PteroControlPrivacy policy
The short version
- PteroControl has no accounts, no advertising and no analytics or tracking.
- Your panel addresses and API keys stay in your device's Keychain. The app talks directly to your own panel.
- If you turn on push alerts, a small service we run receives your device's Apple push token, your panel's name and address, and a new API key made just for that service. It is stored encrypted and you can delete it at any time.
What stays on your device
The app stores the following on your device and does not send it to us:
- Saved panels: name, address, API key and, if you add one, an application (admin) API key. These are kept in the iOS Keychain through Expo SecureStore.
- Preferences: theme and accent colour, pinned servers, sort and filter choices, custom console commands, Playbooks, and the Face ID or Touch ID lock setting.
- Face ID and Touch ID are handled entirely by iOS. The app is only told whether authentication succeeded and never receives biometric data.
Removing a panel in the app, or deleting the app, removes this data from your device.
What goes to your panel
When you use the app, requests go from your device directly to your Pterodactyl panel and, for the live console and live statistics, to the Wings daemon on your server's node. We do not operate a proxy for these connections and do not see them. Your panel's administrator controls what your panel logs.
The in-app code editor loads its editing library from cdnjs.cloudflare.com when you open a file. That request tells Cloudflare your IP address. File contents are not sent there.
Optional push alerts
Push alerts are off by default. iOS stops apps in the background, so to notify you while the app is closed, a service we run has to check your panel for you. It only works if you switch it on in Settings and accept the consent screen.
What we receive and store
| Data | Why |
|---|---|
| Your device's Apple Push Notification token | To deliver notifications to your device. |
| The name and web address of the panel you chose | To know which panel to check. |
| A new API key the app creates on your panel, named "PteroControl push relay" | To read whether your servers are online and how much memory they use. Your own API key and password are never sent. |
How it is used
Only to check whether your servers are running and how much memory they use, and to send you a notification when a running server goes offline or runs very low on memory. It is not used for advertising, analytics or tracking, and it is not sold or shared.
How it is protected and kept
- Panel keys and device tokens are encrypted when stored, and connections use HTTPS.
- The key is separate from your own, and it only has the access your panel account has. You can delete it in your panel under Account, API Credentials at any time, which stops alerts immediately.
- Data is kept until you switch alerts off, delete the key, or uninstall the app. Switching alerts off in the app removes your stored panel address and key from the service right away, and your device token is removed with them or within 24 hours. A device that stops being reachable is removed automatically.
- Operational logs do not contain API keys. They may briefly contain technical details such as request counts and shortened device identifiers.
Other services involved
- Apple. Notifications are delivered through the Apple Push Notification service, which receives the notification text and your device token. See Apple's privacy policy.
- Cloudflare. Our website and the push alerts service are served through Cloudflare, which may process your IP address to deliver and protect them.
- Expo. App updates are delivered through Expo's update service (expo.dev). A request for an update includes the app version, platform and your IP address, as with any web request.
What we do not collect
The app contains no analytics, advertising or tracking software. We do not collect your name, email address, contacts, location, photos or advertising identifier, and we do not track you across other apps or websites. We have no user accounts.
Your choices and deleting data
- Turn push alerts off in Settings. This removes your panel address and key from the service right away and your device token within 24 hours at most.
- Delete the "PteroControl push relay" key in your panel to cut off access at once.
- Remove panels in the app, or delete the app, to remove everything stored on your device.
- Email [email protected] if you want us to delete data held by the push alerts service, or have a question about it.
Security
Secrets on your device live in the iOS Keychain. Connections to your panel use whatever address you enter, so use https://. If you find a security problem, please email us before making it public.
Children
PteroControl is a tool for people who run game servers and is not directed at children under 13. We do not knowingly collect information from children.
Changes to this policy
If this policy changes, we will update the date at the top. If a change materially affects what the push alerts service stores or how it is used, we will also update the consent text in the app.
Contact
Questions or requests: [email protected].