Privacy Policy

KingsNode provides game-server hosting. For the purposes of the UK/EU General Data Protection Regulation (“GDPR”), KingsNode is the data controller for the personal data described in this policy.

[Placeholder: insert the full registered legal name, company/registration number and registered address of the controller.]

• Account data: name, email address, password (stored hashed), and account preferences.
• Billing data: billing name and address, and payment information processed by Stripe. We do not store full card numbers; Stripe handles card data as a PCI-DSS compliant processor.
• Technical data: IP addresses, device and browser information, and server and access logs used for security, abuse prevention, and operating the service.
• Service data: server configuration and metadata needed to provision and manage your game servers.
• Support data: the content of messages you send us.

• To provide the service — performance of our contract with you (creating your account, provisioning servers, support).
• Billing and fraud prevention — performance of a contract and our legitimate interests in getting paid and preventing abuse.
• Security and abuse detection — our legitimate interests in keeping the platform safe and stable.
• Legal compliance — where we must retain or disclose data to meet legal obligations.
• Service and (where applicable) marketing emails — performance of a contract for transactional messages; consent where consent is required for marketing.

We share data with a small number of trusted processors who act on our instructions. Where data is transferred outside your region, we rely on appropriate safeguards such as Standard Contractual Clauses.

We do not sell your personal data. We may disclose data where required by law or to protect our rights, users, or the public.

We keep personal data only as long as needed for the purposes above. Account and billing records are typically retained for the life of your account and then for a period required by tax and accounting law (commonly up to 6–7 years). Security and server logs are typically retained for a shorter period (for example, up to 12 months) unless needed for an ongoing investigation.

Subject to applicable law, you have the right to access, rectify, erase, and port your personal data; to restrict or object to certain processing; and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local data-protection authority.

To exercise any of these rights, email us at the address in section 9. We may need to verify your identity before acting on a request.

We use strictly necessary cookies to keep you signed in and to secure the service (for example, session and authentication cookies). We keep non-essential tracking to a minimum; where we use any analytics or preference cookies that are not strictly necessary, we will seek consent where the law requires it. You can control cookies through your browser settings, though disabling essential cookies may break sign-in.

We use technical and organisational measures appropriate to the risk, including encryption in transit, hashed passwords, access controls, and restricted internal access. No system is perfectly secure, but we work to protect your data and to notify you and regulators of qualifying breaches as required by law.

For privacy questions or to exercise your rights, contact [email protected].

[Placeholder: if you appoint a Data Protection Officer or EU/UK representative, list their name and dedicated contact email here, e.g. [email protected].]

We may update this Privacy Policy from time to time. Material changes will be reflected by the “last updated” date above and, where appropriate, notified to active customers.