Privacy
Policy.

Sentinel Hosting ("we", "us", "our") operates the game server hosting platform at this website. This policy describes what personal data we collect when you use our services, how we use it, who we share it with, and what rights you have over it.

We collect only what we need to run your servers and process payments. We do not sell your data, serve you ads, or share your information with parties who have no legitimate role in delivering our service.

We collect only what you provide directly and what is necessary to operate your servers. We do not track browsing behaviour, collect usage analytics, or record device/technical metadata.

We do not collect the contents of your game server (player chat, world data, uploaded files) unless you explicitly share them with us during a support request.

We use your data exclusively to operate and improve the platform. Specifically:

Service delivery — Provisioning game servers, processing payments, sending billing receipts, and delivering email notifications about your subscription (renewals, payment failures, upgrades).

Account management — Authenticating you, linking OAuth providers, managing your profile, and enforcing security policies.

Communications — Sending transactional emails you directly trigger (order confirmation, payment receipts, cancellation confirmation). We do not send marketing email unless you opt in separately.

Security & fraud prevention — Detecting abuse, enforcing rate limits, and protecting the integrity of the platform.

Product improvement — Analysing aggregated, anonymised usage patterns to improve the dashboard, pricing, and server deployment speed. This analysis is never tied to an identifiable individual.

We do not sell, rent, or trade personal data. We share information only with sub-processors who are contractually bound to handle it in accordance with applicable law.

We may disclose personal data if required by law, court order, or government authority, or to protect the safety of users or the public. We will notify you of such disclosures where legally permitted.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy.

Active accounts — Data is retained for the lifetime of your account. When you delete your account, your personal data is deleted immediately. No recovery period applies.

Billing records — Invoices and payment records are retained for 7 years to comply with financial regulations.

Server data — Deleted immediately when you cancel a server, except where a backup snapshot was created (these are purged within 14 days of cancellation).

Support tickets — Retained for 2 years from the date of last activity.

Technical logs — IP logs and access logs are retained for 90 days, then automatically purged.

We use a minimal set of cookies strictly necessary to operate the platform. We do not use advertising cookies or third-party tracking cookies.

We do not use analytics cookies (no Google Analytics, Hotjar, or similar tracking scripts). Usage analytics, where collected, are derived server-side from anonymised log data.

Depending on your location, you may have the following rights regarding your personal data. Access and erasure can be exercised directly from your profile page. For all other requests, email [email protected] — we respond within 30 days.

We implement technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction:

Encryption in transit — All traffic between your browser and our servers is encrypted. API communications with Stripe, Clerk, and Pterodactyl use HTTPS exclusively.

Encryption at rest — Database volumes are encrypted. Payment card data is never stored on our systems — Stripe handles all card data under PCI DSS Level 1 compliance.

Access controls — Internal access to production data is restricted to authorised personnel, logged, and audited. Staff access personal data only when necessary to resolve a support request.

Authentication — Account authentication is delegated to Clerk, which supports multi-factor authentication, brute-force protection, and anomaly detection.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at [email protected].

If you have any questions about this policy or want to exercise your rights, reach out to us. We aim to respond to all privacy requests within 5 business days.

This policy may be updated from time to time. We will notify active subscribers by email of any material changes at least 14 days before they take effect. Continued use of the service after that date constitutes acceptance of the updated policy.