Privacy Policy

Last updated: November 2026

What we collect

• Account data: your email address and a password (stored hashed), or your Google account identity if you sign in with Google, plus the username you choose.
• Activity you create: ratings, shelves, reading progress, reviews, lists, follows, and "not interested" choices.
• Bug reports you send: your message, the page you were on, your browser's name and version, and an email address only if you choose to give one. Only the site owner reads them; they're never public.

We don't run third-party ad trackers, and we don't sell your data.

What is public

Panelfall is a social catalog: your username, ratings, shelves, reading progress, reviews, follows, and public lists are visible to anyone, on your profile and in your followers' feeds. Lists marked private are visible only to you. Your email address is never public.

Where it lives

Data is stored with Supabase (our database and authentication provider) and the site is hosted on Vercel. Error reports (see below) are stored with Sentry in the European Union (Frankfurt, Germany). All three act as processors on our behalf.

Cookies

We use only the cookies needed to keep you logged in (authentication session cookies), plus one for the daily games: when you play on /daily we set a random identifier (pf_daily) so each device's answer counts once in the “% of players” stats and the grid's nine-guess limit. It holds no personal information and isn't linked to your account. No advertising or cross-site tracking cookies.

Visit statistics

We count page views with Vercel Web Analytics, to know how many people visit and which pages they use. It sets no cookies, doesn't follow you to other sites, and stores no IP address or anything that identifies you: visits are counted in aggregate only.

Error reports

When something breaks, a technical report is sent to Sentry, an error-monitoring service, so we can fix it: the error message, the page address (without its query string), your browser and operating system, and the steps in the app just before the error. We strip email addresses, cookies and account details before it is sent, and reports go through our own server, so Sentry does not receive your IP address. Reports are kept for a limited time and used only to fix bugs. Sentry does not record your screen or your browsing.

Your rights

You can delete your account yourself at any time: go to your profile and use Delete account at the bottom of the page. It removes your account, ratings, shelves, reading progress, reviews, replies, votes, lists, follows and profile picture immediately and permanently. For a copy of your data, or if you can't sign in any more, write to us from your account's email address and we'll handle it within 30 days.

Contact for privacy requests (export or deletion): hello@panelfall.com.