Privacy Policy

Last updated: May 2026  ·  Applies to: plutoguy.net Game Server Panel

Your privacy matters. This policy explains exactly what personal information the plutoguy.net panel collects, why it collects it, where it is stored, and what rights you have over your data. We keep this simple: we collect only what is necessary to operate the service, and we share nothing with third parties.

1. Who We Are

The plutoguy.net panel is a self-hosted, privately operated game server management service run by the site administrator ("Admin"). This is not a commercial product or a corporation. The service runs on hardware physically located and controlled by the Admin.

2. What Information We Collect

Data Why We Collect It Where It Is Stored
Username To identify your account data/auth.json on the server
Password (hashed) To verify your identity at login data/auth.json — stored as a bcrypt hash (your actual password is never saved)
Session token To keep you logged in between page loads In your browser (cookie) and in server memory — expires when you log out or after 7 days
IP address To prevent brute-force login attempts (rate limiting) In server memory only — never written to disk, cleared after 15 minutes of inactivity
Agreement timestamp To record that you accepted these Terms data/auth.json — stored with your account record
Server console output Streamed to your browser for monitoring; not logged by the panel Game server log files on disk (managed by the game server software, not the panel)

We do not collect: real names, email addresses, payment information, location data, device fingerprints, or any tracking identifiers.

3. How We Use Your Information

Your data is used solely to operate the panel:

We do not use your information for marketing, analytics, advertising, or any purpose unrelated to operating the service.

4. Data Storage and Security

Your data never leaves the server on which this panel is hosted. There is no external database, no cloud storage, and no third-party analytics service.

All account data is stored in a local JSON file (data/auth.json) on the Admin's server. Passwords are hashed using bcrypt (cost factor 12), a strong one-way hashing algorithm — this means the Admin cannot read your password, only verify it.

Access to the panel is protected by session-based authentication. Sessions are regenerated on every login to prevent session fixation attacks. The panel is typically served over HTTPS via Cloudflare tunnels, encrypting data in transit.

No security system is perfect. You should choose a strong, unique password for your account.

5. Data Sharing

We do not sell, rent, trade, or share your personal information with any third party. Your data is not sent to external services, analytics platforms, or advertising networks.

The only potential disclosure would be if required by law (e.g., a valid legal order), in which case we would comply with applicable legal obligations and notify you where legally permitted to do so.

6. Cookies and Tracking

The panel uses a single session cookie to keep you logged in. This cookie contains a random session identifier (not your personal data) and expires after 7 days or when you log out. No third-party cookies, tracking pixels, or fingerprinting technologies are used.

7. Data Retention

Your account data (username and password hash) is retained for as long as your account exists. If your account is deleted — either by the Admin or at your request — your data is removed from auth.json immediately. There are no backups of auth data unless the Admin has separately set up server backups (which, if they exist, are subject to the same access controls as the live server).

Game server data (worlds, configs, logs) you create on assigned servers is retained according to the Admin's storage and backup policies, not this Privacy Policy.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal data:

To exercise any of these rights, contact the Admin through the communication channel through which you were granted access.

9. Children's Privacy

This service is not directed at children under the age of 13. If you are under 13, please do not request an account or submit any personal information. If the Admin becomes aware that a user is under 13, that account will be removed.

10. Changes to This Policy

This Privacy Policy may be updated from time to time. When changes are made, the "Last updated" date at the top of this page will be revised. Continued use of the panel after changes are posted constitutes your acceptance of the revised policy. Material changes will, where possible, be communicated through the panel or the community channels used to grant you access.

11. Contact

For privacy-related questions, data requests, or concerns, contact the Admin through the community or communication channels through which you were granted panel access.