Last updated: September 2026
This policy explains what personal data UntitledHost collects when you use untitledhost.net, why, and what rights you have. We are the data controller for this data.
What we collect
- Account data — name, email address, and a hashed password.
- Billing data — billing name/address and the last four digits and card type of your payment method. Full card numbers are handled only by our payment processor (Stripe) and never touch our servers.
- Service data — the servers you order, their configuration, resource usage, and the files you upload to them.
- Support data — the contents of tickets and Discord messages you send us.
- Technical data — IP address, browser type, and basic request logs, kept for security and abuse prevention.
Why we use it
- to create and run your services and take payment;
- to provide support and send service notices (renewals, downtime, security);
- to detect and stop fraud, abuse, and attacks;
- to meet legal and accounting obligations.
We do not sell your personal data or use it for third-party advertising.
Who we share it with
Only processors that help us run the service: our payment processor (Stripe), our transactional email provider (Mailjet), our server infrastructure provider, and our game panel software (Pterodactyl) which runs on our own machines. Each only receives what it needs. We may also disclose data where the law requires it.
Where it is stored
Our servers are located in Belgium (EU). Processors may transfer data outside the EU under appropriate safeguards (such as Standard Contractual Clauses).
How long we keep it
- Account and billing records: for the life of the account plus up to 7 years for tax and accounting law.
- Server files and backups: until the service is terminated, then deleted within 14 days.
- Support tickets: up to 2 years.
- Security logs: up to 12 months.
Your rights
If you are in the EU/UK you can ask us to access, correct, export, or delete your personal data, and to restrict or object to certain processing. Contact us and we will respond within one month. You may also complain to your local data protection authority.
Security
Passwords are hashed, traffic is encrypted with TLS, panel and infrastructure access is restricted and logged, and uploaded files are scanned for malware. No system is perfectly secure, but we take reasonable measures to protect your data.
Contact
Open a ticket in the billing panel or email the address shown there.