Pandan

Privacy policy

Last updated: 8 November 2026

Let’s get this out of the way: I don’t want your data, or your listeners’ data. Pandan hosts podcasts. It stores what it needs for that and nothing more, and it will never collect data for advertising.

— Eric Teubert, running Pandan

Who is responsible

Mundane Bits OÜ, Sepapaja 6, 15551 Tallinn, Estonia, represented by Eric Teubert. Email: hello@pandan.fm.

Hosting

Pandan runs on servers of Hetzner Online GmbH in Helsinki, Finland. Audio files and cover images are stored in Hetzner’s object storage, also in Helsinki. Hetzner processes data on our behalf under a data processing agreement.

Connections to Pandan and to the stored files are encrypted (HTTPS).

Server logs

When you open a page or a podcast app requests an RSS feed, the web server logs the request: time, address requested, status, and the app or browser that sent it. IP addresses are shortened before they are written, so they no longer identify you. We use these logs to run and secure the service.

Cookies

Pandan sets one cookie, a session cookie that keeps you signed in. No one else can read it. There are no other cookies.

No analytics

Pandan has no analytics, on its own pages and in feeds. The one thing it counts is downloads of audio files, as described under “Listeners”. Fonts and scripts are served by Pandan itself, so opening a page contacts no one else.

Your account

When you have an account, Pandan stores:

What you publish is public: your RSS feed, cover image, and published episodes can be read by anyone, which is the point of a podcast. Drafts stay private.

We process this data to provide the service you signed up for (Art. 6(1)(b) GDPR). It stays as long as your account exists. To delete your account, write to us.

Billing

You pay for a plan through Stripe. Checkout runs on Stripe’s own pages, which collect your payment details, your billing address, and your VAT ID if you give one. Pandan never sees your full card number. Stripe stores these details to charge your plan, sends your receipts and invoices, and checks payments for fraud.

Pandan stores the link to your Stripe customer, your plan, and its billing status. When a trial starts, we receive the card’s brand, type, and country and the country of your billing address, to spot fraud.

We process this data to provide the service you pay for (Art. 6(1)(b) GDPR), to meet our accounting duties (Art. 6(1)(c) GDPR), and for our legitimate interest in preventing fraud (Art. 6(1)(f) GDPR). Invoices are kept for seven years, as Estonian accounting law requires.

Stripe Payments Europe, Limited, Dublin, Ireland, processes this data partly on our behalf and partly as a controller of its own, for example to prevent fraud and to meet its own legal duties. Stripe may transfer data to Stripe, Inc. in the United States, under the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses. Stripe’s privacy policy: stripe.com/privacy.

Listeners

Podcast apps fetch a podcast’s RSS feed from Pandan; these requests appear in the server logs as described above. Cover images come directly from Hetzner’s object storage. Like any web server, it needs your IP address to send you a file.

Audio files come from there too, but Pandan counts them first, because what an account pays depends on its monthly downloads. When an app or browser requests an audio file, our server writes the request to a separate log, with the time, the address requested, the app or browser, the part of the file requested, and your full IP address. Then it passes you on to Hetzner.

Within minutes, Pandan copies the request into its database with a hash in place of your IP address. The hash uses a random value that changes every day. That value is deleted once the day is over, and from then on the hash can no longer be traced to your address or linked to another day. The log is deleted within about an hour, and at the latest after 48 hours. The hashed requests are deleted after 90 days and are not in our backups. What stays is the number of downloads per episode and day, which identifies no one. How Pandan counts downloads lists the rules.

We do this for our legitimate interest in charging accounts by their use and in spotting abuse (Art. 6(1)(f) GDPR). You can object at any time. The same counts give each podcast’s publisher its download numbers; for that, we process the data on the publisher’s behalf, under our data processing agreement. We use this data for nothing else, and publishers only see numbers, never single requests.

Podcast websites

Each podcast with a published episode has a public website on its own address under pandan.fm. These websites set no cookies and store nothing in your browser. Their requests appear in the server logs as described above. Images and audio files come directly from Hetzner’s object storage, audio only when you press play or download it, and audio is counted as described under “Listeners”. Nothing else is loaded from elsewhere.

Email

Pandan sends emails to confirm your email address, to sign you in, and when an account is set up for you. It sends them through AhaSend B.V. in Amsterdam, the Netherlands, on servers in the European Economic Area. AhaSend processes your email address and the email for delivery, may check emails for abuse automatically, and keeps delivery logs for a limited time.

When you write to us, we keep your email to answer it. Our email account is at Fastmail Pty Ltd (Australia), in Fastmail’s EU region: the live copy of the email is on Fastmail’s servers in Amsterdam, the Netherlands. Fastmail keeps a replica, backups, and logs in the United States.

Your rights

You can ask which data we store about you, have it corrected or deleted, restrict its processing, object to it, and get a copy of it. Write to hello@pandan.fm.

You can also complain to a data protection authority, for example the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or the authority where you live.

Changes

When Pandan changes how it handles data, this page changes with it. The date at the top shows the last change.