Policies
Privacy policy
We collect what running your server and billing you requires, and nothing for advertising. Here is the whole list.
The legal business name, jurisdiction, and contact address are being confirmed and will be added here before any payment is accepted. Until then this page is a draft of the terms we intend to operate under.
What we collect and why
| Data | Why | Kept for |
|---|---|---|
| Email address, optional name | Your account login (by emailed sign-in link), receipts and invoices from Stripe, and service notices: delivery, a provisioning failure, a failed payment, suspension, recovery, a completed plan change, and a final warning before files are deleted. This is needed to provide the service. | While your account exists, then 90 days |
| Orders, invoices, subscription status | Billing and our records. Payment card details go directly to Stripe; we store only Stripe's identifiers and the invoice amounts. | 7 years, for tax and accounting records |
| Billing address and tax status | Only if required to calculate tax on the Stripe checkout page. | With the invoices |
| Server files and worlds | Stored to run your server. We access them only to provide support you asked for, to fix a fault, or as required by law. | 7 days after a cancellation takes effect, or 14 days after a suspension for non-payment |
| Panel activity and server logs | Security, debugging, and abuse prevention. Includes IP addresses of panel logins and of players connecting to your server. | 30 days, unless part of an investigation |
| Support messages | To answer you and to keep a record of what was agreed. | While the request is open, then 2 years |
| Website server logs | Security and error diagnosis. Contain IP address, page requested, and browser type. | 30 days |
We do not run analytics, advertising, or session-recording tools on this website, and we do not sell or share personal data for advertising. We do not knowingly collect data from children under 13.
Who receives data
- Stripe processes payments and stores your card details under its own privacy policy. We receive confirmation, the last four digits, and invoice status.
- Our email provider delivers sign-in links, invoices, and notices.
- ReliableSite operates the data center in Miami, Florida, where our server physically sits. They have no access to your account or files.
- Authorities, only when a law we are subject to requires it.
We do not use any other processors. If that changes, this page changes first.
Cookies and local storage
The storefront sets no cookies. It uses one browser storage entry (one localStorage key that remembers your plan configuration between pages). The account area sets a session cookie after you sign in, and the game panel sets its own session cookie on its own address. All of these are strictly necessary to provide what you asked for, so no consent banner is shown. Details are on the cookies page.
Where data is stored
Account, billing, and server data are stored on our server in the United States. Stripe stores payment data in its own infrastructure. If you are outside the United States, using the service means your data is transferred to and processed in the United States.
Your rights
You can see your account details in your account area and download your server files from the panel whenever the server is running. A suspended or ended server cannot be opened, so ask us for a copy instead and we will send one while the files are still within the retention period above. You can delete your account by cancelling all services and asking us to close it. You can also ask us for a copy of the personal data we hold about you, ask us to correct or delete it, or object to a use you disagree with. We answer within 30 days. If you live in a place with additional statutory rights (for example the UK or the EU), those apply as well. Contact: the support page, topic "Something else".
Security
Sign-in is by emailed link, so there is no password for us to lose, and a link expires fifteen minutes after we send it. Sessions use secure, HTTP-only cookies that are never cached or indexed. Card data never touches our systems: payment details go straight to Stripe and we store only their identifiers. We keep software updated and log security-relevant events. No system is perfectly secure; if we learn of a breach affecting your data, we tell you promptly and honestly.
Changes
When this policy changes in a way that matters, we email account holders and update the date at the top. The business identity behind Hexane Hosting is added to this page as soon as it is confirmed.