Privacy Policy

This Privacy Policy explains what personal information EnderGrid Hosting ("EnderGrid", "we", "us") collects, how we use it, who we share it with, and the choices you have. It applies to our websites, control panel, and hosting services (the "Service").

1. Information we collect

• Account information: your username, email address, and a securely hashed password (we never store passwords in plain text; we use scrypt).
• Billing information: your plan, invoices, and payment records. Card details are collected and processed directly by Stripe — we never see or store full card numbers.
• Service data: the servers you create, configuration you set, support tickets you open, and content you upload to run your server.
• Technical data: IP address, browser type, device information, and log data generated when you use the Service.
• Cookies and similar technologies: a session cookie to keep you logged in, and — only with your consent — analytics/advertising cookies (see Section 6).

2. How we use your information

• To create and manage your account and provision your servers.
• To process payments, prevent fraud, and send billing notices and invoices.
• To provide support and respond to your tickets and emails.
• To operate, maintain, secure, and improve the Service.
• To send important service and transactional messages (for example, password resets or maintenance notices).
• To comply with legal obligations and enforce our Terms and Acceptable Use Policy.

3. Legal bases for processing

Where the GDPR or similar laws apply, we process personal data on the basis of: performance of our contract with you (providing the Service), our legitimate interests (securing and improving the Service, preventing abuse), your consent (optional cookies and marketing), and compliance with legal obligations.

4. How we share information

We do not sell your personal information. We share it only with:

• Payment processing: Stripe, to charge your payment method and manage subscriptions.
• Infrastructure and network: Cloudflare, for DNS and network/DDoS protection.
• Email delivery: our transactional email provider, to send account and support messages.
• Legal and safety: authorities or third parties when required by law or to protect our rights, users, or the public.

5. Data retention

We keep account and billing records for as long as your account is active and for as long afterward as needed to comply with legal, tax, and accounting obligations. Server content is retained while your server exists and for a short grace period after deletion or termination, after which it is removed from active systems.

6. Cookies and analytics

We use a strictly necessary session cookie so you can stay logged in — this cannot be turned off without breaking the Service. With your consent, we may load analytics and advertising tools (such as the Meta Pixel) to understand traffic and measure marketing. You can accept or decline optional cookies using the banner shown on your first visit, and you can change your choice at any time by clearing cookies. Declining optional cookies does not affect your ability to use the Service.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

8. Security

We use industry-standard measures to protect your data, including password hashing (scrypt), encrypted payment handling through Stripe, TLS in transit, and access controls. No system is perfectly secure, but we work continuously to protect your information and will notify you and the relevant authorities of a breach where required by law.

9. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact [email protected] and we will delete it.

10. International transfers

Your information may be processed in countries other than your own, including where our service providers operate. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced through the Service or by email, and the "Last updated" date will reflect the latest version.

12. Contact

For privacy questions or requests, email [email protected].