1. What we collect
- Account and order data: the name or alias and email address you give us, an optional company name and VAT number for your invoice, the servers you rent and your correspondence with us. We do not ask for ID documents (no KYC).
- Payment data: cryptocurrency transaction IDs and the receiving addresses we generate for you. We do not process cards or bank transfers.
- Technical data: the IP address and user agent of requests to this website and to the console, kept in server logs for 30 days for security and abuse prevention.
- Orders and support tickets: what you enter in the order form and in your tickets, with the IP address and time of submission.
We do not use advertising trackers, third-party analytics scripts or marketing cookies. The only cookie this site sets is a session cookie used to protect forms.
2. Why we use it
To answer your requests, provision and support your servers, invoice you, comply with tax and accounting law, prevent abuse of our network, and — if you ask us to — tell you about changes to the service. The legal bases are performance of a contract, legal obligation and our legitimate interest in running a secure service.
3. Data on your server
Whatever you store or process on a rented server is your data, under your control. We do not access it without your written consent unless the law requires it, and we cryptographically erase local drives when your plan ends.
4. Who we share it with
The data centers that house the hardware (physical access only — they have no access to your data), our accountants and auditors, and authorities where the law requires. We never sell personal data.
5. How long we keep it
- Account and invoice records: for the duration of the contract and 7 years afterwards, as required by accounting law.
- Order and contact requests that do not become contracts: 12 months.
- Website and console logs: 30 days.
6. Your rights
You can ask for a copy of your personal data, have it corrected or deleted where we no longer need it, object to or restrict processing, and complain to your local data protection authority. Requests are made by ticket from your console, in the Account & access queue, and answered within 30 days. Support tickets are reserved for customers with an active dedicated server; an account without one holds only an email address, a password hash, its orders and its sign-in log.
7. Security
Customer data lives on encrypted storage in access-controlled facilities, access is limited to staff who need it and logged, and all connections to this site and the console use TLS. Customers report a security concern through a Trust & safety ticket from their console.
8. Changes
If this policy changes materially we will email account holders 30 days before the change takes effect.