Privacy Policy
How S3Panel handles account data, connection metadata, storage credentials, and App Store purchases.
Effective date: May 23, 2026
S3Panel is operated by Hafsa GmbH. This policy explains how S3Panel handles data for the S3Panel web service, macOS app, and related services.
Data We Process
We process account data such as email address, authentication status, subscription status, and support contact details. When you connect S3-compatible storage or Cloudflare R2, we process connection metadata such as provider type, endpoint, region, bucket names, object keys, object sizes, timestamps, folder statistics, and manifest/index records used for search and folder-size calculations.
Customer Storage Content
S3Panel is a management tool for storage accounts controlled by the customer. We do not host customer buckets and we do not intentionally copy or store customer object contents on S3Panel servers. Object contents remain in the customer storage provider unless a user explicitly downloads, uploads, copies, moves, zips, unzips, or otherwise operates on objects through the app.
Credentials And Security
User-provided S3/R2 credentials are used only to perform requested storage operations. Users should provide the minimum permissions required for their workflow and rotate credentials if they suspect exposure. The macOS app stores app sessions in the macOS Keychain where supported.
S3Panel does not ask you to send secret keys to support. If a credential may have been exposed, rotate it in your storage provider and delete the saved connection in S3Panel. For more detail, see the S3Panel Security and Trust Center.
Payments
Mac App Store purchases and subscriptions are processed by Apple. S3Panel receives purchase status information from Apple or the app to unlock paid features. We do not receive full payment card details from Apple.
Contact
For privacy questions, contact [email protected] or Hafsa GmbH, Fritz-Reuter-Str. 19, 21629 Neu Wulmstorf, Germany.