Privacy Policy
Last Updated: October 26, 2024
TL;DR Quick Summary
- We collect basic info to run your Minecraft server (email, payment details, server settings)
- Your data is secure and encrypted - we use industry-standard security
- We use Stripe for payments - we never see your full card details
- You can download your data or delete your account anytime from account settings
Contents
Welcome to our Privacy Policy. At PixelServers, we believe in being completely transparent about how we handle your data. This policy explains in detail how we collect, use, and protect your personal information while providing you with the best possible Minecraft hosting experience.
We've designed our privacy practices to balance your right to privacy with the technical requirements of running reliable Minecraft servers. Every decision we make regarding your data is guided by our commitment to security, transparency, and trust.
To provide you with our Minecraft hosting services, we need to collect certain types of information. We're careful to collect only what's necessary to give you the best possible service.
2.1 Personal Data
When you create an account and use our services, we collect:
- Account Information: Your email address and display name, which we use to identify you and communicate with you about your service
- Authentication Data: Your password, which is always encrypted using industry-standard algorithms - we never store passwords in plain text
- Payment Information: While we need to process payments, we never store your full card details. This is handled securely by Stripe, our payment processor
- Server Data: Technical information about your Minecraft server, including configuration settings, usage statistics, and performance metrics
2.2 Legal Basis for Processing
Under data protection laws, we need a legal basis to process your personal data. We rely on the following legal grounds:
Contract Performance
Most of our data processing is necessary to fulfill our contract with you - providing and managing your Minecraft server hosting service.
Legal Obligations
Sometimes we need to process your data to comply with legal requirements, such as maintaining proper business records.
Legitimate Interests
We process some data because it helps us improve our services and provide a better experience. We always balance this against your privacy rights.
Consent
For certain types of processing (like marketing communications), we'll ask for your consent before collecting data.
To provide you with a comprehensive and reliable Minecraft hosting service, we work with carefully selected third-party partners. Understanding how we interact with these services is important for your privacy awareness.
4.1 Our Key Partners
Payment Processing
We use Stripe for all payment processing. When you make a payment, your card details are sent directly to Stripe and never touch our servers. Stripe adheres to PCI-DSS Level 1 certification, the highest level of payment processing security.
Infrastructure Providers
Our Minecraft servers are hosted on professional-grade cloud infrastructure providers. These partners maintain strict security protocols and help us ensure high availability and performance for your servers.
Analytics and Monitoring
We use analytics tools to understand how our service is used and to identify areas for improvement. These tools collect anonymized data about site usage and server performance metrics.
4.2 Data Sharing
When we work with third-party services, we:
- Only share what's necessary for the service to function
- Ensure they maintain appropriate security standards
- Have proper data processing agreements in place
- Regularly review their privacy practices
We believe in empowering our users with control over their personal data. Under various data protection laws, you have several important rights that we fully respect and support.
5.1 Your Data Rights
Access and Portability
You can request a copy of all personal data we hold about you. We'll provide this in a structured, commonly used format that you can use with other services.
Correction and Updates
If you believe any information we hold about you is incorrect, you can update it through your account settings or contact us to make corrections.
Deletion
You have the right to request deletion of your personal data. This can be done through your account settings or by contacting our support team. Note that some information may be retained for legal or technical reasons.
Processing Restrictions
You can request that we limit how we use your data, particularly if you're concerned about our processing activities.
5.2 Exercising Your Rights
Most of these rights can be exercised directly through your account dashboard. For more complex requests or assistance:
- Email our privacy team at privacy@mchost.com
- Use the privacy request form in your account settings
- Contact our support team via live chat
We'll respond to all requests within 30 days, though most are handled much sooner.
Protecting your data is one of our highest priorities. We implement comprehensive security measures to ensure your information remains safe and confidential.
6.1 Technical Measures
Encryption
All data transmission is encrypted using TLS 1.3, and sensitive data is encrypted at rest using industry-standard algorithms. Your server data is protected by additional layers of encryption.
Infrastructure Security
Our servers are hosted in secure data centers with 24/7 monitoring, physical security, and environmental controls. We regularly update our systems and conduct security audits.
Access Controls
We implement strict access controls and authentication measures. Our staff only has access to the data they need to perform their jobs, and all access is logged and monitored.
6.2 Security Practices
Our security program includes:
- Regular security assessments and penetration testing
- Employee security training and awareness programs
- Incident response and recovery procedures
- Continuous monitoring and threat detection
We maintain clear policies about how long we keep your data, ensuring we only retain information for as long as necessary for legitimate business purposes.
7.1 Retention Periods
Active Accounts
While your account is active, we retain your data to provide our services, maintain your server, and improve your experience. This includes your account information, server configurations, and usage history.
Inactive Accounts
If your account becomes inactive (no login for 12 months), we'll notify you before taking any action. You can choose to reactivate your account or request data deletion.
After Account Deletion
When you delete your account, most personal data is removed within 30 days. Some information may be retained longer for legal compliance or legitimate business purposes.
7.2 Backups and Archives
We maintain secure backups of our systems for disaster recovery purposes. Your data may remain in these encrypted backups for up to 90 days after deletion. These backups are secured with the same high standards as our active systems.
We regularly review and update our privacy policy to ensure it accurately reflects our practices and complies with current regulations.
9.1 Update Process
When we make changes to this policy, we will:
- Post the updated policy on our website with a new effective date
- Notify you via email for significant changes
- Display a notice in your dashboard about important updates
- Maintain a changelog of significant policy updates
9.2 Your Options
When we make material changes to this policy, you will have the opportunity to review the changes before they take effect. If you disagree with any changes, you can close your account before they become effective.
We're here to help with any questions or concerns about your privacy and data protection rights.
10.1 Ways to Contact Us
Privacy Team
Email: privacy@mchost.com
Response time: Within 24 hours
Data Protection Officer
For formal privacy inquiries or concerns:
Email: dpo@mchost.com
10.2 Additional Resources
You can also:
- Visit our Help Center for privacy-related guides
- Use the Privacy Request form in your account settings
- Chat with our support team through the dashboard
This privacy policy is effective as of October 26, 2024