- Service Delivery: To create your account, run your servers, and process payments
- Customer Support: To respond to tickets, troubleshoot issues, and help you
- Security: To detect fraud, prevent abuse, and protect our infrastructure
- Legal Compliance: To comply with laws and respond to legal requests
- Service Improvement: To understand how our services are used and make them better
- Communications: To send important updates, security alerts, and (with consent) promotional emails
Privacy Policy
Your privacy matters. Here's exactly how we handle your data — no legal jargon, just straight answers.
Effective: January 1, 2025
GDPR Compliant
CCPA Compliant
PIPEDA Compliant
Quick Summary
The key points in plain English
What We Collect
Account info, billing details, and usage data to run your servers
We Never Sell Data
Your information is never sold to third parties. Period.
Security First
Encryption, access controls, and regular security audits
Request Deletion
You can request your data be deleted at any time
US-Based Storage
Data may be stored on servers in the United States
Minimal Cookies
Essential cookies only. No advertising trackers.
Key Definitions
Personal Information
Any information that can identify you — like your name, email address, IP address, or billing details.
Processing
Anything we do with your data — collecting, storing, using, or deleting it.
Services
Our website, control panel, Minecraft server hosting, and any related features.
Data Controller
MineXHost — we decide how and why your data is processed.
1
Information We Collect
Account Information
- Name and email address
- Username and password
- Billing address
- Support ticket history
Billing Information
- Payment method (handled by processors)
- Transaction history
- Invoice records
Automatic Data
- IP address and browser type
- Device information
- Pages visited and features used
- General location (country level)
Server Data
- Configuration files
- World saves and backups
- Plugins and mods you upload
- Server logs
Payment Security
We do not store full payment card numbers. All payment information is processed securely by our payment partners (Stripe, PayPal). We only receive confirmation of successful transactions.
2
How We Use Your Information
3
Legal Basis for Processing (GDPR)
For users in the EU, UK, and Switzerland, we process your data based on these legal grounds:
Contract
To provide the hosting services you signed up for
Legitimate Interest
For security, fraud prevention, and service improvement
Legal Obligation
To comply with tax laws and legal requirements
Consent
For marketing emails (you can withdraw anytime)
4
Information Sharing
We Do Not Sell Your Data
We never sell your personal information to third parties. We only share data when necessary to provide our services or when legally required.
We may share information with:
Payment Processors
- Stripe for credit card payments
- PayPal for PayPal payments
- Crypto processors for cryptocurrency
Security Services
- DDoS protection providers
- Fraud prevention services
- Infrastructure security partners
5
Cookies & Tracking
No Advertising Cookies
We do not use advertising cookies or track you across other websites. We use Cloudflare Web Analytics, which is privacy-focused and does not use cookies or track individuals.
6
Data Retention
- Active Accounts: Data retained while your account is active
- Cancelled Accounts: Account info retained for 30 days; server data deleted after 7 days
- Financial Records: Transaction records kept for 7 years (tax compliance)
- Support Communications: Retained for 2 years after resolution
7
Your Privacy Rights
Regardless of where you live, you have the right to:
Everyone
- Access your personal data
- Correct inaccurate information
- Delete your account and data
- Opt out of marketing emails
EU/UK (GDPR)
- Data portability (export your data)
- Restrict processing
- Object to processing
- Lodge complaint with authorities
Exercise Your Rights
Contact us at [email protected] or through our support portal. We'll respond within 30 days (or sooner as required by law).
8
Data Security
- Encryption: TLS/SSL for data in transit, encryption at rest
- Access Controls: Role-based access with multi-factor authentication
- Security Audits: Regular assessments and vulnerability testing
- Employee Training: Staff trained on data protection practices
- Incident Response: Documented procedures for security events
Breach Notification
If a data breach occurs that affects your personal information, we will notify you and relevant authorities as required by law, typically within 72 hours of discovery.
9
International Data Transfers
Our servers are located in the United States. If you access our services from outside the US, your information may be transferred to and processed in the US.
For transfers from the EEA/UK, we rely on Standard Contractual Clauses approved by the European Commission.
10
Children's Privacy
Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. Users aged 13-17 must have parental consent.
If you believe a child under 13 has provided us with personal information, please contact us immediately and we will delete it.
11
Policy Changes
We may update this policy from time to time. For significant changes, we'll notify you by email and post a notice on our website. Your continued use of our services after changes constitutes acceptance.
12
Contact Us
Questions about this policy or your data? Reach out:
Email
Support Portal
For EEA/UK residents: You may also contact your local data protection authority if you have concerns about our data practices.