Legal

Privacy Policy

What data we collect, why we need it and what rights you have.

Last updated: September 26, 2026

1. Overview

This Privacy Policy explains how freeserver.host ("we", "us") processes personal data when you visit our website, use the control panel or run a game server with us (the "Service"). We only collect the data we need to provide and protect the Service, and we do not sell your personal data.

2. Data we collect

Account data

When you create an account: your username, email address, a securely hashed password and, if you use a login provider, the identifier that provider sends us.

Server data

Everything needed to run your server: its settings, chosen location and version, installed mods and plugins, world files, console output and the subusers you invite.

Technical and log data

When you visit the website or control panel, our servers automatically log technical information such as your IP address, date and time of the request, the page requested, browser type and operating system. We use this to deliver pages, fix errors and detect abuse.

Support requests

If you contact us, we process the information you share with us to answer your request.

3. Google Fonts

Our website loads the "Outfit" font from Google Fonts, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To do this, your browser connects to Google's servers and transmits your IP address. Google may process this data outside the European Union. More information is available in Google's Privacy Policy.

4. Cookies

Our public website does not use tracking or advertising cookies. The control panel uses cookies or similar browser storage that are strictly necessary to keep you signed in and to protect your session. These cannot be disabled without breaking the login.

5. Purposes and legal bases

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR:

  • Performance of a contract (Art. 6(1)(b) GDPR): creating your account, running your server and answering support requests.
  • Legitimate interests (Art. 6(1)(f) GDPR): keeping the Service secure, preventing abuse and DDoS attacks, fixing errors and displaying the website correctly.
  • Legal obligations (Art. 6(1)(c) GDPR): for example, retaining invoices for paid upgrades.
  • Consent (Art. 6(1)(a) GDPR): where we ask for it. You can withdraw your consent at any time with effect for the future.

6. Data on your game server

Players who join your server may leave data in your server files and logs, such as usernames, UUIDs, IP addresses and chat messages. As the server owner, you decide what your server collects, which plugins you install and who can access the files. We process this data only to operate your server on your behalf.

7. Sharing and transfers

We only share personal data where this is necessary to provide the Service, for example with the data centres and network providers that host our nodes, or where we are legally required to do so. Depending on the location you choose for your server, your server data may be stored outside the European Union. In that case, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.

8. Retention

  • Account data is kept for as long as your account exists.
  • Server files are deleted within 30 days after you delete the server or your account.
  • Technical logs are kept for up to 30 days, unless we need them longer to investigate a specific security incident or abuse.
  • Billing records for paid upgrades are kept for as long as tax and commercial law requires.

9. Security

We protect your data with technical and organisational measures, including encrypted connections (HTTPS), hashed passwords, restricted access to our systems and network-level DDoS protection. No system is completely secure, so please use a strong, unique password for your account.

10. Your rights

Under the GDPR and similar laws, you have the right to:

  • access the personal data we hold about you;
  • have incorrect data corrected;
  • have your data deleted;
  • restrict how we process your data;
  • receive your data in a portable format;
  • object to processing based on legitimate interests;
  • withdraw any consent you have given;
  • lodge a complaint with a data protection supervisory authority.

To exercise any of these rights, contact us as described below.

11. Children

The Service is intended for people aged 16 and over. Younger users need the permission of a parent or legal guardian. If you believe a child has given us personal data without that permission, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy when the Service or the law changes. The date at the top of this page shows when it was last updated. We will announce material changes on the website or in the control panel.

13. Contact

For privacy questions or requests, reach out to us through our Discord server. See also our Terms of Service.