Legal

Privacy Policy

Last updated: placeholder — set this date when you publish

Template notice: this page is a general starting point, not legal advice. Fill in the specific tools you actually use (payment processor, analytics, email provider) and have a lawyer review it before publishing — particularly if you serve users in the EU/UK (GDPR) or California (CCPA), which have specific disclosure requirements.

1. What this covers

This policy explains what information Draxen Nodes collects when you visit our site or use our hosting services, and how we use it.

2. Information we collect

Type	Examples
Account info	Email address, username, password (stored hashed)
Billing info	Handled by our payment processor — [name it here, e.g. Stripe/PayPal]. We don't store full card numbers ourselves.
Service data	Server configuration, uploaded files/plugins, console logs needed to operate your server
Usage data	IP address, login timestamps, panel activity, support messages
Cookies	Used to keep you signed in to the panel and, if enabled, for basic analytics

3. How we use it

To provision, run, and troubleshoot your server
To process payments and manage your subscription
To respond to support requests
To detect abuse, fraud, or violations of our Terms of Service
To send service-related notices (billing, outages, security). We won't send marketing email without your consent.

4. Who we share it with

We share data only with the third parties needed to run the service — for example, our payment processor for billing, and our infrastructure/datacenter providers to host your server. We don't sell your personal information.

5. Data retention

We keep account and billing records for as long as your account is active, plus a reasonable period after closure for legal and accounting purposes. Server data (files, backups) is deleted after [insert your actual grace period, e.g. "30 days"] following cancellation, unless you delete it sooner.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data. To make a request, contact us using the details below.

7. Security

We use industry-standard measures to protect your data, including encrypted connections and access controls. No system is 100% secure, and we can't guarantee absolute security.

8. Children's privacy

Our services aren't directed at children under 13 (or the relevant minimum age in your region), and we don't knowingly collect personal information from them.

9. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with an updated date.

10. Contact

Questions about this policy or a data request? Reach us on Discord [or insert a support/privacy email here].