Legal

Privacy policy

Last updated: 30 May 2026

Zentro Feedback is self-hosted. You run it on your own infrastructure — which means you own all your data. We don't have servers that store your users' information.

Recent changes

The following sections were updated on 30 May 2026:

Overview

Zentro Feedback is open-source, self-hosted feedback management software. Because you run it on your own infrastructure, you are the data controller — we have no access to anything stored on your instance.

This policy describes what data Zentro Feedback processes locally, and how it is handled.

Data you control

All data on your Zentro Feedback instance — user accounts, feedback posts, votes, comments, and attachments — lives in your own database on your own servers.

Note

Zentro Feedback maintainers have zero access to this data. You decide how it is stored, backed up, and deleted.

Data Zentro Feedback may process

Zentro Feedback processes the following data locally on your instance:

Account information — name, email address, and hashed password provided during registration.
Feedback content — posts, comments, votes, and reactions submitted by your users.
Usage data — timestamps, IP addresses for rate limiting, and session tokens.
Integration config — if you configure Discord, Slack, GitHub, or email integrations, tokens and settings are stored in your database.

Tip

None of this data is transmitted to Zentro Feedback maintainers or any third party by default.

Telemetry & update checks

Zentro Feedback may make outbound requests to the GitHub public API to check for software updates. These requests include only your current version number — no personally identifiable information is sent.

Note

All telemetry is opt-in only. No usage analytics, crash reports, or behavioural data is collected unless you explicitly enable it in your instance config.

Third-party integrations

Zentro Feedback supports optional integrations with Discord, Slack, GitHub, and email providers. When configured, data may flow to those services under their own privacy policies.

Warning

You are responsible for ensuring your use of third-party integrations complies with applicable laws and those services' terms.

Cookies & sessions

Zentro Feedback uses session cookies strictly to keep users authenticated. These are necessary for the application to function and are not used for tracking or advertising.

Tip

No third-party analytics or advertising cookies are set by Zentro Feedback.

Your rights (GDPR & others)

As the instance operator, you have full control over all user data — you can view, export, or delete it directly from your database at any time.

If you are a user of someone else's Zentro Feedback instance, please contact that operator regarding your data rights.

Note

For users in the European Union, rights including access, rectification, erasure, and portability apply in accordance with GDPR.

Data retention & deletion

Data is retained for as long as your instance is running and you choose to keep it. There are no external retention schedules imposed by Zentro Feedback.

Tip

You may delete any user data at any time via the admin panel or directly from your database.

Security

We take reasonable technical measures to protect the software from known vulnerabilities. Security releases are published on the GitHub repository.

Warning

You are responsible for keeping your instance up to date. Running outdated versions may expose your instance to known vulnerabilities.

Danger

Never expose your database, environment variables, or admin credentials publicly. Zentro Feedback maintainers will never ask for these.

Changes to this policy

We may update this policy from time to time. Changes will be reflected in the Zentro Feedback repository and noted in the changelog.

Note

Continued use of the software after changes constitutes acceptance of the updated policy.

Contact

For questions about this privacy policy, open an issue on the Zentro Feedback GitHub repository or reach out on Discord.