Legal
Privacy Policy
Last updated: not configured
Controller
- Controller
- not configured
- Address
- not configured
- Country
- not configured
- Registration
- not configured
- Contact
- not configured
- Legal basis
- not configured
1. Information We Collect
When you register, we collect your email address, username, and (if you use OAuth) your Discord or Google account identifiers and avatar. We also collect server creation, runtime and daily-allocation usage data, plus login session tokens. Support tickets store the conversation, optional attachments, and the Discord account link used to sync replies.
2. How We Use Your Information
We use your information to operate the Service, authenticate you, send password-reset emails, display your profile, and log events for abuse prevention. Support conversations are shown to you, to people added to the ticket, and to dashboard administrators. We do not sell or share your personal data with third parties for marketing purposes.
3. Third-Party Services
We use the following third-party services: Pterodactyl (server management), Discord and Google (OAuth login and, when configured, Discord support sync), Cloudflare (DDoS protection and DNS), and optionally Cloudflare Turnstile (bot protection) and proxycheck.io (VPN detection). Each has its own privacy policy.
4. Cookies & Sessions
We use a short-lived, secure HttpOnly session cookie to keep you logged in. The application cannot read this cookie from JavaScript. We do not use third-party tracking cookies. Cloudflare may set cookies for security purposes.
5. Data Retention
Account data is retained for as long as your account is active. Expired or deleted servers are removed after the configured deletion delay. Support tickets stay until an administrator archives them or you ask us to delete the account. You may request deletion of your account and associated data at any time.
6. Data Security
Passwords are hashed using industry-standard algorithms and never stored in plain text. All traffic between your browser and our service is encrypted via TLS. Access to production systems is restricted to authorised personnel.
7. Your Rights
You have the right to access, correct, or delete your personal data at any time through the profile settings page. If you wish to delete your account entirely, use the account deletion option in your profile or contact us via Discord.
8. Children's Privacy
The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal data, please contact us.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes via the service or our Discord server. Continued use after changes constitutes acceptance.
10. Contact
For privacy-related questions or data requests, use the contact details below or our Discord server.