Last updated: May 26, 2026
Panelario ("we", "us") is a parametric surface design tool. We respect your privacy and collect only the minimum data necessary to deliver our service.
| Data | When | Purpose |
|---|---|---|
| Email address | When you register or sign in | Account identification, login codes, transactional emails |
| Device fingerprint | When a subscriber opens the app | Enforce device limit (max 2 registered, 1 concurrent session) |
| Country & language | Automatically from your browser | Localization and aggregate analytics |
The device fingerprint is a one-way hash derived from browser and screen properties. It cannot be reversed to identify you personally. Device fingerprints are stored only for active subscribers.
We measure website traffic ourselves using Cloudflare Analytics Engine. We use no third-party analytics and no tracking cookies.
For each request we record: the page, approximate location derived by Cloudflare from your IP address (country, region, city, coordinates), browser language, device type, browser, operating system, and the referring site. Your IP address and User-Agent are never stored — they are read only to derive those values.
To count returning visitors we store a pseudonymous identifier: an irreversible SHA-256 hash of your IP address combined with a secret key held on our server. The hash is stable, so the same browser is recognised as the same visitor across days, but it cannot be reversed to an IP address and we cannot link it to your account. Records are kept for 90 days.
Our website also stores a single value in your browser's local storage (pnl_visit_day) so that one visit is counted at most once per day. It contains only a date, no identifier.
Legal basis: legitimate interest (GDPR Art. 6(1)(f)) — first-party audience measurement.
To improve the platform and help manufacturers understand their visibility, we collect anonymous aggregated counters:
These counters are aggregate totals — no IP addresses are stored and no tracking cookies are used. They are derived from the same measurement described in section 3, which includes the pseudonymous visitor hash explained there; they are not linked to your account. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
You may voluntarily place a "customer pin" on the manufacturer map to indicate interest in fabrication services. Here is what we collect and how it is handled:
| Data | Stored? | Visible to all visitors? | Visible to verified manufacturers? |
|---|---|---|---|
| Email address | Yes (encrypted at rest) | Never | Never — used only to deliver messages from the system |
| City name | Yes | Yes — shown on the map as an approximate pin | Yes |
| GPS coordinates | Not stored — city is geocoded server-side to approximate city-centre coordinates | City-centre only | City-centre only |
| Posted date | Yes | Yes | Yes |
| Material / finish / size preferences | Yes (if provided) | No | Yes |
| Installation requested | Yes (the checkbox on the pin form) | No | Yes |
| Free-text note | Yes (max 500 characters, if provided) | No | Yes |
Public visibility: Customer pins are visible to all visitors on the map. However, only the city location and posted date are shown publicly. Detailed preferences (material, finish, size, whether you asked for installation, and your note) and the ability to contact you are available only to verified manufacturers who are logged in.
How contact works: Manufacturers cannot see your email address. When a verified manufacturer clicks "Contact", their message is sent to you by our system. Your email is revealed only when you choose to reply. Each manufacturer may contact you at most once per 30 days.
Automatic expiry: Pins are automatically deleted after 30 days. You can also delete your pin at any time using the link in your confirmation email — no login required.
Legal basis: Explicit consent (GDPR Art. 6(1)(a)). You must check the consent box before placing a pin. You may withdraw consent at any time by removing your pin.
Purchases are processed by Paddle.com (Paddle.com Market Ltd), who acts as the Merchant of Record. They handle payment processing, invoicing, VAT/tax collection, and refunds. Your payment information is collected and stored by Paddle under their own Privacy Policy. We never see or store your payment details.
Account data (email, subscription status, device fingerprints, session tokens) is stored in Cloudflare KV, a globally distributed key-value store. Data is encrypted in transit (TLS) and at rest.
We retain your account data for as long as your account exists. If you request deletion, we will remove your data within 30 days. Canceled subscriptions retain the registered (free) account; you may request full deletion at any time.
If you are in the EU/EEA, you have the right to:
To exercise any of these rights, contact us at the email below. You can also download a copy of your data yourself at any time from your account. We respond within one month.
Right to object (GDPR Art. 21). Where we rely on legitimate interest — which is the basis for the website measurement described in section 3 — you may object to that processing at any time by contacting us.
Right to complain. If you believe we handle your data unlawfully, you may lodge a complaint with your national data protection authority. In the Czech Republic this is the Úřad pro ochranu osobních údajů (ÚOOÚ).
| Service | Purpose | Privacy Policy |
|---|---|---|
| Paddle | Payment processing (Merchant of Record) | Link |
| Cloudflare | Hosting, KV storage, analytics | Link |
| Resend | Transactional email (login codes, notifications) | Link |
International transfers. These providers are established outside the European Economic Area (United States) and may process your data there. Such transfers rely on the safeguards each provider offers — standard contractual clauses and/or the EU–US Data Privacy Framework — as described in the agreements linked above.
We may update this policy from time to time. Changes will be posted on this page with an updated date. We will not reduce your rights under this policy without your consent.
Panelario
Martin Sedlak, ICO: 06355919
Nabrezi Zavodu Miru 1884, 530 02 Pardubice I-Zelene Predmesti
Czech Republic
Email: [email protected]