Updated 24 October 2026

Privacy Policy

Who handles your information

Mohammed Shafiq operates the Nodara website and licensing service. This policy covers this website, support enquiries, purchase accounts and licensing. Purchase availability is shown at checkout; accounts remain accessible during a sales pause.

Contact Mohammed Shafiq at support@nodarapanel.com or +91 75989 46094. Support hours: 9 AM–9 PM IST.

Website visits and support

Our website infrastructure and security providers may process technical request information such as IP address, browser information, requested pages and security logs to serve and protect the website. The website stores your light/dark theme preference in your browser. The current website adds no advertising or analytics tracker.

When you contact support, we receive the contact details, message and files you choose to send. We use them to respond, investigate the issue and handle delivery, account or refund requests. Include only information relevant to your enquiry; do not send passwords, OTPs, full card details or private activation secrets.

Purchase accounts and licensing

The licensing service handles purchase-account usernames, salted password hashes, recovery-code hashes, temporary sessions, plan and license records, selected order/payment/refund references, amounts and paid-term records. Purchase accounts are separate from panel logins. A new recovery code is displayed once after registration, recovery or a password change; the website does not save it or your password in browser storage. Recovery and password changes revoke existing sessions and replace the recovery code. You may add an email address at registration. It is optional and used only, after you confirm it, for payment receipts and password reset links; an email delivery provider sends these messages. Accounts without a confirmed email recover access with the recovery code. Installation checks process an installation identifier, public key and license reference, along with information used to prevent replayed requests. These support sign-in, license activation, payment verification and reconciliation, and abuse prevention.

Checkout uses a secure, HttpOnly sign-in cookie to keep you signed in across page refreshes for up to one hour. The cookie expires with the session and is removed on sign-out. Durable webhook receipts retain selected references and a digest rather than the complete webhook payload. Payment-provider responses may be processed when verifying a transaction.

Service providers

Vercel serves the website and checkout proxy. Cloudflare provides domain infrastructure and runs the licensing service and persistent storage. If you use Razorpay checkout, payment information is entered in Razorpay's interface; Nodara does not store complete card credentials. Razorpay describes its handling in its Privacy Policy. Provider services may process technical information and use infrastructure in different countries.

Optional Discord sign-in

If you choose Continue with Discord, Discord provides your stable user ID and username through identify permission only. We do not request your Discord email. We store that identity, authentication method, creation time and account status, alongside your customer sessions and license records. Discord and password accounts remain separate; they do not combine existing licenses. Discord account recovery happens through Discord, without a Nodara password or recovery code.

The authorization flow uses a Secure, HttpOnly, SameSite=Lax cookie lasting at most five minutes. Temporary state and verifier hashes prevent replay; expired records are pruned. Authorization codes and provider tokens are processed transiently to verify your identity and are not stored as account records or in browser storage. Discord processes your sign-in under its Privacy Policy.

Information in your own installation

License validation does not transmit your hosted game files, backups or workload content. You operate the self-hosted installation and are responsible for how it handles your users' information. Any files you separately send to support are handled as support information.

Why we process it

We process account, sign-in and optional email information with the consent you give when you create an account. Purchase, payment and refund records are processed to provide what you bought and to meet tax, accounting and other legal obligations. Technical request information and security logs are processed to keep the service secure and prevent misuse. Support information is processed because you choose to send it to us.

Age

Accounts are for people aged 18 or older. Registration asks you to confirm this. We do not knowingly process personal data of anyone under 18; if you believe a child has created an account, contact support@nodarapanel.com and we will delete it.

Retention

Expired sessions and anti-replay records are pruned. Account information is kept while your account exists and is deleted when you ask us to delete it. Purchase, payment and refund records are kept for as long as tax and accounting law requires. Security and access logs are kept for at least one year, as Indian data protection rules require, and then deleted when no longer needed. There is no automatic account-deletion facility; deletion is handled on request.

Your rights and how to use them

Under India's Digital Personal Data Protection Act, 2023 you can ask us for a summary of the personal data we process about you and who we share it with; ask us to correct, complete, update or erase it; withdraw your consent at any time, as easily as you gave it; nominate another person to exercise these rights if you die or become unable to; and raise a grievance with us. Withdrawing consent stops further processing based on it, and may mean we close the account, but it does not affect processing already carried out or records we must keep by law.

To use any of these rights or raise a concern, contact support@nodarapanel.com. Mohammed Shafiq answers questions about how your personal data is processed. We may need information to verify that the request relates to you. Do not send identity documents unless a necessary, appropriate verification method has first been agreed. We respond within 90 days. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

Security incidents

If a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires, describing what happened, its likely consequences, what we are doing about it and steps you can take to protect yourself.

Policy updates

This page will be updated when the service or its data practices change. Its update date is shown above. Material changes to the service or its data practices will be described on this page.