Legal

Privacy Policy

Last updated 2026-10-05

What we collect

Account data: Username, email address, first and last name, and the panel user ID that links your game-panel account to your customer account.
Auth data: An encrypted copy of your panel session token, so we can act on your behalf while you are signed in. We never see or store your panel password.
Order data: Order reference, plan, amount, currency, discount, coupon used, payment references from our providers, and billing email.
Technical data: IP address and user agent at sign-in, for security and abuse prevention.
Server metadata: The server IDs your resources are provisioned as, so we can link a panel server back to your order.

Card or bank details: Handled entirely by Razorpay and Stripe. We receive a payment reference and the last four digits at most, never the full number.
Your passwords: Authentication happens on FeatherPanel. We never receive or store your password, for the storefront or the panel.
Your file content: Files on your servers are yours. We do not read them, index them, or train on them.

To run the service: Provisioning your server, taking payment, and showing you your servers and invoices.
To keep you signed in: The encrypted session token exists only so you do not have to log in on every page.
To prevent abuse: IP and user agent are used to detect credential stuffing, referral fraud and attacks against our own infrastructure.
To meet legal obligations: Tax records and transaction history are retained as required by law.

FeatherPanel (self-hosted): Your game panel. It stores your account and your servers. Our storefront talks to it only to provision and to act while you are signed in.
Razorpay and Stripe: Your payment provider. They process the payment and return a status.
Cloudflare: Our DNS and tunnel provider, which sees request metadata to route traffic.
Our infrastructure providers: The host that runs this site and the panel, and the email provider that sends receipts.
Nobody else: We do not sell your data. We do not share it for advertising.

Session tokens: Until you sign out, or until the session expires — up to 14 days of inactivity.
Account data: For as long as your account exists, and 30 days after you request deletion.
Order and invoice records: Retained for 8 years where tax law requires it.
Security logs: Up to 12 months, then deleted.

rynox_session: A strictly necessary cookie holding an opaque session ID. It is httpOnly, SameSite=Lax, Secure in production, and contains no personal data itself.
No tracking cookies: This site sets no analytics, advertising or third-party tracking cookies. We do not run cross-site trackers.

Access and export: Open a ticket under "Billing & General" and we will send you a copy of your data.
Correction: Change your details in the panel, or ask us.
Deletion: Request account deletion in the panel. We remove your personal data within 30 days, except records we are legally required to keep.
Withdraw consent: For anything processed on consent rather than contract, you can withdraw it at any time.

Data questions and deletion requests: open a ticket in the panel under Billing & General, or email [email protected].