This policy explains what information MaxPanel collects, why we collect it, and what we do with it. MaxPanel is operated by Server Host Inc, 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, USA ("we", "us", "MaxPanel").
Last updated: 19 June 2026.
This policy applies to the MaxPanel website and customer portal (account signup, billing, license management). MaxPanel is a self-hosted control panel: once installed on your own server, your end-user and website data lives on that server and never passes through us. We only process the limited account, billing, and license-validation data described below.
Account information. When you create an account we store your email address and a one-way hash of your password (Argon2id). We never store your password in plain text. We record when your email was verified and the time of your last login.
Session and security data. When you log in we store the IP address and browser User-Agent string associated with the session, plus a hashed session token. This is used to keep you signed in and to detect abuse.
Billing information. Payments are processed by Stripe. We do not see or store your full card number. We store the Stripe customer and subscription identifiers, the plan you purchased, and your billing history so we can manage your subscription and licenses.
Trial-abuse prevention. When you start a free trial we temporarily record the IP address used at checkout, together with the plan, so we can enforce one trial per customer. These records expire automatically.
License and validation data. Each license is bound to a server. We store the server's cryptographic fingerprint, the license state, and the most recent IP address your installation reports when it validates its license with us (validations happen periodically and may include basic operational telemetry such as version and node type). This is used to operate the licensing system and optional auto-hostname DNS feature.
Correspondence. If you email our support, billing, or security addresses, we keep that correspondence so we can help you.
We use a single essential session cookie to keep you signed in to the customer portal. We do not use advertising or third-party tracking cookies.
We do not sell your personal information. We share data only with service providers that make MaxPanel work — principally Stripe for payments and our hosting and email providers — and only as needed to deliver the service. We may disclose information where required by law or to protect our rights and the security of the service.
We keep account and billing records for as long as your account is active and as required afterwards for legal, tax, and accounting purposes. Session records and trial-abuse records expire automatically. License and validation records are retained while the license exists and for a reasonable period thereafter to support audits and fraud prevention.
Passwords are hashed with Argon2id and session tokens are stored hashed. We restrict internal access to customer data. No system is perfectly secure, but we work to protect the information we hold.
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To make a request, open a ticket. We may need to verify your identity first. Note that deleting your account may end active licenses and subscriptions.
MaxPanel is a business product and is not directed to children under 16. We do not knowingly collect their information.
We may update this policy from time to time. Material changes will be reflected by the "last updated" date above and, where appropriate, by notice in the portal.
Questions about this policy, privacy requests, or security reports: open a ticket, or write to Server Host Inc, 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, USA.