Privacy policy

The controller responsible for data processing on this website is: Magnus Ohle, Haaggasse 10, 72070 Tübingen.

Contact for data protection enquiries: [email protected]

The website is hosted by OVH SAS („OVHcloud“), 2 rue Kellermann, 59100 Roubaix, France. It is additionally delivered via the Content Delivery Network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, which defends against requests and delivers content from a geographically closer location. Both have a data processing agreement in place pursuant to Art. 28 GDPR; the transfer to Cloudflare as a US company is based on the EU Standard Contractual Clauses.

When a page is accessed, the host and CDN process technically necessary access data: IP address, date and time, the address accessed, the amount of data transferred, referrer, and browser and operating system identifiers. The legal basis is Art. 6 para. 1 lit. f GDPR; the legitimate interest lies in the secure and stable operation.

To investigate recurring attacks we additionally retain, until the 9 of October 2026, 11:00 CEST, limited security logs for page views and requests to our reach measurement. These contain the full IP address, the time, the page path without search parameters, the referrer hostname, the browser identifier, and technical details about delivery and the request ID. Form contents, email addresses, cookies and access keys are not stored in these logs.

In these private logs we can assign matching requests to the existing, time-limited analytics session in order to compare attack patterns with ordinary visits. The IP address is not transferred into the analytics database as a result. Such an assignment may group several people sharing the same connection and browser fingerprint and does not identify any person as an attacker. Referral channels alone do not lead to a block.

Access to these logs is restricted to authorised administrators only. The files are deleted by a per-minute cleanup after at most 72 hours; a combined size limit of 32 MiB may lead to earlier deletion. Separate logs of already-detected attack patterns are recorded until 7 October 2026, 10:43 CEST, and deleted after seven days at the latest. The legal basis for this security processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to investigate attacks, ensure availability and specifically test protective measures. A restart does not extend the retention periods stated above.

This website does not set cookies for analytics or advertising purposes.

To apply filters we set a technically required session cookie. It contains a random, server-side signed identifier and expires after 30 minutes. JavaScript cannot read this cookie. It is used neither for advertising nor for linking with our reach measurement. A further cookie transfers the confirmed filters for at most one minute within the respective request.

To limit requests we use temporary counters held in memory. For issuing new sessions, the IP address confirmed by our own proxy is converted into a check value using a key that exists only in the server process. This counter expires after ten minutes; the IP address and cookie values are not stored permanently for this. Without JavaScript or with session cookies blocked, the default views remain accessible; individual filters require a confirmed session.

We do not use any advertising or marketing-related tracking services or third-party analytics. For technical and statistical analysis of usage, we run our own server-side audience measurement.

This records the event type, the requested path, the timestamp, the referrer and any UTM parameters, along with the technical connection data of the request. We set no cookies for this measurement and do not store or read any persistent identifier in your browser. To link page changes within a visit, a hash is computed server-side from the IP address and browser identifier, using a secret key. The linking keys rotate every 30 minutes; after 30 minutes without activity, the link expires and is deleted in the next minute-by-minute cleanup run. The IP address and the full browser identifier are not stored in the analytics database. This linking is an estimate: users with the same connection and browser identifier may be grouped together. No cross-device or cross-session journey linking and no profiling takes place. The measurement serves exclusively the secure operation and the improvement of the offering.

The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to understand usage and technical errors in aggregated form and to improve the website. We limit the data to what is necessary for this purpose and keep it only as long as required for that purpose.

When you click an offer link, you leave this website and go directly to the respective panel's page. The link may contain a partner ID, which allows the panel to assign an order placed through us. In doing so, the panel learns your IP address and the usual connection data and may set its own cookies. The privacy policy of the respective provider then applies:

• Cloutsy — cloutsy.com
• FiveBBC — app.fivebbc.com
• DripFeedPanel — dripfeedpanel.com
• SMMFlare — smmflare.com
• YTBot — www.ytbot.com
• APISeller — apiseller.com
• Auto SMM Panel — autosmmpanel.com
• FansSuply — fanssuply.com
• JungleSMM — junglesmm.com
• Marketerum — marketerum.com
• SMMExclusive — smmexclusive.com
• Stream promotion — stream-promotion.com
• SMM-1 — smm-1.com
• CrazyPanel — crazypanel.com
• JingleSMM — jinglesmm.com
• Solid SMM — solidsmm.com
• InstantPanel — instantpanel.net
• PureSMM — puresmm.com
• FullSMM — fullsmm.com
• MagnetBoosting — magnetboosting.com
• MegaVirality — megavirality.com
• SMMShiba — smmshiba.com
• SMMTalk — smmtalk.com
• SocNet — smm.socnet.pro
• Viewsta — viewsta.com

The legal basis for forwarding with a partner ID is Art. 6 para. 1 lit. f GDPR (legitimate interest in financing a free comparison offer).

The compared offer data comes from the public catalogue interfaces of the panels and contains no personal data. It is retrieved and stored regularly so that prices and offer availability can be compared over time.

With the request form you ask for a personal answer about Managed Ordering. We store your email address, the page path without search parameters, the time of the request, and the version and time of your confirmation of the notice in the form. Your email address is not transmitted to our reach measurement; we do not store any IP address in the request record.

We use these details solely to process your request and to reply to you personally. The form does not sign you up for a newsletter or marketing mailing list. The legal basis is Art. 6 para. 1 lit. b GDPR for the pre-contractual communication you requested.

Inquiries are only accessible to authorised administrators. Completed inquiries are deleted from the inquiry area once processing is finished and no further retention is required. You can also request deletion via [email protected]. Technical access data when submitting is subject to the details in the section on hosting and server log files.

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to object to processing based on legitimate interests (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority, usually at your place of habitual residence or at the controller's registered office.

This explanation will be adjusted as soon as the processing changes — for example when services are added. Version as of: 6. October 2026.