Privacy policy

Last updated: 27 October 2026

Let’s get this out of the way: I don’t want your data, or your listeners’ data. Pandan hosts podcasts. It stores what it needs for that and nothing more, and it will never collect data for advertising.

— Eric Teubert, running Pandan

Who is responsible

Mundane Bits OÜ, Sepapaja 6, 15551 Tallinn, Estonia, represented by Eric Teubert. Email: mundanebits@ericteubert.de.

Hosting

Pandan runs on servers of Hetzner Online GmbH in Helsinki, Finland. Audio files and cover images are stored in Hetzner’s object storage, also in Helsinki. Hetzner processes data on our behalf under a data processing agreement.

Connections to Pandan and to the stored files are encrypted (HTTPS).

Server logs

When you open a page or a podcast app requests an RSS feed, the web server logs the request: time, address requested, status, and the app or browser that sent it. IP addresses are shortened before they are written, so they no longer identify you. We use these logs to run and secure the service.

Cookies

Pandan sets one cookie, a session cookie that keeps you signed in. No one else can read it. There are no other cookies.

No tracking, no statistics

Pandan has no analytics and no tracking, on its own pages and in feeds. It does not count listeners or downloads. Fonts and scripts are served by Pandan itself, so opening a page contacts no one else.

Your account

When you have an account, Pandan stores:

• your email address and your password, which is stored only as a secure hash;
• your podcasts: their texts, cover images, and audio files, and, when you import a podcast, the address of its old RSS feed.

What you publish is public: your RSS feed, cover image, and published episodes can be read by anyone, which is the point of a podcast. Drafts stay private.

We process this data to provide the service you signed up for (Art. 6(1)(b) GDPR). It stays as long as your account exists. To delete your account, write to us.

Listeners

Podcast apps fetch a podcast’s RSS feed from Pandan; these requests appear in the server logs as described above. Audio files and cover images come directly from Hetzner’s object storage. Like any web server, it needs your IP address to send you a file. Pandan does not log these downloads.

Email

Pandan sends emails to confirm your email address, to sign you in, and when an account is set up for you. It sends them through Mailgun (Sinch), using Mailgun’s EU region. Mailgun processes your email address and the email for delivery and keeps delivery logs for a limited time.

When you write to us, we keep your email to answer it, in our email account.

Your rights

You can ask which data we store about you, have it corrected or deleted, restrict its processing, object to it, and get a copy of it. Write to mundanebits@ericteubert.de.

You can also complain to a data protection authority, for example the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or the authority where you live.

Changes

When Pandan changes how it handles data, this page changes with it. The date at the top shows the last change.