Last updated: 10 October 2026
Galaxy Control Panel runs on your own computer. Almost everything it touches never leaves it, and the one thing that does is described in full below.
No analytics, no usage reporting, no crash reporting, no "anonymous statistics". We receive nothing about how you use the software, which commands your bots run, who is in your servers, or what anybody says in them.
Everything the software stores stays on your PC:
| What | Where |
|---|---|
| Your bot tokens and API keys | .env in the panel's own folder |
| Settings, playlists, tags, warnings, linked accounts | data\ in the panel's own folder |
| Your licence key, and how much of a dated key is left | data\licence.json, %LOCALAPPDATA%\Galaxy Inc, and your own registry |
We cannot read any of it. There is no account that syncs it, no backup we hold, and no way for us to recover it for you if you lose it — which is the trade for us never having it in the first place.
When it has a licence key and a working connection, the panel sends a short hello, about once a day, so your account page can say how many computers your key is in use on. It contains:
That is the whole message. It carries no name, no email address, no IP-derived location we keep, no machine details, and nothing about your bots. Its only purpose is to let us tell you if your key has turned up somewhere it should not have.
The key itself is in there because we check its signature before recording anything — the random number on its own is unsigned, and anybody could use one to inflate somebody else's count. The key is already yours and works on any PC it is pasted into, so this tells us nothing we did not issue. The random number is random on purpose: a number derived from your hostname or your disk would be a fingerprint we could cross-reference later, and this only has to tell two installations apart.
If it never reaches us — no connection, a firewall, or you would simply rather it did not — nothing about the software changes. Licence keys are checked on your own PC, offline, against a signature. Nothing is ever sent anywhere to decide whether your key is valid.
While "DM me when a new version is out" is on — it ships on — one of your bots asks GitHub, about once a day, which release is the latest. It sends no data of its own: it is a plain request for a public file, the same one your browser would make if you opened the releases page yourself. Like any web request, it tells GitHub your IP address and the time you asked, and GitHub's privacy policy covers what GitHub does with that.
The reply is a version number. If it is newer than your copy, a bot DMs you once to say so and nothing is downloaded or installed — that still takes you pressing Check for updates in Settings → Updates.
None of this reaches us. We are not GitHub's customer here and we are not told who asked, how many asked, or whether anybody updated. Turn the setting off and no request is made at all.
The download is free and needs no account. An account exists only so a licence key can reach you, and it holds:
We use those to send your key, to answer you, and to keep our own records. We do not sell them and we do not send you anything you did not ask for.
To have your account deleted, ask in the support server: https://discord.gg/cYHX7PDzYS, or write to support@galaxyforge.dev if you have no Discord account. Keys already issued to you keep working — deleting the account does not switch off software you paid for.
The panel talks to whatever you point it at, and those services have their own terms and privacy policies:
The software is not directed at children under 13, and we do not knowingly collect anything from them.
If this ever changes in a way that affects what we receive, we will say so in the support server and in the release notes — not only by quietly editing this page.
Support server: https://discord.gg/cYHX7PDzYS
Or write: support@galaxyforge.dev for anything about your data, legal@galaxyforge.dev for anything formal.
Galaxy Control Panel is not affiliated with, endorsed by or sponsored by Discord Inc.