Privacy notice — karnakpanel.com · updated 1 November 2026

What we collect. Why, and for how long.

This site collects very little: what you send us by email, bug reports you file, and the standard request logs every web server keeps. No analytics, no ads, no third-party trackers, no tracking cookies. This page covers the website only. A KarnakPanel server you install yourself does not send us your data; if it checks for updates, that request appears in our server logs like any other visit.

👤Who is responsible

The data controller is the KarnakPanel project, run by a sole trader in the United Kingdom. UK GDPR and the Data Protection Act 2018 apply.
Privacy questions and rights requests: privacy@karnakpanel.com. We have not appointed a Data Protection Officer; this address reaches the person who runs the project.

📋What we collect, why, and how long we keep it

Launch-list signups, if you joined one: your email, the signup time and a hash. Why: your consent. Kept: until you unsubscribe or ask us to remove you, or the list is retired.
IP addresses: the forms never store your raw IP. They use a one-way hash of it to limit abuse; those hashes are deleted within 24 hours. Why: legitimate interest in keeping the forms usable.
Server logs: like any web server, ours records each request (IP address, time, page, browser user agent). Why: legitimate interest in running and protecting the site. Kept: for a limited period, then removed by the server's log rotation.
Emails you send us (info@, test@, privacy@): your address and what you write. Why: to answer you — legitimate interest, or handling your rights request. Kept: while the conversation is useful, or until you ask us to delete it.
Your browser's local storage: one entry, kept on your device only and never sent to us — kp-cookie (your answer to the cookie notice). Clear your browser's site data to remove them.

🐞Bug reports

What we keep: what you type in the bug report form (summary, details, area, version, OS, page link), any screenshots, replies on the ticket and your email address. Why: to fix the bug and answer you — legitimate interest. Email updates on replies and status changes are sent only if you tick the box, and you can turn them off on the ticket page.
Your email address is stored encrypted and only decrypted to send you mail. A one-way hash of it lets you sign in to My tickets with a code we email you.
Screenshots are re-encoded to a fresh image when uploaded, which removes hidden data such as GPS location and device details. Reports that look like they contain a password, key or token are refused before anything is stored, so you can remove it and send again.
How long: a report you never confirm is deleted after 24 hours. Fixed or closed reports move to the trash 12 months after their last update. The trash is emptied after 30 days. Daily backups of the bug system are kept for 14 days, then replaced.
Cookies: signing in to My tickets sets one cookie that keeps you signed in for up to 7 days. It is needed for sign-in only and is never used for tracking.

📦Who else sees it

The site and its mail run on a virtual server rented from Contabo GmbH (Germany), which acts as our hosting processor. Email you send us is held in our own mailbox on that server.
We do not sell, rent or share your data with anyone else, and we use no advertising or analytics services. We will disclose data only if the law requires it.

⚖️Your rights — and how fast we answer

You can ask to access your data, correct it, delete it, restrict or object to how we use it, receive a portable copy, or withdraw consent at any time.
How: email privacy@karnakpanel.com. Tell us which right you are using and the email address you used. We may ask for something that confirms the data is yours before acting.
Response time: without undue delay and at the latest within one month of receiving your request. If a request is complex, or you send several, we may extend this by up to two further months; if so, we will tell you within the first month and explain why. Requests are free.
If you are unhappy with our answer, you can complain to the UK Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.

Changes to this notice are posted on this page with a new "updated" date. Nothing on this site makes automated decisions about you, and giving us data is never required to use the site.