Privacy policy
Draft privacy notice. Operator contact and the applicable retention schedule must be finalized before launch.
Data we collect
We store your email address, configuration, optional SSH public key and comment, invoice details, transaction hash, order status and provisioning IP and username. Administrator actions and email delivery records are also stored. Do not submit secrets.
Why we process it
We use order information to fulfil orders, review payments, provide access and communicate about service. Security rate limits store a hash of the request source; cookies keep administrator sessions and private order access. No advertising trackers are included.
Recipients and processing
Your chosen infrastructure provider may receive the public key and configuration needed to provision your VPS. The configured SMTP provider processes notifications. Blockchain transactions and addresses are public. Hosting and email providers must be disclosed before launch.
Retention and rights
Order, invoice and audit retention must be set to the operator’s legal requirements before live sales. Contact support to request access, correction or deletion where permitted; some records may need to be retained for legal obligations. Rate-limit rows do not contain raw IP addresses.
Security
Database and backup access must be restricted and encrypted in transit. We do not collect private keys or wallet passwords. Private order links grant access to an order; keep them confidential.