Privacy Policy

Last Updated: November 12, 2025

Data Controller

We are the data controller responsible for your personal data. For privacy-related inquiries, please contact us through our support email address.

Legal Basis for Processing

We process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

• Contractual Necessity: Processing is necessary to provide our hosting services, manage your account, and fulfill our contractual obligations to you.
• Legitimate Interest: We have a legitimate interest in preventing fraud, ensuring security, enforcing our policies, and improving our services.
• Legal Obligation: We may process data to comply with legal requirements, such as tax reporting or responding to lawful requests from authorities.
• Consent: Where required, we obtain your explicit consent, which you may withdraw at any time by deleting your account.

1. Information We Collect

We collect the following information to provide and improve our services:

• Discord Information: Your Discord ID, username, discriminator, avatar, and email address, as provided by the Discord OAuth2 authentication process.
• Game Panel Account Information: A user account is created on our game panel software (Pterodactyl) and linked to your Discord account via an internal ID. This includes your Pterodactyl user ID for server management and resource allocation tracking.
• Server Information: Details about the servers you create, including their resource allocations (CPU, memory, disk), metadata, and associated plans. We track server usage patterns to ensure compliance with our Fair Use Policy.
• Transaction History: Records of all payments, including amounts, dates, transaction IDs, and payment method information processed through our payment provider.
• IP Addresses: We log the IP address used during login and other interactions for security purposes, such as abuse prevention, unauthorized access investigation, and rate limiting. We may use this data to block connections from known abusive sources.
• Account Activity: Audit logs recording administrative actions, server deployments, plan changes, resource modifications, and policy violations for security and compliance purposes.
• Support Communications: Emails and messages exchanged with our support team about your service requests and issues.

2. How We Use Your Information

Your data is used exclusively to:

• Authenticate you and provide access to our client area dashboard.
• Create and manage your game servers on our hosting infrastructure.
• Process payments and manage your account balance and billing.
• Track resource usage and enforce resource allocation policies.
• Communicate with you about your account, services, policy violations, or security concerns.
• Monitor for and prevent violations of our Terms of Service and Fair Use Policy.
• Generate audit logs for administrative oversight and security investigations.
• Improve our services and user experience.

3. Data Processing and Infrastructure

To deliver our services, we utilize specific software platforms and payment processors. We do not sell, rent, or share your personal data with third parties for marketing purposes. Data sharing is limited to service providers necessary for operations:

• Pterodactyl Panel: Your game servers are created and managed on our own infrastructure using Pterodactyl panel software. User account data, server configurations, and resource allocations are processed and stored on our own servers that we control.
• Stripe: We use Stripe as our payment processor for secure payment handling. Stripe processes credit card and payment information according to their own privacy policy. We do not store your full credit card information on our systems.
• Discord: We use Discord OAuth2 for authentication only. We do not store your Discord password and access Discord's public API only for user information.
• Database Storage: All user data is stored in our MariaDB database hosted on our own infrastructure.

3a. International Data Transfers

Our primary infrastructure is located within the European Economic Area (EEA). Some third-party service providers (such as Discord and Stripe) may process data outside the EEA. These providers maintain appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions to ensure GDPR-compliant data protection.

3b. Jurisdiction and Applicable Law

This Privacy Policy and our data processing practices are governed by the laws of the Republic of Latvia and comply with the European Union's General Data Protection Regulation (GDPR).

4. Data Security

We implement industry-standard security measures to protect your personal data:

• Passwords are hashed using bcryptjs with secure salting algorithms.
• Session data is stored securely with HTTP-only, secure cookies.
• All data transmission uses HTTPS encryption.
• Database credentials and API keys are stored as environment variables, not in version control.
• IP logging is used to detect and prevent unauthorized access attempts.

5. Data Retention and Deletion

You may request the deletion of your account at any time from your "My Account" page. When a deletion request is made, we will initiate a 24-hour "cooling-off" period. During this time, you can cancel the deletion request by logging in again. After 24 hours, your account and all associated personal data will be permanently deleted from our systems, including:

• Your user account and profile information
• All associated game servers
• Your transaction history
• Server files and configurations
• Support emails and messages

However, anonymized audit logs may be retained for security and compliance purposes.

6. Your Rights (GDPR Compliance)

You have the following rights regarding your personal data:

• Right to Access: You have the right to request and download your personal data at any time from your "My Account" page. This includes your account information, server metadata, configuration files, and transaction history.
• Right to Deletion: You have the right to request deletion of your account and associated data (subject to the cooling-off period described above).
• Right to Data Portability: You can download your server files and configurations at any time.
• Right to Withdraw Consent: You may revoke consent for data processing at any time by deleting your account.

7. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users within 72 hours of becoming aware of the breach, as required by GDPR. Notifications will be sent via email or through an account dashboard notification. We will provide information about the nature of the breach, potential consequences, and measures taken to address it.

8. Children and Minors

Our services are available to users aged 13 and older. For users aged 13-18, parental consent and supervision is required. Parents or legal guardians are responsible for their minor children's use of the service. We do not knowingly collect information from children under 13.

9. Policy Changes

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated date. Your continued use of our services constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us by email through our support address.