Privacy Policy

Effective date: May 23, 2026

S3Panel is operated by Hafsa GmbH. This policy explains how S3Panel handles data for the S3Panel macOS app and related web service.

Data We Process

We process account data such as email address, authentication status, subscription status, and support contact details. When you connect an S3-compatible storage provider or Cloudflare R2, we process the connection metadata needed to operate the app, such as provider type, endpoint, region, bucket names, object keys, object sizes, timestamps, folder statistics, and manifest/index records used for search and folder-size calculations.

Customer Storage Content

S3Panel is a management tool for storage accounts controlled by the customer. We do not host customer buckets and we do not intentionally copy or store customer object contents on S3Panel servers. Object contents remain in the customer storage provider unless a user explicitly downloads, uploads, copies, moves, zips, or otherwise operates on objects through the app.

Credentials And Security

User-provided S3/R2 credentials are used only to perform requested storage operations. Users should provide the minimum permissions required for their workflow and rotate credentials if they suspect exposure. The macOS app stores app sessions in the macOS Keychain where supported.

Payments

Mac App Store purchases and subscriptions are processed by Apple. S3Panel receives purchase status information from Apple or the app to unlock paid features. We do not receive full payment card details from Apple.

Service Providers

We may use infrastructure providers, analytics, payment processors, email providers, and customer support tools to operate S3Panel. These providers process data only as needed to deliver the service.

Retention

We retain account, billing, audit, connection metadata, and manifest/index records for as long as needed to provide the service, comply with legal obligations, resolve disputes, and protect S3Panel and its users. Users can request deletion of account data where legally available.

Your Choices

You can remove storage connections, revoke credentials from your storage provider, request account deletion, and contact support about privacy requests.

Contact

For privacy questions, contact support@s3panel.com.