How PandaDR collects, uses and protects your information.
Version 2.0 — Effective date: August 30, 2026
This Privacy Policy describes how PandaDR (https://pandadr.com) — owned and operated by WANG YUFENG, an independent developer based in China ("PandaDR", "we", "us") — collects, uses and protects your information. You can reach us for any privacy matter at support@pandadr.com.
Payments on PandaDR are processed by Waffo Pancake (https://waffo.ai) acting as merchant of record: Waffo Pancake is the controller for payment and tax data it collects, and we receive only the order confirmation needed to activate your placement.
Information you provide voluntarily:
Payment details (card numbers) are collected and stored by Waffo Pancake only — never on our servers. We receive the order ID, plan and confirmation status.
Information collected automatically:
We use only strictly necessary cookies (sign-in session, theme preference) — these cannot be disabled without breaking core features. Analytics uses OpenPanel (https://openpanel.dev) for privacy-conscious, aggregate measurement; you can opt out via your browser's do-not-track setting or by contacting us. We run no advertising or cross-site tracking.
We do not sell your personal data. We share it only with processors that help operate the site, each bound by a data-processing agreement:
We may disclose information where required by law, or to protect our rights and safety.
Our vendors operate primarily in the United States, the EU and Singapore, so your data may be processed outside your country. Transfers rely on adequate safeguards such as the EU Standard Contractual Clauses or equivalent frameworks offered by these providers. We only send the minimum data each provider needs.
We protect your data with HTTPS/TLS in transit, hashed credentials, least-privilege access to production systems and vetted infrastructure providers. In case of a breach affecting your personal data, we will notify affected users and regulators within 72 hours of becoming aware, as required by law.
Depending on your location (including under the EU/UK GDPR and similar laws), you have the right to: access your data; correct inaccurate data; delete your data; restrict or object to processing; data portability; withdraw consent at any time; and not be discriminated against for exercising these rights.
To exercise any right, email support@pandadr.com — we respond within 30 calendar days. You also have the right to complain to your local data protection authority.
The service is not directed to children under 16 (or 13 in the United States, or the equivalent minimum age in your jurisdiction), and we do not knowingly collect their data. Contact us if you believe a child has provided data and we will delete it.
We only send marketing emails (newsletter) with your consent. Every marketing email contains an unsubscribe link; unsubscribing takes effect immediately and does not affect service-related emails (verification, payment and listing status).
We may update this Privacy Policy. Material changes will be announced at least 15 days before taking effect (by email to account holders and/or a notice on the site). The current version with its effective date is always available on this page.
Privacy questions, requests or complaints: support@pandadr.com. We aim to reply within 2 business days.
