Information used by this panel
Accounts contain a username, verified email address, password hash, account group and access expiry. Email changes normally require confirmation from both the current and new mailbox. When an address has definitively failed delivery, a password-confirmed replacement can be verified using the new mailbox; administrator recovery requires additional operator checks. The panel also stores registration and login timestamps, verification and reset token hashes, and a hashed last-known IP address used for access controls.
Client access and hardware
Client authentication uses access tokens and a hardware identifier. The panel stores module and client copies associated with your account and hardware. Up to two PCs can be bound to your account. A hardware reset clears both bindings, their client tokens and encrypted module copies; your next client logins can bind up to two PCs again.
Community content
Forum threads, replies, shoutbox messages and moderation records are associated with accounts. Presence information can show signed-in members active in the past 24 hours. Choose carefully what personal information you post.
Monthly newsletter
The monthly news roundup is optional. We store your newsletter preference and delivery history, and use an email provider to deliver editions you opted into. Every newsletter includes an account-editor link to opt out and an unsubscribe link. Newsletter open and click tracking are disabled. Your preference and delivery history are included in account data exports and removed when you delete your account.
Human verification
Turnstile and Flashpoint protect sign-up, confirmation-email requests and password resets. Password login uses Flashpoint alone to collect training observations, without Turnstile. Flashpoint collects browser name/version, operating system, device type and device model when the browser provides it, alongside pointer timing and positions, test dimensions, motion parameters and heuristic scores to evaluate verification quality. These observations are not proof that someone is human or automated. Samples have no account, email or IP attached, expire after 30 days and are capped at 5,000 records. Short-lived network hashes limit attempts. The test currently collects data without rejecting completed attempts for a low score. Pointer movement is required to complete the test.
Cookies
We use only functional cookies to operate this panel, including the session cookie that keeps you signed in and supports account and form security. We do not use tracking or advertising cookies, so this panel does not display a cookie-consent banner. Browser storage remembers interface choices, such as whether the shoutbox is collapsed.
Regional pricing
Where regional prices are offered, the site uses a locally stored IP-country database and checks the billing and card-issuer countries supplied by Stripe. Your IP address is not sent to the geolocation provider. A verified regional-pricing country and payment eligibility records are linked to your account to limit abuse. You can choose standard pricing. Country data comes from the DB-IP IP to Country Lite database, licensed under Creative Commons Attribution 4.0 International. We download the database to our server and perform lookups locally; visitor IP addresses and individual lookup requests are not sent to DB-IP. The data is provided without warranties under that licence.
Payments and external services
Checkout takes place on the separate shop. This panel stores payment references and access grants; it does not collect card details. Depending on the administrator’s configuration, email delivery uses Resend, registration uses Cloudflare Turnstile, and Discord can provide sign-in. An embedded YouTube video connects to YouTube only after you choose to play it. Those services have their own privacy policies.
Email deliverability
We use EmailListVerify to check whether account email addresses can receive mail. Only email addresses are provided for this check; names, passwords, forum content and payment information are not included. Verification is not a guarantee of delivery. Definitive invalid results or confirmed hard bounces require a working replacement email, confirmed from the new mailbox. Uncertain results require a fresh confirmation from the current mailbox; users can also confirm a replacement address. Confirmation links are sent only when requested. Newsletters require an enabled mailing preference. Unscanned addresses may receive newsletters; confirmed hard bounces flag the affected accounts and stop further delivery. Known-invalid addresses and uncertain addresses awaiting re-verification are excluded. Recorded mailing choices from the old forum are carried over, while choices made on this site take precedence. We retain the current address status with your account, remove temporary completed scan-job metadata after 30 days and keep hashed bounce identifiers for 90 days to prevent repeated processing. Per-account markers of submitted and completed checks, including hashed addresses, remain until account deletion to prevent repeat scans and charges. External providers apply their own retention policies. These account status records are included in your data export and removed with your account.
Website diagnostics
Website error diagnostics retain error categories and technical references without raw visitor IP addresses, request URLs or headers. Website diagnostic logs are deleted after 30 days. Separate SSH and intrusion-prevention security logs remain managed by the hosting operator.
Retention and requests
Abandoned checkout records become eligible for removal after 30 days, only after the payment provider confirms expiry and no payment, subscription, spent-credit or review record depends on them. Temporary checkout browser and retry bindings are retired after 30 days for finished checkouts. Completed payment records, subscription history, earned and spent referral credits, and review records are retained for account operation and payment reconciliation. Pending or uncertain payments remain available for reconciliation.
Unconfirmed email registrations are removed after 48 hours. Password-reset links expire after one hour. Visit the user-data page (Account → Manage your data) to see what account data we hold and request a copy or permanent account deletion. Data exports and account deletion require email confirmation. Public discussions remain with an anonymous author; private content and account access are removed. Existing backups, operational logs and external provider records are not altered by self-service deletion. Contact Hexui for privacy questions or requests about those records.