tracked (Do Not Track or the Global Privacy Control signal), nothing is counted at all.

So as not to count twice someone who opens several pages, a one-day fingerprint is worked out from your IP address and your browser, mixed with a random key that is thrown away at the end of the day: the IP is not stored anywhere and the fingerprint is deleted after 48 hours.

Who else handles them

These providers process data on this website's behalf, under their data processing agreement (Art. 28 GDPR):

  • Cloudflare, Inc. (USA): the whole website goes through its network, which protects and delivers it, so it sees the IP address and the request of every visit. If you use LGM Connect, your address and the tunnel to your NAS are also created there, and traffic coming in through that address is decrypted on its network before travelling on, encrypted again, to your home.
  • Render Services, Inc. (USA): hosts this website's server and records the requests in its access log, the NAS ones too, with the IP address they come from.
  • Supabase, Inc. (USA): the database, on servers in Ireland.
  • Resend, Inc. (USA): sends your account's emails. It gets your address and the text of each email; nothing else.
  • Proton AG (Switzerland): the contact mailbox (info@lgm-os.com), if you write to us, and the one that sends the news and the service notices. It receives your address and the text of each email.
  • GitHub, Inc. (USA): keeps the daily backup of the database, encrypted before it leaves with a key GitHub does not have. It also serves the large downloads —the installation image, the update packages and the LGM Connect apps—: when you press «Download», your browser goes to GitHub and GitHub sees that request.
  • Telegram, only if whoever answers uses it for the chat notice: it gets «new chat message» and its number, never anything of yours.

Polar Software, Inc. (USA; polar.sh) does not act on our behalf: it is the merchant of record for the licence, so it is Polar who charges you, who declares and pays the VAT of your country and who answers for the payment data under its own privacy policy. Your email and an internal number for your account are sent, so the payment can be tied to it; Polar sends back word that it is paid.

Discord and Ko-fi are links to third-party pages. Nothing is sent to them from here; if you open them, their rules apply and not ours.

Outside the European Economic Area. Several of these companies are in the USA: data travels under the EU-US Data Privacy Framework where the company has joined it and, otherwise, under the European Commission's standard contractual clauses. Switzerland has an adequacy decision. You can ask for a copy of these safeguards at the contact address. Beyond this, your data is not passed on to anyone unless the law requires it.

What for, on what legal basis and for how long

  • Your account and licences —giving you the account, issuing and moving your licences, sending their emails—: it is the contract you accept when you sign up or buy (Art. 6(1)(b) GDPR). Kept while you have the account. If you delete it, the personal part goes at once; of your licences, just enough to prove a purchase or answer a claim is kept, blocked (number, key, date and purchase, when and with which version a machine last used it and, while that machine uses it, its LGM Tunnel address), until five years after the deletion or after a machine last used it, whichever comes later.
  • What your NAS sends —heartbeat, activation, linking and checks—: also the contract, because without it the licence, LGM Tunnel and your machine's card do not work. Kept while the machine is linked to your account. The machine fingerprint and its trial dates are kept even if you delete the account, so that each machine and each account get a single trial: our legitimate interest in preventing abuse (Art. 6(1)(f)).
  • Technical details and failure reports: because you decide to send them (your consent, Art. 6(1)(a)), which you withdraw by switching the box off, without affecting what was done before. Technical details are deleted when you switch it off; reports, one year after they are marked as solved.
  • News and offers by email: your consent (Art. 6(1)(a) GDPR and Art. 21 of the Spanish LSSI). You withdraw it with the link in any of those emails, without affecting what was sent before. Your answer and its date are kept while you have the account, as proof of what you said.
  • Service notices: our legitimate interest in you being able to use what you have (Art. 6(1)(f)). You can object with the same unsubscribe link.
  • The chat: to answer you, because you ask us to (Art. 6(1)(b)); your email and licences only if you tick the box (your consent). Deleted after 90 days without new messages.
  • The security log, the attempt limits and the hosting access log: our legitimate interest in protecting accounts and being able to answer for each licence (Art. 6(1)(f)). The log is kept two years; the limits, a few minutes in memory; the hosting log, whatever its plan sets (7 to 30 days).
  • Visits: our legitimate interest in knowing how many people visit, without identifying anyone (Art. 6(1)(f)). The fingerprint lasts 48 hours; daily counts are not personal data.
  • Backups of the database, encrypted: so accounts and licences are not lost (Art. 32 GDPR). Kept 90 days; if one ever has to be restored, erasures requested since are applied again.
  • The browser session and cookies: each for its own lifetime, listed on the cookies page.

An email address and a password are needed to have an account: without them you cannot buy or keep licences. No profiling is carried out.

What you can do yourself, right now

Several things need no asking: you do them from My account and they take a second.

  • Download your data: everything on this page that is yours, in one file (My account → Your account).
  • Delete your account, with your password (My account → Your account).
  • Change your password, which also signs you out on every other device.
  • Remove a passkey or switch off two-step verification.
  • Release a licence from the machine holding it, to move it to another one.

Your rights

You can ask for access to your data, have it corrected or erased, restrict its use, object to uses based on legitimate interest and take it with you in a machine-readable format. Anything based on your consent can be withdrawn at any time, without affecting what was done before.

For anything not in My account, write to info@lgm-os.com from your account's address (from another one we will ask you to prove it is yours). It is free and we answer within one month.

If you think your data has not been handled properly, you can complain to the Spanish Data Protection Agency (aepd.es, C/ Jorge Juan 6, 28001 Madrid, Spain) or to the data protection authority of your country.

Children

You must be at least 14 to open an account, and no data is requested knowing that it belongs to someone younger. To buy a licence you must be an adult or have your parents' or guardians' permission.

If this changes

So does the date at the top, which is what it is there for. There is no email announcement for every tweak.

Um café