Privacy

Last updated: October 22, 2026. This page covers panel.lightfoot.cloud, the sign-in site for Lightfoot Cloud. Run by Daniel Lightfoot, a sole proprietor doing business as Lightfoot Cloud, Kentucky, USA. Privacy and data requests: [email protected]. Legal notices: [email protected].

Lightfoot Cloud hosting is offered only to customers in the United States; data is stored and processed in the US.

What we store

• Account: your email, a password hash (never the password itself), your memberships and roles, and when you joined.
• Invites: the invited email and a hashed invite token. We aim to delete them within 30 days after the invite is accepted or expires.
• Sites: name, where it is hosted (our server or AWS), domain, DNS and certificate status, contact email, owner email, and check reports (URL, HTTP status, page errors, failed pages, screenshot note).
• Sign-in protection: your IP address and email/key with the attempt time, in a rate-limit table that stops password guessing. We aim to delete these within 30 days (today the table is cleared in bulk).
• Domain orders: domain, confirmed price, and registrar order ID.

Published contact email

The contact email you enter for a site is published on that site’s public page (index.html) so visitors can reach you. Use an address you are happy to make public; change it any time in the panel.

Who processes it

• Cloudflare — DNS, domain registration, network and access logs.
• Amazon Web Services — CloudFormation, S3 and CloudFront for sites hosted on AWS, plus their access logs.
• Let’s Encrypt — certificates (domain names only).
• Our own GitLab and servers in Kentucky.

We don’t use New Relic on the panel. Processing happens in the United States.

Cookies

panel_session — sign-in cookie for panel.lightfoot.cloud only; HttpOnly, Secure, SameSite=Lax; lasts 14 days. It is signed (not encrypted) and holds only your user ID, a CSRF token and an optional one-time notice; no email or password. Strictly necessary.

How long we keep it

Accounts and sites are kept while your account is open. If a hosting payment fails, your site is suspended on day 8 and its files, settings and hosting data are deleted on day 38 (after reminder emails and a final warning); backups holding them are deleted within 30 further days. After you cancel, site data is deleted 30 days after the paid period ends. After you close your account or ask us to delete it, we aim to delete account and site records within 30 days. Server logs: we aim to keep them no longer than 30 days. Billing records are kept as long as tax law requires. Domain registration records may be kept by the registrar under its own rules.

Your rights

Email [email protected] to see, correct, delete or export your data, or to object to processing. Requests are handled by hand, and we respond within 30 days. California residents also have the rights to know, delete, correct and opt out of sale or sharing (we do neither), without being treated differently.

Not provided

No shell, file manager, database or hosting credentials.