Privacy Policy

This Privacy Policy explains what personal data FivePanel collects, why, and the choices you have. FivePanel is hosted in Germany, and personal data is processed under EU data protection law (GDPR).

The controller of that personal data is BOSS STUDIO SRL (Reg. Com. J2026020322003, CUI 54360947, EUID ROONRC.J2026020322003), the Romanian company that operates FivePanel. Write to us about anything in this policy at [email protected].

Account data: the name and email you provide, or your Discord profile (username, avatar, Discord user ID) if you continue with Discord.

Panel configuration: the pages, widgets, database connection settings and roles you build in the Service. Not your game data itself.

Usage and security data: sign-in and audit-log timestamps, IP address at the time of a request, and Turnstile's abuse-prevention signal when you submit a form.

Analytics data: page views and general usage, collected through Google Analytics, only if you accept analytics cookies in the consent banner.

We do not collect or store the contents of your own database (player names, balances, inventories, chat, etc.). Query results pass through your panel to render it and are not written to disk on our side.

We use cookies for sign-in sessions and security (necessary, always on) and, only with your consent, for analytics. See our separate Cookie Policy for the full list and how to change your choice at any time.

To provide and secure the Service (authenticate you, keep sessions, prevent abuse), to bill paid plans, to send service-related emails (password resets, billing, material changes to these policies), and, only with consent, to understand product usage through analytics.

When you confirm a mapping in the builder, structural metadata about your database (collection and field names, and types — never values) is sent to a third-party model provider to propose what each collection represents. You can download the exact file we send before you confirm anything.

Our hosting and database providers (in Germany/EU), Discord (if you use Discord login), Cloudflare (Turnstile, for bot protection), Google (Analytics, only with consent), and our payment processor for billing. We do not sell your personal data.

Account and panel configuration data is kept while your account is active, and for a reasonable period afterward to comply with legal, tax and audit-log obligations, after which it is deleted or anonymized. You can request earlier deletion; see "Your rights" below.

Our primary infrastructure is in Germany. Some processors we rely on (for example Discord, Cloudflare, Google) may process data outside the EU/EEA under appropriate safeguards, such as the EU Standard Contractual Clauses.

Under GDPR you can ask us to: access the personal data we hold about you; correct it; delete it; export it in a portable format; restrict or object to certain processing; and withdraw analytics consent at any time from the cookie preferences link in the footer. To exercise any of these, email [email protected]. You can also lodge a complaint with your local data protection authority.

Passwords are hashed, never stored in plain text. Database credentials for your own server stay in the agent's local config file and are never sent to us. We use industry-standard measures to protect account and configuration data, but no system is perfectly secure.

The Service is not directed at children under 16, and we do not knowingly collect data from them.

We may update this policy from time to time. Material changes will be announced by email or in the Service before they take effect.

Privacy questions or requests: [email protected].