Privacy Policy

1. Information We Collect

We collect only the information necessary to provide our services. This includes:

1.1 Information You Provide

• Account Information: Name, email address, password (hashed), and optional phone number
• Billing Information: Cryptocurrency wallet addresses or payment transaction IDs
• Support Communications: Emails, chat logs, and support ticket content
• Application Data: Code, WAR/JAR files, and configurations you upload

1.2 Information Automatically Collected

• Technical Data: IP address, browser type, operating system, device type
• Usage Data: Pages visited, time spent, features used
• Log Data: Access logs, error logs, and performance metrics

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our hosting services
• Process payments and manage your account
• Respond to support requests and inquiries
• Send transactional emails (invoices, service alerts)
• Monitor service health and prevent abuse
• Comply with legal obligations

We never:

• Sell your personal information to third parties
• Share your data with advertisers
• Use your application code for any purpose other than hosting it

3. Data Storage & Security

Your data is stored on encrypted NVMe SSDs in our German data centers (Hetzner Falkenstein & Nuremberg). We implement industry-standard security measures:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest
• Regular security audits and penetration testing
• Strict access controls and least-privilege principles
• Automatic encrypted off-site backups
• 24/7 infrastructure monitoring

4. Cookies

We use a minimal set of cookies necessary for the operation of our services:

4.1 Essential Cookies

• session_id: Maintains your login session
• csrf_token: Protects against cross-site request forgery
• lang_pref: Remembers your language preference

4.2 Analytics Cookies (Optional)

We use privacy-respecting, self-hosted analytics (no Google Analytics, no third-party tracking). You can opt out via your dashboard settings.

4.3 Managing Cookies

You can control cookies through your browser settings. Disabling essential cookies may break functionality.

5. Third-Party Services

We use a limited number of trusted third-party services to operate JavaHost:

Service	Purpose	Data Shared
Hetzner	Infrastructure hosting	Server data (encrypted)
Let's Encrypt	SSL certificates	Domain names only
Cloudflare	DDoS protection	IP addresses (anonymized)
Cryptocurrency networks	Payment processing	Transaction data

All third-party providers are GDPR-compliant and bound by data processing agreements.

6. Your Rights (GDPR)

As an EU-based service, you have the following rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request a copy of all data we hold about you
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Export your data in machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, email privacy@javahost.org. We respond within 30 days.

7. Data Retention

We retain your data only as long as necessary:

• Account data: Kept while your account is active, plus 30 days after termination
• Application data: Deleted within 30 days of account termination
• Billing records: Kept for 7 years (legal requirement)
• Support tickets: Kept for 2 years after resolution
• Logs: Kept for 90 days

8. Children's Privacy

JavaHost services are not intended for children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced via email at least 30 days before they take effect. The "Last updated" date at the top of this page indicates when the policy was last revised.

10. Contact

If you have questions about this Privacy Policy or our data practices, contact us:

• 📧 General: hello@javahost.org
• 🔒 Privacy: privacy@javahost.org
• 📮 Data Protection Officer: dpo@javahost.org
• 📍 Location: Falkenstein, Germany