What we collect
- Account details: your username, email address and a securely hashed password (we never store your password itself).
- Billing: order history and payment status. Card details are handled by Stripe; we never see or store your full card number.
- Server data: the files, worlds and settings on your servers, plus console logs.
- Support: the content of tickets and chats with our team or our AI assistant.
- Technical data: IP addresses and request logs, used for security and troubleshooting.
- Website analytics: pages viewed and buttons clicked, linked to a random ID stored in your browser. We run this ourselves; nothing is sent to advertising or analytics companies.
How we use it
To provide and secure the Services, process payments, answer support requests, prevent fraud and abuse (including free trial abuse), credit affiliate referrals, and improve the website and panel. We don't sell your personal data.
Cookies and local storage
| Name | Purpose |
|---|---|
| Session cookie | Keeps you logged in. |
ns5_ref | Remembers which affiliate link you arrived through, for up to 30 days. |
| Local storage IDs | Random IDs for our own first-party analytics and to remember dismissed banners. |
We don't use advertising or cross-site tracking cookies.
Who we share it with
- Stripe, to process payments.
- Our AI provider, to power our support assistant and screen uploaded profile pictures. Only the content of those conversations or images is sent.
- Hosting providers that run our data-centre hardware.
- Authorities, if the law requires it.
How long we keep it
We keep account data while your account is open. Server files are deleted after a server is cancelled or terminated. We may keep billing records for as long as tax law requires, and logs for a limited period for security.
Your rights
You can ask to see, correct, export or delete your personal data by opening a support ticket. Depending on where you live (for example under GDPR or CCPA) you may have further rights, including objecting to processing or complaining to a regulator.
Security
Passwords are hashed with bcrypt, connections use HTTPS, file transfer uses SFTP, and each game server is isolated in its own container. No system is perfectly secure, so please use a strong, unique password.
Children
The Services aren't directed at children under 13, and we don't knowingly collect their data.
Changes
We'll update this page when our practices change and note the date at the top.