Datenschutzerklärung

We hold the following and nothing else:

• 01Your email address — kept until you close the account.
• 02Invoices, including a company name you chose and we did not verify — kept 10 years, because accounting law requires it.
• 03The configuration of your instances — kept until the instance is destroyed.
• 04NetFlow-level connection metadata (source, destination, port, byte count) — kept 72 hours and used only to investigate abuse reports.
• 05Support tickets and their contents — kept 24 months.
• 06An IP address and timestamp for console logins — kept 30 days.

Identity documents. Selfies or liveness checks. Proof of address. Phone numbers. Card or bank details. Social accounts. A verified legal name.

This is not a policy we could quietly reverse: the collection mechanisms do not exist in our systems, and payment reaches us through a processor that never passes on payer identity.

We do not sell, rent or share personal data with advertisers, brokers or analytics vendors. There is no third-party tracking on this website, no advertising pixel, and no cookie that is not strictly necessary to keep you signed in and remember your language.

Payment is handled by OxaPay, which sees the transaction and not your identity. Transactional email is sent through a provider that receives your address and the message. Our own infrastructure is operated by us, on hardware we own, in facilities we lease.

We respond to legal orders that are valid in the jurisdiction where the relevant server physically sits. We produce only what we hold, which is the list in section 1.

We notify the affected customer unless a court explicitly bars us from doing so. Aggregate figures for every year since 2023 are published in the journal.

You may request a copy of everything we hold, ask for it to be corrected, or ask for the account to be erased. Erasure is completed within 24 hours except for statutory invoice records.

Write to [email protected] from the account address. Because we hold no identity documents, the account email is the only means of authentication available — which is why it matters that you keep control of it.

We do not inspect, index or scan the contents of your disks, and we do not have credentials to your instances. Access is possible only through the hypervisor, is logged, and happens only where you have asked for support that requires it or where a valid legal order compels it.