Privacy Policy

Bifrost Hosting Ltd is the data controller for the information described here. This policy explains what we collect, why, and what you can do about it. We keep the list short deliberately: we collect what running the service requires and nothing more.

What we collect

• Account details — your email address and, if you sign in with Discord, your Discord user ID and username.
• Billing records — what you bought and when. We never see or store your card details. Payments are handled by our payment provider as merchant of record; card data goes to them, not to us.
• Server configuration — your world name, server settings, chosen mods, and the platform IDs (for example Steam IDs) you add as admins or to allow or ban lists.
• Discord linkage — if you connect a Discord server, the guild and channel IDs needed to route commands and notifications.
• Operational logs — server logs including connection events and player IDs, and web access logs including IP address. These exist so we can diagnose faults and detect abuse.
• Your world files — stored so the service works, and backed up so you do not lose them.

Why we are allowed to hold it

• To perform our contract with you — account, billing, configuration and world data. Without these we cannot provide a server.
• Legitimate interests — operational logs, for keeping the service secure, working, and free from abuse.
• Legal obligation — retaining billing records for tax and accounting purposes.

Who we share it with

We do not sell your data or use it for advertising. We share it only with:

• Our payment provider, to take payment and handle VAT.
• Our hosting and infrastructure suppliers, who store the data on our behalf.
• Discord, where you have chosen to link a Discord server, and only to the extent required to deliver commands and notifications.
• Authorities, where we are legally required to.

Where it is held

Servers and backups are located in Germany. Some suppliers may process limited data outside the UK or EEA; where that happens we rely on the appropriate safeguards required by UK and EU data protection law.

How long we keep it

• World files and backups — while your server is active, and 30 days after cancellation. Then permanently deleted.
• Server and access logs — up to 30 days.
• Account records — while your account exists, then deleted on request.
• Billing records — 7 years, as tax law requires. This period cannot be shortened on request.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Your world file is downloadable yourself at any time from your dashboard, without asking us.

Email support@bifrosthosting.com and we will respond within one month. If you are unhappy with our response you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority if you are in the EU.

Cookies

We use only the cookies needed to keep you signed in and to protect forms against cross-site request forgery. We do not use advertising or third-party tracking cookies, so there is no consent banner to click through.

Children

This service is not directed at children under 16, and we do not knowingly create accounts for them. If you believe a child has given us personal data, contact us and we will delete it.