Privacy Policy

Bifrost Hosting Ltd is the data controller for the information described here. This policy explains what we collect, why, and what you can do about it. We keep the list short deliberately: we collect what running the service requires and nothing more.

What we collect

• Account details — your email address and, if you sign in with Discord, your Discord user ID and username.
• Billing records — what you bought and when. We never see or store your card details. Payments are handled by our payment provider as merchant of record; card data goes to them, not to us.
• Server configuration — your world name, server settings, chosen mods, and the platform IDs (for example Steam IDs) you add as admins or to allow or ban lists.
• Discord linkage — if you connect a Discord server, the guild and channel IDs needed to route commands and notifications.
• Operational logs — server logs including connection events and player IDs, and web access logs including IP address. These exist so we can diagnose faults and detect abuse.
• Your world files — stored so the service works, and backed up so you do not lose them.

Why we are allowed to hold it

• To perform our contract with you — account, billing, configuration and world data. Without these we cannot provide a server.
• Legitimate interests — operational logs, for keeping the service secure, working, and free from abuse.
• Legal obligation — retaining billing records for tax and accounting purposes.
• Consent — advertising measurement cookies, and nothing else. You are asked before any are set, and you can decline with one click. See Cookies below.

Who we share it with

We do not sell your data. We share it only with:

• Our payment provider, to take payment and handle VAT.
• Google, and only if you agree to advertising cookies, so we can tell which of our adverts brought someone to the site. This is measurement of our own advertising — we do not give Google your account details, your world, or anything you do once signed in.
• Our hosting and infrastructure suppliers, who store the data on our behalf.
• Discord, where you have chosen to link a Discord server, and only to the extent required to deliver commands and notifications.
• Authorities, where we are legally required to.

Where it is held

Servers and backups are located in Germany. Some suppliers may process limited data outside the UK or EEA; where that happens we rely on the appropriate safeguards required by UK and EU data protection law.

How long we keep it

• World files and backups — while your server is active, and 30 days after cancellation. Then permanently deleted.
• Server and access logs — up to 30 days.
• Account records — while your account exists, then deleted on request.
• Billing records — 7 years, as tax law requires. This period cannot be shortened on request.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Your world file is downloadable yourself at any time from your dashboard, without asking us.

Email support@bifrosthosting.com and we will respond within one month. If you are unhappy with our response you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority if you are in the EU.

Cookies

Essential cookies. We use the cookies needed to keep you signed in and to protect forms against cross-site request forgery. These cannot be turned off without breaking the site, and we do not ask for consent to them because the law does not require it for cookies that are strictly necessary to provide a service you asked for.

Advertising cookies. We advertise on Google, and we would like to know which adverts actually bring people here. To measure that, Google's advertising tag can set cookies in your browser. It does not do so unless you agree. When you first arrive, we ask, and until you say yes nothing advertising-related is stored on your device. Saying no is a one-click answer that we remember, and it changes nothing about the service, the price, or your server.

If you change your mind in either direction, clearing this site's data in your browser makes us ask again, or you can email us and we will explain how for your browser.

We use no other analytics and no other tracking. Google is the only advertising service on this site, it runs only with your agreement, and what it measures is our own adverts — not you across other websites.

Children

This service is not directed at children under 16, and we do not knowingly create accounts for them. If you believe a child has given us personal data, contact us and we will delete it.