Legal center

Privacy Policy

How Konnect Hosting collects, uses, protects, retains, and shares information when you visit our website or use our services.

Last updated October 8, 2026 Applies to our website, accounts, support, and services

Your privacy matters

This policy explains our practices in plain language. It should be read together with our Terms of Service and any notices shown when information is collected.

01

Scope and who we are

This policy covers the Konnect Hosting website, customer portal, game panel, hosting services, billing, support and live chat. Konnect Hosting is responsible for the account, billing, support and website information described below.

You control the personal information you put on your hosted server. We process that content to operate, secure and support your service. If you play on a customer's server, contact its owner about that server's player data.

03

Where information comes from

You provide information when you register, update a profile, order, configure a server, upload files, subscribe to status updates or contact us. We also receive information from the website, game panel, servers and security systems as you use them.

Stripe and PayPal return payment and transaction information. Tax services return calculations and VAT validation results. Authorized account owners and subusers can provide information for a service. Information you send through our Discord community or by email is part of that conversation.

Reviews shown on our website can include a public reviewer name, review text, rating and source link, including reviews originally posted on Trustpilot.

04

How we use information

We use information to:

  • create accounts, check sign-ins and protect access;
  • process orders, invoices, taxes, renewals, refunds, disputes and affiliate commissions;
  • set up, run, monitor and troubleshoot hosted services;
  • answer support requests and send billing, maintenance, security and status notices;
  • detect fraud, abuse and attacks, and investigate account or service problems;
  • understand website use and hosting interests through permitted analytics;
  • send promotional emails using your saved marketing preference; and
  • meet legal and accounting requirements and handle complaints or claims.

You can change your marketing preference or use a promotional email's unsubscribe link. Checkout may preselect the optional offers checkbox for a US customer who has not already saved a choice; you can uncheck it. Billing and security notices continue even if you unsubscribe from offers. A message already queued before your choice changes may still arrive.

06

Who receives information

We do not sell personal information. These services receive information for the functions they provide:

  • Stripe and Stripe Tax: account and billing details, applicable tax identifiers, order references and amounts for payments, subscriptions, tax calculations and disputes. A tax calculation can use Stripe Tax even when you later pay through PayPal. Stripe Privacy Policy.
  • PayPal: order descriptions, amounts, billing cycles and references, together with information you provide directly through PayPal checkout. PayPal Privacy Statement.
  • Google services: Google Workspace handles email recipients, message contents and attachments, including invoice PDFs, so we can send and receive business email. Some account pages also request fonts from Google, which receives connection and browser details for those requests. Google Privacy Policy.
  • Cloudflare: connection, request and browser information for website delivery, security and Turnstile human verification. We record verification results to help secure accounts. Cloudflare Privacy Policy.
  • Pwned Passwords: a short prefix of a password hash, sent from our server to check whether a proposed password has appeared in a breach. We do not send your password, email address or complete password hash for this check. Have I Been Pwned Privacy Policy.
  • EU VIES: the country prefix and number of an EU VAT identifier you submit, so we can validate it.
  • Google Analytics: this integration is currently disabled, and we plan to permanently remove it. It is not receiving new website activity from our analytics integration. Information previously sent to Google remains subject to Google's retention settings and Privacy Policy.
  • Hosting, network and backup providers: information needed to deliver and protect hosted services and store recovery copies. Some account pages load interface resources from jsDelivr, which receives connection and browser details for those requests. jsDelivr Privacy Policy.
  • Browser push services: when staff enable push alerts, their browser's push provider receives encrypted alerts and delivery requests. The provider depends on the browser or device and can include Apple, Google, Mozilla or Microsoft. These chat alerts contain a generic notification and conversation link, not the customer's message text.

Our game panel and live chat are operated by Konnect Hosting. Using Pterodactyl or Arix does not itself mean we send your account information to their developers. Providers may process information under their own privacy policies, including for their own payment, security or legal responsibilities.

Authorized staff can access information needed for their work. Full billing addresses, tax identifiers, protected payment details and complete invoice PDFs require a separate billing-details permission. The owner has that permission by default and can grant it to specific staff roles. Other authorized staff may still see basic account details, invoice amounts and payment status.

We may share relevant information with an authorized account or service owner, with parties handling fraud or payment disputes, or when required by law. Information may also be transferred in a sale or reorganization of the business, subject to applicable privacy obligations.

07

Customer servers and hosted data

You control the files, databases, logs and player records on your hosted service. You are responsible for the notices, permissions and secure settings needed for your community's use of that data.

We may access hosted data to provide support, maintain the service, investigate security or abuse, or comply with law. Access is limited to people who need it for that work. We do not use customer server content for advertising.

If your request concerns a customer's game server, contact its owner first. We assist customers with requests about hosted data where required by law and our service obligations.

08

Cookies, analytics and live chat

Account functions and saved choices

We use cookies and browser storage for sign-in, verification, preferences, support and unfinished checkout configurations. The unfinished checkout configuration saved in your browser expires after 48 hours. Some preferences stay in browser storage until you change them or clear that storage.

Optional website analytics

Our own website analytics is enabled. Visitors in the EU, EEA, UK or Switzerland, and visitors whose country cannot be determined, must accept optional cookies and tracking before they start. The banner offers Accept All or Accept Only Essential. In the US and other regions that use opt-out choices, optional cookies and tracking can start by default without a popup. Use Privacy choices at any time to change your choice. Choosing essential only turns off both analytics and affiliate attribution. Sign-in, checkout and requested support functions remain available.

When allowed, analytics records a signed visitor identifier, browser and device information, country, page paths and titles, referring pages, campaign source, medium and name, timestamps, visible engagement time, scroll depth and broad hosting interests. We remove query strings from our first-party analytics page paths and referrers. If you sign in or create an account, that history can be linked to your account.

We use a locally hosted country database from IPLocate.io to help apply regional choices. The local lookup does not send your IP address to IPLocate. Visitor analytics stores a secret-salted network hash rather than the raw IP address. Country and, when supplied by our trusted edge provider, US state may be recorded; we do not collect city-level location in visitor analytics. Separate account, security and web-server records can still contain IP addresses.

The analytics cookie can last up to 400 days. Withdrawing consent stops new optional analytics activity. For visitors in the EU, EEA, UK or Switzerland, and visitors whose country cannot be determined, we also delete our own analytics history that we can verify belongs to that browser or a signed-in account. We apply this deletion rule if that verified history was collected in one of those regions. We do not use a shared IP address to decide whose history to delete.

For US visitors without that regional history, opting out stops tracking and keeps earlier analytics history until a separate deletion request is made. Contact us to request deletion. We retain a minimal consent record to prevent withdrawn identities from being tracked again, and a necessary cookie can remember the opt-out for up to 400 days. If deletion cannot finish immediately, we queue it for automatic retry while tracking stays off.

Google Analytics is currently disabled, and we plan to permanently remove it. Our own website analytics remains separate. A browser's Global Privacy Control signal keeps optional analytics and affiliate attribution off when detected. The website does not override that signal when you select Accept All. We do not interpret Do Not Track as a universal instruction.

Affiliate attribution

Affiliate attribution remembers a partner referral so the partner can receive credit for a purchase. In the EU, EEA, UK, Switzerland and unknown regions, a referral link without saved permission shows who referred you and offers Accept All, Accept Only Referral and Essential, or Accept Only Essential. Referral only keeps analytics off. Essential only prevents the referral cookie and click record from being created.

US visitors do not receive an automatic referral popup. A valid referral can be recorded by default unless you have opted out or your browser sends Global Privacy Control. If a referral is available, opening Privacy choices offers the same three options. Without a referral, it offers Accept All and Accept Only Essential. We do not create a referral record just because you accept optional cookies on an ordinary page.

An essential preference cookie remembers explicit affiliate permission for up to 180 days. It does not record browsing activity. The referral cookie has a separate 30-day attribution window. Choosing essential only withdraws affiliate permission, deletes the referral tracking record we can verify belongs to that browser and removes the referral cookie. If deletion cannot finish, attribution stays off and the website retries the request. The signed ownership proof is kept only while that retry needs it. An essential opt-out cookie can remember refusal for up to 400 days.

We record the affiliate choice, notice version and time with new referral records. New affiliate referral records identify the partner link without storing an external referring page, a network hash or a browser user agent. Withdrawal removes the browsing identifier from an established referral, but does not reverse a partner's existing commission or delete related billing records. We keep those records for accounting, contractual obligations and the legitimate interest of administering the affiliate program. Contact us to exercise rights over those records.

Recorded attribution uses a signed referral cookie for a 30-day window and can link the referring partner to your account or order for commission calculations. Privacy choices controls optional website analytics and browser referral attribution. It does not delete accounting records from completed transactions. Contact us to request deletion of other information, and use browser controls to remove or block cookies.

Live chat

Live chat is provided directly by Konnect Hosting. A necessary chat cookie can last up to 30 days so you can return to a conversation. Staff may offer help to an active visitor using the analytics context already collected with the applicable choice. We store chat messages and the details you provide, and a conversation may continue as a support ticket. Starting or receiving a chat does not enable optional analytics. Ending or hiding a chat does not delete its saved transcript.

You can remove or block cookies through your browser. Blocking essential cookies may prevent sign-in, checkout or chat from working.

09

How long we retain information

Account, service, billing, security, email and support records currently have no single automatic deletion deadline. Retention depends on active services, support needs, security investigations, unpaid balances, tax and accounting duties, disputes and applicable legal requirements. Deactivating an account disables access and can suspend services; it does not erase its records.

Analytics history and affiliate records are currently kept until deleted; an automatic age-based cleanup is not enabled. The analytics withdrawal rule above removes verified analytics history. Choosing essential only also removes the verified browser referral tracking record. These choices do not delete accounts, billing records, chats or tickets. We remove links to deleted analytics from support conversations so their messages remain available.

Live-chat history is deleted automatically after 30 days from its last message or when the chat ended, whichever is later. We check for expired chats every hour. An authorized administrator can mark a chat as important to keep it until it is manually deleted. Removing that mark returns the chat to the normal 30-day rule.

Support tickets and their messages are kept for customers to reference and are not deleted by chat cleanup. Messages copied from a chat into a ticket remain part of that ticket after the original chat is deleted. Administrative action and email delivery records are stored separately.

Unsubscribing from status updates removes the active subscription, but earlier email delivery records can remain. Cookie expiry and the 48-hour checkout draft expiry do not delete server-side invoices, payment records or support messages.

Hosted service data can be removed after cancellation, nonpayment or termination under our Terms of Service. Export anything you need before cancelling. Copies can remain in database or recovery backups after removal from an active system. Backup retention varies by backup type and rotation; we do not promise immediate deletion from every backup.

You can request deletion using the contact methods below. We may need to retain specific records for legal, billing, security or dispute reasons and will explain any applicable limits.

11

Data locations and international transfers

Our hosting infrastructure and the providers listed above may process information in countries other than your own. The location you choose for a game server identifies its primary hosted workload; it does not limit where email, payment, tax, support or account records are processed.

Providers' privacy notices describe their processing locations and transfer arrangements. Contact us if you need details about the providers or transfer arrangements relevant to your service.

12

Your privacy rights and choices

Depending on where you live, you may be able to request access, correction, deletion or a portable copy of your information; restrict or object to processing; withdraw consent; or appeal a decision about a privacy request. You can also complain to the relevant privacy regulator.

Use the customer portal to update your profile or contact support about a request. If you do not have an account or cannot sign in, you can use live chat on this website. Tell us which account, email address or visit the request concerns. We may ask for enough information to verify your identity and authority, without requesting unnecessary sensitive details.

Use Privacy choices to stop optional analytics or affiliate attribution, and your marketing preference or a promotional email's unsubscribe link to stop offers. Turning off tracking, unsubscribing and deactivating an account are different from a request to erase stored information.

For requests covered by the GDPR, we respond without undue delay and normally within one calendar month. If a complex request needs more time, we explain the reason within that first month; the law can allow up to two additional months. Other applicable privacy laws may set different deadlines.

We will not unlawfully discriminate against you for exercising a privacy right. Some records may need to be retained for legal, accounting, security or dispute reasons, or to protect another person's rights. We will explain applicable limits when responding.

13

Children and account eligibility

Our services are not directed to children under 13, and we do not knowingly collect personal information from a child under 13. A person who has not reached the age of legal majority where they live must use the services only with authorization and supervision from a parent or legal guardian who agrees to the applicable terms.

If you believe a child has provided personal information without appropriate authorization, contact us through the customer portal or website live chat. We will investigate and delete the information when required.

14

Policy changes and contact

We may update this policy when our services, providers, data practices or legal obligations change. The Last updated date identifies this version. Material changes will be posted here and, when appropriate, communicated through your account or billing contact.

For privacy questions, complaints or requests, contact support through the customer portal or use website live chat if you do not have an account or cannot sign in. Include enough information to explain your request. Do not send passwords, full card numbers or unnecessary sensitive information.

Our Terms of Service explain the rules for using Konnect Hosting services.