Depending on what was confirmed, at most: name, username, email address, and whether it is confirmed. A partner site never gets access to your Panterzone balance, a wallet address, your account role or permissions, or any way into the Panterzone admin area. There is no access to money. Your password never leaves Panterzone.

Revoking access ends the partner site's access immediately, including any access tokens already issued. You trigger it yourself: your account settings contain a "Connected Apps" section listing every site you released details to, the extent of the release and the date. Next to each entry there is a button that ends the release. Afterwards the site can still sign you in through Panterzone, but it will ask you again what should be released.