Our Commitment to Privacy
Libre WebUI is built on a foundation of privacy and user sovereignty. This Privacy Policy explains how we handle information on this website (librewebui.org) and within the Libre WebUI software application.
hello@kroonen.ai
The Libre WebUI Software
Local-First Architecture
Libre WebUI is designed as a self-hosted, local-first application. When you run Libre WebUI:
- Conversations, documents, settings, and credentials are stored on infrastructure you operate; configured providers and tools receive only the data needed for requests you choose
- No vendor telemetry by default — The Libre WebUI project receives no product-usage telemetry; your deployment keeps local operational records and exports OpenTelemetry only when an operator enables it
- Sensitive-data encryption — Supported sensitive application values are encrypted at rest with AES-256-GCM; this is not full-disk or end-to-end encryption, and Work files follow your storage controls
Third-Party AI Providers
When you choose an external AI, tool, speech, or media provider, your Libre WebUI deployment sends the prompt, context, files, audio, or tool arguments needed for that request under the provider's policies.
Depending on the features and settings you choose, your Libre WebUI deployment may connect to AI and embedding providers, OpenAPI or HTTP MCP tool servers, web search, image, audio and video generation or editing, speech services, OAuth, model catalogs, plugins, Cloudflare Turnstile, and Libre Claw. Those requests come from the deployment you control and follow the policies of the services and operators you choose.
For the strongest data locality, use local models and self-hosted services, and review every enabled provider and tool route.
Document Processing (RAG)
Uploaded documents are stored in your configured Libre WebUI storage, and supported source text is encrypted at rest. A selected embedding or chat provider receives only the document content needed for that operation; team PGVector deployments protect numeric embeddings through database, transport, and backup controls.
This Website (librewebui.org)
Information We Collect
This website is a static informational site. We collect minimal information:
- No cookies for tracking — We do not set cookies to track your behavior across sites
- Local storage only — We use browser localStorage to remember your theme preference (light/dark mode) and sessionStorage for language preference. This data never leaves your browser
Hosting and Server Logs
This website is hosted on Cloudflare Pages. Cloudflare may collect standard server logs which include:
- IP addresses
- Browser type and version
- Pages visited and timestamps
- Referring URL
Third-Party Services
This website uses the following third-party services:
- GitHub API — We fetch release information from GitHub's public API to display the changelog. No personal data is transmitted
External Links
This website contains links to external sites (GitHub, documentation, social media). We are not responsible for the privacy practices of these external sites.
Libre Bot
Libre Bot · Kroonen AI, Inc.
The Libre Bot widget loads automatically when you visit this live website. Libre Bot’s Privacy Policy describes the technical, session, usage, and chat data processed by the service. Privacy Policy.
Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access
- Deletion
- Portability
- Objection
Children's Privacy
This website and software are not directed at children under 13. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of any material changes by updating the "Last updated" date at the top of this page.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please:
Open Source Transparency
Libre WebUI is open source software licensed under the Apache 2.0 License. You can verify our privacy claims by reviewing the source code at github.com/libre-webui/libre-webui.
Our commitment to privacy is also codified in our Ethical Charter.