Astro Panel logoAstro Panel

Privacy policy

Last updated 16 October 2026. This explains what Astro Panel (“we”) stores about you when you apply, sign in, or buy through the panel, and why.

What we collect

  • Account details: username, password (stored only as a one-way hash), email address if you add one, and your 2FA secret if you turn 2FA on.
  • Applications: what you enter in the application form, and the IP address it was sent from (to stop spam).
  • Orders and wallet: what you bought, the keys delivered to you, deposits, refunds and invoices.
  • Security logs: sign-in sessions with IP address and browser, and a log of account events (e.g. password resets, suspensions).
  • Integrations you set up: your Discord webhook URL, and your SellAuth store details (API keys and secrets are stored encrypted).

Cookies and local storage

We use one essential cookie, sid, to keep you signed in. It is only set when you sign in and is removed when you sign out. Your browser also remembers your light/dark theme and your cookie choice in local storage.

We use no analytics, advertising or tracking cookies, and load no third-party scripts or fonts. Choosing “Reject” in the cookie banner changes nothing about this, because there is nothing optional to turn off.

How we use and protect it

Only to run the panel: to sign you in, deliver your orders, keep your wallet correct, stop fraud and spam, and contact you about your account. Passwords and API keys are hashed, secrets are encrypted, and all traffic is served over HTTPS. We never sell your data.

Who else sees it

  • SellAuth — our store and payment platform, which supplies the products and stock.
  • Discord — only if you add a Discord webhook, which receives your order and account notifications.
  • Our email provider — only to send password-reset emails you ask for.

How long we keep it

Account, order and wallet records are kept while your account exists and as long as needed for accounting and fraud prevention. Security logs are trimmed automatically. Rejected applications can be deleted on request.

Your rights

You can ask for a copy of your data, to correct it, or to delete your account. Message @7spy0 on Discord. Some records (e.g. completed orders) may have to be kept for legal or accounting reasons.