Privacy Policy

Last updated: March 12, 2026

Overview

Insights Plus is a self-hosted network monitoring tool and companion browser extension for UniFi gateways. It captures syslog messages, enriches them with GeoIP and threat intelligence, and presents everything through a live dashboard.

Data Collection

This extension and server do not collect, transmit, or store any personal data. There is no analytics, telemetry, tracking, or third-party data sharing of any kind. No IP addresses, hostnames, usernames, network configurations, or any other identifiable information ever leaves your infrastructure.

Heartbeat Monitoring

To help us understand how many instances of Insights Plus are actively running, the server sends a lightweight anonymous heartbeat signal at regular intervals. This heartbeat contains:

  • A randomly generated anonymous instance ID (not tied to any user or network)
  • The application version number

No personal data, IP addresses, network information, configuration details, or any other identifiable information is included. The sole purpose is to track the approximate number of active installations. This heartbeat can be disabled at any time via the application settings.

Data Flow

All communication is strictly between your browser and two user-specified servers:

  1. Your UniFi Controller - The extension injects enrichment badges and an embedded dashboard tab into your UniFi Network Controller pages. It reads IP addresses displayed on-screen to look up threat data. No data is sent to any external service.
  2. Your Insights Plus Server - The extension communicates with your self-hosted Insights Plus instance (which you configure during setup) to fetch threat intelligence, GeoIP, and log data. This server runs on your own infrastructure.

The extension never contacts any server other than the two URLs you explicitly configure.

Browser Extension Permissions

PermissionPurpose
storageSave your settings (server URL, controller URL, feature toggles) locally in your browser. Settings sync across devices via your browser's built-in sync.
scriptingInject content scripts into your UniFi Controller pages to display threat badges, enrichment panels, and the embedded Insights Plus tab.
optional host accessDeclared as *://*/* to support any UniFi controller address (IP, hostname, or domain). Access is never granted automatically. You are prompted to grant access to your specific controller URL only.

Local Storage

The extension stores the following data locally in your browser:

  • Insights Plus server URL
  • UniFi controller URL
  • Feature toggle states (tab injection, flow enrichment)
  • Cached UI theme preference
  • Cached health check data (server version, log count)

No credentials, passwords, API keys, or authentication tokens are stored by the extension.

Third-Party Services

This extension does not communicate with any third-party service. All threat intelligence, GeoIP lookups, and log queries are handled by your self-hosted Insights Plus server.

Open Source

The extension and server source code is publicly available at github.com/jmasarweh/unifi-log-insight under the Business Source License 1.1.

Changes

If this privacy policy is updated, the changes will be reflected on this page and the “Last updated” date will be revised.

Contact

For questions about this privacy policy, email us at [email protected] or open an issue at github.com/jmasarweh/unifi-log-insight/issues.