Privacy Policy

Draft - not yet in effect. Last updated: 2026-10-05.

This is a working draft, not a finished legal document. It has not been reviewed by a lawyer. If you plan to accept customers from the EU/UK or California, this is the page most worth a professional review (GDPR/CCPA have specific disclosure and rights requirements this draft only partially covers).

1. What we collect

Data	Why
Email address, password (hashed)	Account login, service notifications
Billing info	Handled entirely by Stripe - we never see or store your card number. We keep your Stripe customer/subscription IDs to manage your subscription.
Server configuration (game, plan, hostname label you choose)	To provision and run your server
Server world data / files you upload	To run your game server and provide backups - this is your content, not personal data about you
IP address (briefly, in connection/audit logs)	Security, abuse prevention, debugging

2. What we don't do

We don't sell your data. We don't read or use the contents of your game server's world files except as needed to operate the Service (e.g. automated backups) or investigate a reported Terms of Service violation.

3. Third parties we use

Service	Purpose
Stripe	Payment processing - see Stripe's privacy policy
Resend	Transactional email (verification, password reset, billing notices)
Cloudflare	DNS, network security, and routing traffic to our servers

Flag for review: if we add analytics/ads tooling later, this section and a cookie notice need to be updated before that ships.

4. Data retention

We keep your account and billing records for as long as your account is active, and for a reasonable period after cancellation for accounting/legal purposes. Server world data is deleted after the hold period shown in your dashboard following cancellation (currently a grace period, then a hold period, both visible to you before anything is removed). You can request earlier deletion by contacting us.

5. Your rights

You can access or correct your account information from your dashboard at any time. To request a copy of your data or full account deletion, use the support contact shown in your dashboard.

Flag for review: if this applies to EU/UK/California residents, this section should spell out GDPR ("right to erasure", "right to portability") / CCPA rights explicitly rather than the general language above.

6. Security

We use industry-standard practices to protect your data, including encrypted connections (HTTPS) and hashed passwords. No online service can guarantee perfect security, but we take reasonable steps to protect your information.

7. Changes to this policy

We may update this policy from time to time. We'll notify active customers of material changes by email before they take effect.

8. Contact

Questions about this policy: use the support contact shown in your dashboard once you're a customer. (Not open for signups yet - see the homepage to be notified at launch.)