Last updated: 2026-11-15
This page says what data Galaxy keeps about you, why, and who it is shared with. It lists only what this software actually does.
Who is responsible
The provider's details have not been published yet.
What we keep
| Data | Why |
|---|---|
| Name and email | Creating your account, signing in, sending codes, invoices and alerts |
| Password (only as a hash) | Signing in |
| Language and display mode you chose | Showing the panel the way you asked |
| Two-step sign-in key, if you turn it on | Account security |
| Google, Apple or GitHub account ID and email, if you sign in with them | Signing in without a password |
| IP address and time of important actions (sign-in, create, delete, settings changes) | Security, abuse handling and request limits |
| Wallet transactions, payments and invoices | Accounting and legal duties |
| Domain owner details (name, address, phone), only if you register a domain | The registrar requires them |
| Tickets and attached files | Support |
| Conversations with the AI assistant, if you use it | Showing your own history |
| Files, databases, email and logs of the sites you host | Providing the hosting service; you are responsible for their content |
Your card number never reaches us. You pay on the gateway's page and we keep only the amount, status and reference.
What we do not have
There is no analytics tool, advertising pixel, map, embedded video or third-party chat on this site. Fonts and icons load from this server. We do not sell your data or give it to anyone for advertising.
Services that receive data
Only when you use that feature, and only the services this site's administrator has turned on:
- Payment gateway (Zarinpal, PayPal or NOWPayments): the amount and payment ID. The gateway collects card details itself.
- Domain registrar (Joker or GoDaddy): the domain name and owner details.
- DNS service (Cloudflare or ArvanCloud): your domain's DNS records.
- Sign-in with Google, Apple or GitHub: that service learns you signed in here and gives us your ID and email.
- AI assistant (OpenAI, Anthropic or xAI): your question and the files the model reads are sent to that service with your own API key.
- Let's Encrypt: the domain name, to issue an SSL certificate.
- Outgoing mail server: your email address and the text of system messages.
- Virtual server provider (DigitalOcean), if you order a virtual server: the server's name and technical details.
Some of these services are outside your country.
How long we keep it
Account data is kept for as long as you have an account. There is currently no set period after which the activity history is erased automatically. A System you delete is removed with its files and databases; backup copies remain until their own retention period ends.
Your rights
You can change your name, password and language under "Account". To get a copy of your data, correct it or delete your account, write to the contact above. If you are in the European Union or the United Kingdom, you may also complain to your national data protection authority.
Cookies
We set only essential cookies. See the cookie policy.
Changes to this page
If something changes, this page is updated and the date at the top changes.