Privacy policy

Who is responsible

The controller of your personal data is m2panel (“we”). For any privacy question, write to contact@m2panel.app.

Visiting the site

When you open a page, our web server processes the technical data needed to deliver it: IP address, date and time, requested address, browser and operating system. We use this data only to run the site and keep it secure (legitimate interest, Art. 6(1)(f) GDPR) and delete server logs after no more than 30 days.

Contacting us

If you write to us by e-mail or on Discord, we use your contact details and the content of your message to reply and, if you ask for it, to prepare an offer (Art. 6(1)(b) and (f) GDPR). We keep the correspondence for as long as needed to handle your request.

Analytics and session recordings

If you click Accept in the cookie banner, we use PostHog with cookies to understand how visitors use m2panel.app and the demo at demo.m2panel.app: pages viewed, clicks, scrolling, the referring page, device and browser type, and approximate location derived from your IP address. We also record sessions, i.e. a reconstruction of the page with your mouse movements, clicks and scrolling. Everything you type into form fields is masked and never recorded. Legal basis: your consent (Art. 6(1)(a) GDPR and the national rules implementing Art. 5(3) of the ePrivacy Directive).

Before you choose, or if you reject

Until you click Accept – while the banner is open and after you click Reject – we set no analytics cookies, store nothing for analytics in your browser and do not record your session. We still count page views and clicks without identifying you (cookieless mode): PostHog’s servers derive a temporary hash from your IP address and browser that changes every day, so visits cannot be linked to you or across days. Legal basis: our legitimate interest in basic, privacy-friendly statistics (Art. 6(1)(f) GDPR).

Who processes the data

Analytics are provided by PostHog Inc. (San Francisco, USA), acting as our processor under a data processing agreement (Art. 28 GDPR). We use PostHog Cloud EU: the data is stored and processed in the European Union (Frankfurt, Germany). Requests go through our own domain, so your browser does not connect to PostHog directly. If PostHog staff outside the EU need access, for example for support, the transfer is protected by the EU Standard Contractual Clauses.

Cookies and local storage

• m2p_consent – your choice (granted or denied) for m2panel.app and demo.m2panel.app, kept for 180 days.
• ph_<key>_posthog – PostHog cookie with a random visitor and session identifier, kept for up to 1 year; set only after you accept.
• ph_* and __ph_opt_in_out_* in local storage – only after you accept: PostHog identifiers, your choice as seen by PostHog and events waiting to be sent.

Changing your choice

You can change or withdraw your consent at any time with the Cookie settings link at the bottom of every page or the button below. Withdrawal does not affect processing that took place before it. Your choice applies to both m2panel.app and demo.m2panel.app.

How long we keep data

Analytics events are kept for up to 12 months and session recordings for up to 30 days, after which they are deleted automatically. The m2p_consent cookie expires after 180 days, and then we ask again.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time. To exercise your rights, write to contact@m2panel.app; because analytics do not use your name or e-mail address, we may ask for details that help us find your data, such as the date and time of your visit. You can also lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work.

Changes to this policy

We update this policy when the site or the tools we use change. The date at the top always shows the current version.