⚠️ This product is in Beta — not production ready. Looking for testers — please apply →  ·  🐞 Report a bug →
Privacy notice — karnakpanel.com · updated 30 October 2026

What we collect. Why, and for how long.

This site collects very little: what you type into the bug-report form, and the standard request logs every web server keeps. No analytics, no ads, no third-party trackers, no tracking cookies. This page covers the website only. A KarnakPanel server you install yourself does not send us your data; if it checks for updates, that request appears in our server logs like any other visit.

👤Who is responsible

  • The data controller is the KarnakPanel project, run by a sole trader in the United Kingdom. UK GDPR and the Data Protection Act 2018 apply.
  • Privacy questions and rights requests: privacy@karnakpanel.com. We have not appointed a Data Protection Officer; this address reaches the person who runs the project.

📋What we collect, why, and how long we keep it

  • Bug reports (report.html): the title, steps, category, version and OS you choose, the page URL you give, any files you attach, and basic browser details (user agent, window size, language) so we can reproduce the problem. Comments you post in the ticket thread are stored with it. Why: to fix the software — our legitimate interest in a working product. Kept: while the report is useful for the product, or until you ask us to delete it.
  • Your email address, only if you give one: stored encrypted (AES-GCM) with a one-way hash so the "resend my links" form can find your tickets. We email you only if you tick the consent box. Why: your consent. Kept: with the ticket; withdraw consent at any time and we delete it.
  • Launch-list signups, if you joined one: your email, the signup time and a hash. Why: your consent. Kept: until you unsubscribe or ask us to remove you, or the list is retired.
  • IP addresses: the forms never store your raw IP. They use a one-way hash of it to limit abuse (for example, 3 bug reports per hour); those rate-limit counters only matter for an hour and can be removed at any time. A hash combining your IP with your email, and a hash of the IP behind each thread comment, are kept with the ticket to spot abuse. Why: legitimate interest in keeping the forms usable.
  • Server logs: like any web server, ours records each request (IP address, time, page, browser user agent). Why: legitimate interest in running and protecting the site. Kept: for a limited period, then removed by the server's log rotation.
  • Emails you send us (info@, test@, privacy@): your address and what you write. Why: to answer you — legitimate interest, or handling your rights request. Kept: while the conversation is useful, or until you ask us to delete it.
  • Your browser's local storage: two entries, kept on your device only and never sent to us — kp-cookie (your answer to the cookie notice) and kp-tickets (links to tickets you filed from this device). Clear your browser's site data to remove them.

📦Who else sees it

  • The site and its mail run on a virtual server rented from Contabo GmbH (Germany), which acts as our hosting processor. Bug-report notifications go to our own mailbox on that server.
  • We do not sell, rent or share your data with anyone else, and we use no advertising or analytics services. We will disclose data only if the law requires it.
  • Bug threads are private to you and us: each ticket is reached only through its magic link.

⚖️Your rights — and how fast we answer

  • You can ask to access your data, correct it, delete it, restrict or object to how we use it, receive a portable copy, or withdraw consent at any time.
  • How: email privacy@karnakpanel.com. Tell us which right you are using and, for bug reports, the ticket ID or the email you used. We may ask for something that confirms the data is yours before acting.
  • Response time: without undue delay and at the latest within one month of receiving your request. If a request is complex, or you send several, we may extend this by up to two further months; if so, we will tell you within the first month and explain why. Requests are free.
  • If you are unhappy with our answer, you can complain to the UK Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.
Changes to this notice are posted on this page with a new "updated" date. Nothing on this site makes automated decisions about you, and giving us data is never required to use the site — a bug report works without an email address.
🐞 Report a bug