Privacy policy
Last updated: 2026-11-04
What we collect
- Account and sign-in. The username and password you choose (your password is never stored in plain text — only a salted PBKDF2-HMAC-SHA256 hash), and the name of the account (organization) created for you.
- Your content. The server builds you create — models, hardware configuration, custom fields and names — and anything you add to the equipment catalog. This is private to your account.
- Sign-in security data. The IP address and time of sign-in attempts (successful and failed), kept for 30 days to detect abuse, and the IP address and time of your most recent successful sign-in.
Cookies
This site sets one cookie of its own: a random session token (HttpOnly, SameSite=Lax) that keeps you signed in. It carries no personal information — the database stores only a one-way hash of it — and isn't used for tracking or advertising.
Advertising
This site may show ads served by Google, including through Google AdSense, to help cover its hosting costs. Google and its advertising partners may use cookies or similar technology to serve ads and measure their performance, and, depending on your settings, to personalize ads based on your activity on this and other sites. See How Google uses information from sites that use its services for details. You can opt out of personalized advertising at Google Ads Settings, or disable ad cookies generally via www.aboutads.info/choices. Signed-in use of the configurator itself works the same whether or not you opt out.
Where your data lives
Everything is stored in a single database on the server this instance of ServerBOM runs on — there's no third-party backend or shared multi-tenant service beyond this one install. We don't sell your data. It's shared only with the infrastructure providers that host this server, and with Google for the advertising purpose above.
Your control over it
You can delete your own builds and catalog entries at any time. Your account's admin can disable or delete your user, and reset your password. Deleting an account removes its data once it has no users or builds left.
Children
This site is a professional IT tool and isn't directed at, or knowingly used by, children.
Changes
If this policy changes, we'll update the date above.
Contact
Questions about this policy or your data: [email protected].