Privacy Policy

1. Data controller

Marco Napierski (NapNodes), tax ID (NIF) X9497973P, with its address at Calle Buganvillas 1, 38300 La Orotava, Santa Cruz de Tenerife. Contact for any data protection matter: rafi007napi@hotmail.com.

2. What data we process

Account data: first name, surname, email address and password, which we store encrypted.

Billing data, when you provide it: address, tax details and country, needed to issue valid invoices and apply the corresponding tax.

Technical data: access IP addresses, panel connection logs and service logs, needed for security and to diagnose problems.

Payment data: we do not store card numbers. Payments are processed by Stripe, which handles that data as an independent controller.

Waiting list: if you sign up because there are no places, we store your email and the plan you are interested in, only to let you know when there is room.

Website statistics: page visited, referrer, device type and country. We collect them with a tool hosted on our own servers, without cookies, without persistent identifiers and without storing full IP addresses. We do not share them with anyone or combine them with your account. That is why this website does not show you a cookie notice: it uses none.

The content of your server (worlds, files, databases) is yours and we only process it to host it. If you store your players' personal data in it, you are the controller of that data and we act as processor.

3. Purposes and legal basis

Providing the service you have bought and invoicing it: performance of the contract.

Meeting our tax and accounting obligations: legal obligation.

Protecting our network and other customers from fraud and abuse: legitimate interest.

Letting you know when there are places, if you join the waiting list: consent, which you can withdraw whenever you like.

Sending you marketing communications: only if you give us your consent, which you can revoke at any time.

4. How long we keep it

If you request the free server, we keep your email and the IP addresses you have connected from for 2 years, only to stop another one being requested with another account (legitimate interest in preventing fraud). After that period they are deleted automatically.

Account data: while you are a customer and, afterwards, for the time needed to deal with possible claims.

Invoices and tax data: the periods required by tax and commercial law, generally between four and six years.

Technical logs: a maximum of twelve (12) months. Log of emails sent: ninety (90) days.

Your server's content and backups: deleted the moment the service is terminated.

Waiting list: until we let you know or you ask us to remove you.

5. Who else has access to your data

Only the providers we need to provide the service, each limited to its own function and under a data processing agreement:

OVHcloud (France): the servers and data centres, in the European Union.

Stripe: collecting payments.

Resend: sending the service's emails, such as invoices and notices.

Cloudflare: managing domain names (DNS).

Anthropic: the automated assistant that answers support tickets. It receives the text of the ticket and the technical status of your servers, only to draft the reply, and does not use it to train its models. Its replies are signed as automated and you can always ask to be helped by a person.

Resend, Cloudflare and Anthropic are United States companies. Data transfers to that country rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

We do not sell your data or pass it to anyone for advertising. We will only hand it over to an authority when a law requires us to.

6. Minors

Our services are bought by people of legal age. We do not knowingly process data of children under 14 without the consent of their parents or guardians. If you believe we have done so, write to us and we will delete it.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to rafi007napi@hotmail.com. We will reply within one month at most.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).