Privacy Policy

The controller for your personal data is Joel Frank (VMSky), Annastraße 48, 48529 Nordhorn, Germany. You can reach us at [email protected].

• Account data: your email address, a hashed version of your password and, if enabled, your two-factor secret.
• Account security data: the IP address you signed up from and the IP address and time of your last sign-in.
• Discord verification: if you verify on our Discord server or sign in with Discord, your Discord ID, username, avatar, email address and IP address, plus an access token that lets us add you to our Discord servers (for example if we move to a new one).
• Billing data: your balance, transactions and invoices.
• Service data: IP addresses, configuration and usage metrics of your servers.
• Technical data: IP address, browser and time of requests, kept in server logs.
• Emails: messages you send to us and the emails we send you (for example about payments, your servers or new sign-ins), including their addresses and time.

We process your data to provide the services you ordered (Art. 6(1)(b) GDPR), to meet legal obligations such as tax retention (Art. 6(1)(c) GDPR) and, based on our legitimate interest, to keep our platform secure and prevent abuse (Art. 6(1)(f) GDPR). IP addresses and Discord verification data are kept for this purpose, so we can trace abuse of our servers and answer lawful requests from authorities.

We use carefully selected partners to operate our infrastructure and process payments. They only process data on our behalf and under a data processing agreement.

Cloudflare (Cloudflare, Inc., USA) delivers this website, protects it against attacks and caches public pages. For this, every request passes through Cloudflare, including your IP address and browser details. On the sign-in and sign-up pages, Cloudflare Turnstile checks that you are a human and not a bot. Data transferred to the USA is covered by the EU-U.S. Data Privacy Framework.

Payments by card, Klarna, PayPal and bank transfer are handled by our payment service provider Polaris (polaris-services.xyz), which receives the amount and a payment reference. The PINs of a paysafecard payment do not go to Polaris: our Discord bot forwards them as a direct message on Discord (Discord Inc., USA, under its own privacy policy) to the team member who checks and redeems them, and we keep only the last four digits and the card values. Card and Klarna payments are processed by Stripe on its own checkout page (Klarna payments together with Klarna Bank AB, Sweden), PayPal payments by PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg, and bank transfers are received on a bank account of Polaris, each under the provider's own privacy policy. Crypto payments are handled by us directly on the respective blockchain.

If you verify on our Discord server or sign in or sign up with Discord, the sign-in happens at Discord (Discord Inc., USA), under its own privacy policy.

If you sign in or sign up with Google, the sign-in happens at Google (Google Ireland Ltd., Ireland), under its own privacy policy. We receive your Google account ID, name and email address and store the account ID and email address.

To invite you to review us, we send a copy of some of our emails (the notice that your server is ready and the thank-you email after a closed support ticket) to Trustpilot (Trustpilot A/S, Denmark), which then emails you an invitation to write a review on Trustpilot. For this, Trustpilot receives your email address and the content of these emails, which contain no passwords. Writing a review is voluntary. If you don't want these invitations, write to us and we will exclude your address.

Our servers run on our own hardware in Germany. The data stays within the European Union.

Emails are sent and received by our own mail server in Germany.

• Account data, including sign-up and sign-in IP addresses: as long as your account exists.
• Discord verification data: until you ask us to delete it. You can revoke our access at any time in Discord under Settings → Authorized Apps.
• Invoices and transactions: as long as required by German tax and commercial law (up to 10 years).
• Emails: as long as needed to handle your request, and up to 10 years where tax law requires it (for example for billing matters).
• Server logs: up to 5 weeks.

We only use cookies that are strictly necessary: a session cookie to keep you signed in, a short-lived cookie during two-factor login and a short-lived cookie to show notifications. We do not use tracking or advertising cookies.

You have the right to access, rectify and erase your data, to restrict or object to processing and to data portability. You can also lodge a complaint with a data protection supervisory authority. To exercise your rights, contact [email protected].