1. TL;DR
We collect the absolute minimum to run a Minecraft host: your email, the bare technical stuff your server needs, and payment info (handled by Stripe — we never see your card). We don't sell anything to anyone, we don't run ad trackers, and you can ask us to wipe your data at any time. Hosted entirely in EU data centers.
- Email + password (hashed, never readable)
- Server names, IPs, billing history
- Login timestamps for security
- No analytics trackers, no ad pixels, no Facebook SDK
2. What we collect
Account info: the display name, email, and password hash you submit at signup. Optionally your Twitch handle (so we can verify partner perks).
Payment info: Stripe handles cards directly — we get back a token and the last 4 digits, never the full number. PayPal is similar. We store invoice history (dates, amounts, plan names) because EU tax law requires it.
Server data: what plan you're on, server names, allocated RAM, IPs assigned to you, plugin lists, and your actual world/config files on disk. Backups stored encrypted at rest.
Logs: login timestamps, panel actions (you clicked "restart"), and basic web access logs (URL, status code, timestamp, IP). Kept for 30 days for security and debugging.
Optional integrations: if you link Discord or Twitch via OAuth, we store your user ID and a refresh token. Nothing else.
3. Why we collect it
Every bit of data here exists for a specific reason:
- Email: log in, recover password, send invoices, warn about outages
- Payment info: charge you for the service you're using
- Server files: obviously — that is the product
- Login + access logs: spot break-in attempts and debug crashes
- Twitch handle: verify streamer perk eligibility (and only that)
We don't profile you. We don't try to predict what other services you might want. We don't have a marketing automation funnel.
6. Where data lives
All Minecraft servers, backups, and user data are physically hosted in the Netherlands (Hetzner Nuremberg edge spillover for EU-wide players, all within EEA). Email is sent through Postmark (US-based) — only your email address and the message content cross the Atlantic, never your worlds or login credentials. Stripe and PayPal handle payment data per their own regional rules.
7. How long we keep it
| Data type | Kept for |
|---|---|
| Account & profile info | While your account exists, deleted within 30 days of account closure |
| Server worlds & configs | While your subscription is active, then 14 days after cancellation |
| Backups | 7 days rolling for daily backups, 30 days for monthly archives |
| Invoices & tax records | 7 years (Dutch tax law requirement) |
| Access & security logs | 30 days |
| Support tickets & emails | 2 years |
8. Your rights under GDPR
Because we host in the EU, you get the full set of rights under the GDPR — no matter where you live:
- Access: ask for a copy of everything we have on you. We'll send it within 30 days.
- Correction: change anything that's wrong (most things are editable from the dashboard directly).
- Deletion: ask us to delete your account. We will, except for invoices we're legally required to keep.
- Portability: download your world files, configs, and account data as a ZIP at any time.
- Object to processing: you can opt out of optional things (like product update emails) without losing service.
To exercise any of these, email info@kurohosting.com. We don't charge for any of it.
9. Minors
You need to be at least 16 to make an account on your own. If you're younger, a parent or guardian needs to set the account up and supervise it. We don't knowingly collect data from anyone under 13 — if we find out we have, we delete it immediately.
10. Contact & complaints
For privacy questions, data requests, or anything else: info@kurohosting.com. Mark the subject line "Privacy" if it's urgent.
If you're not happy with how we handled a privacy concern, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). Their contact info is at autoriteitpersoonsgegevens.nl. But honestly — email me first, we can almost always sort it out.