Short version: an email address, your order record, and the operational logs any host has to keep. No identity documents, no card, no analytics on you, and nothing about what runs on your server.
What we collect
An email address. Given at checkout so we have somewhere to send credentials and renewal reminders. It is the only personal detail an order requires.
Your order record. What you bought, which coin you paid in, the deposit and settlement transaction identifiers, and the term dates. This is the accounting record of the sale.
A coarse country code. Supplied by our CDN with the request. Used to understand where demand comes from. It is not an IP address and cannot identify you.
Account details, if you create one. An account is optional and nothing requires it. If you make one we store the email and a bcrypt hash of the password — never the password itself.
What we do not collect
No identity documents, and no process capable of accepting one. No card or bank details, since we take no card payments. No advertising trackers, no third-party analytics, no cross-site pixels. No inspection of your server's traffic, filesystem or processes.
What we can see about your server
The hypervisor knows how much CPU, memory, disk and bandwidth your instance is using, because that is how capacity is managed and how abuse is detected. It does not know what any of it is doing. Where we receive an abuse report naming one of our IPs we keep that report and our response, which is a legal requirement rather than a choice.
How long we keep it
Order records are kept for as long as accounting requires. Credentials emails are transactional and not retained by us after sending. A deleted account removes the login and the saved addresses; the order records behind it remain, because they are the record of a sale that happened.
Who else sees it
Our payment processor sees the swap — the amounts, the coins and the addresses — because it performs it. Our email provider sees the address a message goes to. The datacentres hosting the hardware see nothing but encrypted traffic. We do not sell or share anything with anyone else, and we have never received a request we were legally obliged to act on.
Asking us about your data
{{supportLine}} With an order code we can tell you exactly what is on file against it, and remove anything we are not required to keep.