Who is responsible
The operator is {{TODO: Firmenname}}, {{TODO: Anschrift}}. Email: {{TODO: E-Mail}}. A faster contact channel: {{TODO: schnelle Kontaktmöglichkeit}}. These details are placeholders until they are filled in.
Account
An account can be opened with a 16-digit account number. That number is stored encrypted, and a hash of it is stored so the login can find the account. An email address is optional. If you set one, it is stored, and the time you verified it is stored. A password is stored only as a hash. If you turn on a one-time code or a passkey, the secret and the passkey are stored. The panel language you pick is stored on the account.
At checkout the form asks for a billing street, city, postal code, and country. Those fields are stored on the user and copied onto the order.
Waitlist
Before purchase opens, the waitlist stores the email address, the language of the page, and the time you confirm the address. It does not store your IP address. The confirmation link is stored only as a hash, and that hash is deleted after you confirm.
Payments
An order stores the term, the currency, the amount, the tax figures, the payment provider name, a billing address, whether you waived withdrawal so the service could start, and the time it was paid. A payment row can also store a provider reference and the raw payload that provider sent.
MyGate is named on the public site for Bitcoin, Monero, and USDT. There is no MyGate API client in this application, so this app does not receive a MyGate payload today. Stripe can create a Checkout session when an administrator turns Stripe on. Telegram Stars is off unless MARKETING_TELEGRAM_STARS is turned on. When a provider is used, that provider processes the payment under its own rules.
VPN device
A device stores its name, the protocol, the public key, the tunnel address, and the server it uses. The private key stays in this database only when the panel created it. The Windows client can keep the private key itself, and then this database stores the public key only.
The last handshake time is one timestamp per device. It is overwritten on the next handshake. There is no list of earlier handshakes. Byte totals are stored per device for the current month, and per day for 35 days. Those totals are the number of bytes, not the sites or the addresses you contacted. The agent does not send client IP addresses or destination addresses.
An administrator can see those byte totals. A device that crosses a daily or monthly threshold can be slowed down. It is not disconnected for volume.
Website, cookies, and IP addresses
The marketing page shows the IP address of the current request in the top bar. That address is not written to the application database.
The session is kept in Redis. The browser stores a session cookie and an XSRF cookie. The session can hold the language and the display currency. The theme choice is kept in the browser’s local storage, not in a cookie. This application does not set an analytics cookie.
Login, logout, a failed login, password changes, two-factor changes, and passkey changes are written to an activity log with the IP address of that request. A failed login also stores a masked account number or the email address that was typed. Account deletion stores the IP address on that log entry. Login rate limits use the IP address in a short-lived cache.
The panel install script does not turn off the web server’s access log. A default Nginx access log records the request IP, the URL, and the time.
What this policy does not claim
{{TODO: No-Logs-Aussage}} A blanket “no logs” sentence is not used here. The VPN rows described above do not contain destinations or client IP addresses. The website and the web server do store IP addresses, as this policy says.
Your rights
You can ask for access, correction, deletion, and restriction, and you can complain to a supervisory authority. Send the request to {{TODO: E-Mail}}. Which authority is competent is not chosen yet, because the operator’s country is {{TODO: Rechtsordnung}}.