Privacy Policy

01Who we are

NodePeak provides game server hosting, Cloud VPS and free server tools. This policy explains what personal data we process when you use nodepeak.com or our services, why we process it, and the rights you have. It applies to customers, visitors and anyone contacting our support.

02Data we collect

We only collect what we need to run the service:

• Account data: name, email address, password hash and optional two factor secrets.
• Billing data: invoices, chosen currency, country for tax purposes and the last 4 digits plus brand of your card. Full card numbers never touch our servers; they go directly to our payment processors.
• Service data: server configurations, panel actions and the content you upload to your servers.
• Support data: tickets, chat transcripts and emails you send us.
• Technical data: IP addresses, access logs and basic device information, kept for security, abuse prevention and debugging.

03What we use it for

• Providing and operating the services you ordered (contract).
• Billing, invoicing and tax compliance (legal obligation).
• Fighting fraud, abuse and attacks against our network (legitimate interest).
• Answering support requests (contract).
• Sending service notices such as invoices, maintenance windows and security alerts. Marketing email is opt in and every message has an unsubscribe link (consent).

We do not sell personal data. Ever.

04Cookies and local storage

The website uses a small number of strictly functional cookies and browser storage entries: your session, your theme choice, your preferred display currency and a cached copy of exchange rates. We do not run third party advertising trackers. Where we use analytics, they are self hosted and IP addresses are anonymised.

05Who we share data with

Data leaves NodePeak only when the service requires it:

• Payment processors, to charge your chosen payment method.
• Infrastructure providers hosting our hardware in the datacenters listed on the site.
• Email delivery providers, to send transactional mail.
• Authorities, when a valid legal order compels us and only to the extent required.

All processors are bound by data processing agreements. Where data is transferred outside the EEA we rely on standard contractual clauses or an adequacy decision.

06How long we keep it

• Server content: deleted permanently within 14 days after service termination.
• Access and security logs: up to 90 days.
• Support tickets: 24 months after the last message.
• Invoices and billing records: as long as tax law requires, typically 10 years.
• Account data: until you delete your account, then removed within 30 days except where retention is legally required.

07Security

Data is encrypted in transit, access to production systems is restricted to staff who need it and protected by hardware keys, and passwords are stored using modern adaptive hashing. No system is perfectly secure; if a breach affects your data we will notify you and the competent authority within the legally required timeframe.

08Your rights

Depending on where you live, including under the GDPR and CCPA, you have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Restrict or object to specific processing.
• Receive your data in a portable format.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your supervisory authority.

Exercise any of these by emailing privacy@nodepeak.com from your account email. We respond within 30 days.

09Children

Our services are not directed at children under 16 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

10Changes to this policy

When this policy changes materially we will notify you by email or a panel notice before the change takes effect. The date at the top always reflects the current version.