Privacy Policy

Draft — review for your jurisdiction (especially GDPR/UK GDPR applicability) before launch.

What we collect

• Account data: name, email, password hash, IP addresses used to access the client area and panel.
• Billing data: invoices, transaction references. Card and wallet details are processed by Stripe and never touch our servers.
• Service data: server configuration, resource usage, console logs, files you upload to your server.
• Support data: tickets and the messages in them.

What we use it for

Providing and billing the service, preventing fraud and abuse, responding to support requests, and legally required record-keeping. We do not sell personal data. We send transactional email only, unless you explicitly opt in to announcements.

Processors we rely on

Stripe (payments), our SMTP provider (transactional email), Backblaze B2 (encrypted backups). Each processes only what is needed for its function.

Retention

Account and billing records are kept as long as required for tax/accounting law. Server data is deleted within 7 days of service termination. Backups roll off within 14 days of deletion.

Your rights

You may request a copy of your personal data or its deletion (subject to legal retention duties) via a support ticket. EU/UK users have the rights set out in the GDPR, including complaint to a supervisory authority.

Cookies & analytics

The client area and panel use essential cookies for functions such as sign-in, security and checkout. We also store your advertising privacy choice in the first-party fh_consent cookie for up to 180 days. That choice is shared between frizzlenhost.com and billing.frizzlenhost.com.

We measure site and checkout usage with self-hosted, cookieless analytics (Umami) on our own infrastructure. This operates separately from advertising measurement and does not set analytics cookies. The game panel carries no analytics.

Advertising measurement is optional. Google Ads and Reddit advertising tags load only after you choose Accept advertising. Choosing Reject advertising keeps those tags blocked. With your consent, the tags can use advertising cookies, the page address, browser/device information and advertising click identifiers to measure visits and purchases. Google cookies may include _gcl_*; Reddit cookies may include _rdt_uuid. The advertising providers determine the lifetimes of their cookies. See Google’s explanation of how it uses information from partner sites and Reddit’s privacy policy.

After advertising consent, our first-party fh_ads_attribution cookie can retain the latest valid advertising click identifier and campaign source for up to 90 days across the website and billing area. We may associate this consented source with an order internally to assess advertising results. It is removed when you withdraw advertising consent.

For eligible paid orders, we may send an order reference, the purchase amount and currency to measure whether advertising results in customers. We do not send your account email address, name or payment details to these tags, and we do not use enhanced conversion matching. Google advertising-personalisation and Google Analytics storage consent remain denied. A free signup is not treated as a paid purchase.

Use Privacy choices at the bottom of either the website or billing area to change or withdraw your consent. Rejecting advertising after accepting removes accessible first-party advertising cookies and reloads the page with advertising tags blocked; open pages check the shared choice while they are active. Withdrawing consent stops future measurement through these tags but cannot recall information already sent to Google or Reddit. If you clear or block the preference cookie, we ask for your choice again.