Privacy Policy

Last Updated: October 4, 2026

This Privacy Policy explains what data Panel Haus collects, why we collect it, and what your rights are. We wrote it in plain language because legal fog helps nobody.

1. Who We Are

Panel Haus is a web-based comic creation studio operated as an independent project. We are not a corporation. We're a solo-founded product built for writers and storytellers.

2. The Short Version

We collect what we need to run the service, and we store the work you make so you can reach it from any device. We don't sell your data. Ever.

3. What Data We Collect

Data You Provide Directly

The Work You Create

Saved to our servers so it syncs across your devices:

What You Type Into AI Features

Data Created by Using the Service

Data We Do NOT Collect

4. How We Use Your Data

5. Your Content and AI Features

Important: when you use an AI feature, the content you are working on is sent to a third party provider to process. Here is exactly who receives what.

Who Receives What

Custom model training. If you train a custom character or style model, the images you select are packaged and sent to fal.ai to produce it.

How Requests Are Routed

Every AI request goes through our server using our own provider keys. There is no option to supply your own key, and nothing goes from your browser to a provider directly. Credits and rate limits apply. We keep a copy of the prompt and the result as part of your history, and board prompts are also saved separately to your account.

We do not use your content to train our own models, and we do not license it to anyone. Providers handle content under their own terms, linked below.

AI Provider Privacy Policies

6. Registering Your Work as IP (permanent and public)

This is the most important thing in this policy, so read it before you use the feature.

Panel Haus lets you register a comic as an IP asset. If you choose to do this:

This is permanent and public, and it cannot be undone. Not by you, and not by us. IPFS content and blockchain records are designed so that no single party can withdraw them. Once you confirm the transaction, that publication is final.

What this means for your other rights. Everywhere else in this policy, you can ask us to delete your data and we will. Registered IP is the one exception. We can delete our own copy, but we cannot remove anything from IPFS or from the blockchain. Please be sure before you register.

This is entirely optional. Nothing is published anywhere unless you open the registration window, pick your licence terms, and confirm the transaction from your own wallet.

7. Cookies, Local Storage and Analytics

Staying signed in. Your session token is stored in your browser's local storage, and our authentication provider (Clerk) sets its own cookies to keep you signed in.

Analytics. We use Google Analytics 4 to understand how the product is used: which features get opened, where people stop, and which pages bring people in. It sets cookies and identifies a browser rather than a person. Any tracker blocker will stop it, and the product works normally when it does. Google retains the detailed event data under the retention setting on our property, and keeps aggregated reports for longer.

We never send Google Analytics your email, your wallet address, your prompts, your project names, or any other content you create.

PostHog. We also use PostHog, in its own project, for the same kind of question: which features people use, where they get stuck, and whether a page is slow. Session recording is on. A recording can show what is on the screen, including dialogue, chat replies, and project names, because those are drawn on the page. Text typed into form fields is masked. Heatmaps are off.

The person id PostHog stores is your email address or your wallet address. Page paths are recorded without the query string. Clicks can include the text of what was clicked, which can be a project or board name. Event properties do not include your prompts or your story text. Signups and payments are also recorded on our server (the amount and the plan, not the card number, and for a server action only the route, the method, and the result code). An ad blocker stops the browser side. Those server records still exist.

PostHog is hosted in the United States. Events and recordings are kept under the retention settings on our PostHog project.

What We Do Not Use

8. Where Your Data Is Stored

9. Who We Share Data With

We share data only with the providers needed to run Panel Haus.

Our other apps. Panel Haus shares one credit balance with our mobile app, so credits you spend in either appear in the same records.

We Will NEVER

We May Disclose Data If

10. Data Retention

11. Your Rights (GDPR & CCPA)

Regardless of where you live, we extend these rights to all users:

You Have the Right To

For California Residents (CCPA)

For European Residents (GDPR)

One exception, stated plainly. Work you have registered as IP is published to IPFS and to a public blockchain, and we cannot delete it. We will delete our own copies, but the public record stays. Section 6 explains this before you use the feature.

Our legal basis. We process your data to provide the service you signed up for (contract), to keep it working and free of abuse (legitimate interest), and to improve it by reviewing how AI features are used (legitimate interest). Where we rely on legitimate interest you can object at any time, using the contact details below.

How to Exercise Your Rights

Email support@panel.haus. We respond within 30 days.

12. Children's Privacy

Panel Haus is intended for users aged 16 and older, or 13 and older where local law allows and a parent or guardian consents.

13. Security

We take reasonable measures to protect your data:

No system is 100% secure. If we discover a data breach that affects your personal information, we will notify you within 72 hours as required by GDPR.

14. International Data Transfers

Your data may be processed in countries outside your own, including the United States and Canada. Our service providers (Vercel, Neon, Cloudflare, Upstash, Clerk, Stripe, PostHog and Pinata among them) operate globally. By using Panel Haus, you consent to this transfer.

For EU residents: We rely on Standard Contractual Clauses and the data processing agreements of our service providers to ensure adequate data protection.

15. Changes to This Policy

16. Contact

Questions, concerns, or requests about your privacy?

By using Panel Haus, you acknowledge you've read and understood this Privacy Policy.