Privacy Policy

Last Update: 10.09.2026

At Pano, we take our commitment to protecting the privacy of our users seriously. This Privacy Policy explains how we collect, process, and store the data of users who use our platform.

1. Data We Collect
a. Mandatory Cookies

We use only strictly necessary cookies on our website. There are three of them: a sign-in cookie that holds a JWT (JSON Web Token) and is used for authentication; a CSRF protection cookie that protects forms and requests; and, only if you choose "remember this browser" for two-step verification, a cookie that remembers that browser for 30 days. None of them is used for analytics or advertising.

b. User-Provided Data
  • Account Information: Users may provide information such as name, email address, or username when creating an account.
  • Content Upload: Content such as plugins and themes uploaded by users to the platform.
  • Technical Data: With your account we store the IP address used at registration and, for each sign-in session, the IP address, the browser (user agent) and the time of the last sign-in.

In addition, self-hosted Pano installations send usage data to panomc.com; this is described in detail in section 2.

2. Usage Data From Self-Hosted Pano Installations

A self-hosted Pano platform sends usage data to panomc.com once a day, unless the site owner disables it. It can be turned off during setup, later from Panel → Settings → Platform, or by setting telemetry.enabled = false in the configuration file.

This data is not anonymous. Each report contains:

  • The Pano version, stage and release channel in use.
  • The Java version, the operating system, and the CPU and memory available to the installation.
  • How long the installation has been running, the CPU architecture, whether the site uses HTTPS, and the site language.
  • The website URL and its domain.
  • The server's IP address and the country derived from it.
  • The active theme and the installed plugins together with their versions and the state of each plugin.
  • Aggregate counts: registered users, posts, open tickets, connected Minecraft servers and online players.
  • Server-management figures: the usage mode, the number of linked and managed servers and of nodes, and how many console commands and backups ran in the last 24 hours.
  • Whether a panomc.com account is connected to the installation.
  • The installation date and a randomly generated installation identifier.

It never includes user accounts, e-mail addresses, passwords, site content or any credentials.

We use this data to understand how Pano is used, to prioritize development, to make compatibility and security decisions, and to publish aggregate statistics such as the number of active installations. Usage data is kept for 13 months; the statistics we publish are calculated from it and are not kept any longer.

3. Use of Data

We use the collected data for the following purposes:

  • Authentication and management of user sessions.
  • Managing and sharing user-created content with the community.
  • Ensuring security and preventing misuse.
4. Data Sharing

Pano does not sell or share user data — including the usage data described in section 2 — with third parties. That data is processed by Pano itself and is stored on servers located in the European Union. However, in cases of legal obligations or for security reasons, information may need to be provided to authorized authorities.

Purchases are the exception: when you buy a product or service, the billing data needed to take the payment, issue the invoice and meet tax obligations (name, e-mail address, billing address, tax number where given, and what you bought) is processed by the seller named in the Sales and Refund Policy, as a separate controller, and by its payment processor. Card details are entered directly in the payment processor's secure form; we never see or store full card numbers.

Some pages load resources from third parties, which then receive your IP address: a bot-protection check on sign-in and on forms, the payment form at checkout, player avatar images, and the list of software releases from a public code-hosting service.

5. Data Storage and Security

User data is stored securely and is accessible only to authorized personnel. The sign-in cookies stay in your browser for up to 90 days; the session they carry expires after one month and ends at once when you sign out.

6. Information About Cookies

Cookies are small data files stored on your browser. Our website uses only strictly necessary cookies:

  • Sign-in cookie: Holds a JWT and is required to recognize logged-in users and manage authentication.
  • CSRF protection cookie: Protects forms and requests against cross-site request forgery.
  • Remembered-browser cookie: Set only if you choose "remember this browser" for two-step verification; it remembers that browser for 30 days.

None of these cookies is used for analytics or advertising.

7. Third-Party Plugins and Themes

Pano allows users to upload third-party plugins and themes. These contents are provided by users and are not under Pano's control. Therefore, it is the responsibility of users to be informed about the privacy policies and data usage of third-party content.

8. User Rights

Users:

  • Can check this page to see how their data is used.
  • Can delete their account themselves in their profile settings. This deletes their resources, ratings and hosted instances and anonymizes the account. Records we are required to keep, such as orders and invoices, and a minimal account record are retained.
9. Contact

If you have any questions about this Privacy Policy or your data, you can contact us:

10. Policy Updates

This Privacy Policy may be updated from time to time. Updates will be published on this page, and users will be notified in case of significant changes.

Cart

Here is empty.