Privacy Policy
Last updated: 27 October 2026
1. Who is responsible
The data controller is İmera Dijital Tasarım ve Yazılım, a sole proprietorship registered with the Istanbul Trade Registry (no. 336509-5), Üsküdar, İstanbul, Türkiye. Contact for all privacy matters: support@wolfpanel.net. Our full legal name and postal address are available on request.
This policy applies under the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK). Section 11 gives the additional information KVKK requires.
2. What we collect and why
| Data | Examples | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Account data | Name, email, password hash, company name, phone (optional) | Create and secure your account, contact you about the Service | Contract |
| Team and access data | Invited users, roles, workspace and server access | Let you share access with your team and clients | Contract |
| Billing data | Plan, subscription status, invoices, billing country | Run your subscription; Polar holds your card and billing details | Contract, legal obligation |
| Server and panel data | Server IP and hostname, installed software, sites and domains, metrics, logs, settings, command history | Provide the control panel and run the actions you request | Contract |
| Security and usage logs | Login times, IP address, browser, audit trail of actions | Keep the Service and your account secure; investigate abuse | Legitimate interest |
| Support messages | Tickets and emails | Answer your requests | Contract, legitimate interest |
| Website analytics | Pages visited, device, approximate location | Understand and improve the website | Consent |
We do not sell personal data and do not use it for advertising.
You need to give us account data to use the Service; without it we cannot provide it. We do not make decisions about you based solely on automated processing.
Data on your servers. Your servers may hold personal data of your own users (for example website visitors or mailbox owners). WolfPanel processes such data only to provide the Service on your instructions, as your processor.
3. Who we share data with
| Recipient | Role | Location |
|---|---|---|
| Hetzner Online GmbH | Hosting of the WolfPanel platform | Germany |
| Polar Software, Inc. | Merchant of record: payments, tax, invoicing. Polar acts as an independent controller for payment data under its own privacy policy | United States |
| Google (Analytics 4) | Website analytics, only with your consent | United States |
We may also disclose data where the law requires it.
4. International transfers
We are based in Türkiye and our platform is hosted in Germany. Some providers are in the United States. For transfers out of the EU we rely on the European Commission's standard contractual clauses, or on the EU–US Data Privacy Framework where the recipient is certified under it. For transfers out of Türkiye we rely on the safeguards in KVKK Article 9, such as standard contracts notified to the Personal Data Protection Authority.
5. How long we keep data
- Account and panel data: kept while your account exists, and deleted when you ask us to delete your account.
- Raw server metrics: up to 30 days.
- Audit and security logs: kept for the life of the account, to protect it and investigate misuse.
- Billing records: as long as tax and commercial law requires; Polar keeps its own records.
6. Your rights
You can ask us to access, correct, delete, restrict or port your data, and object to processing based on legitimate interest. Where we rely on consent, you can withdraw it at any time. Under KVKK you also have the rights listed in section 11. Send requests to support@wolfpanel.net; we answer within 30 days.
You may complain to your local data protection authority, or in Türkiye to the Personal Data Protection Authority (KVKK).
7. Cookies
- Necessary: login session and security cookies. Always on.
- Preferences: language and remembered panel settings, stored in your browser.
- Analytics: Google Analytics 4, set only after you accept them in the cookie banner. You can change your choice at any time from "Cookie settings" in the footer.
8. Security
We use encryption in transit, hashed passwords, access controls and audit logs. The agent connects to us with its own token, and dangerous server actions require explicit confirmation.
9. Children
The Service is not intended for anyone under 18.
10. Changes
We will announce material changes to this policy by email or in the account area before they apply.
11. Türkiye (KVKK)
For processing subject to KVKK, the data controller is İmera Dijital Tasarım ve Yazılım (see section 1). This section, together with the rest of this policy, is our information notice under KVKK Article 10.
- Legal grounds (KVKK Article 5(2)): performance of a contract (c), a legal obligation (ç), establishing, exercising or protecting a right (e) and our legitimate interest (f). Website analytics cookies rely on your explicit consent.
- How we collect data: electronically, through registration and account forms, the control panel, the WolfPanel agent you install on your server, the checkout page, support requests and cookies.
- Transfers: to the recipients in section 3, and to public authorities where the law requires. Transfers abroad follow KVKK Article 9, as described in section 4.
- Your rights (KVKK Article 11): to learn whether your data is processed; to request information about it; to learn why it is processed and whether it is used for that purpose; to know the third parties in Türkiye or abroad it is transferred to; to have incomplete or inaccurate data corrected; to have it deleted or destroyed; to have corrections and deletions notified to those third parties; to object to a result against you that comes solely from automated analysis; and to claim compensation for damage caused by unlawful processing.
- How to apply: email support@wolfpanel.net from the address registered in your account, or write to us by post; we give our postal address on request. We answer free of charge within 30 days. If we reject your application, you find our answer insufficient or we do not answer in time, you can complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) under KVKK Article 14.