Privacy Policy & Cookie Policy

1. Who we are

QuishHost ("we", "us", "our") is a game server hosting service operated from the European Union. Our website is available at quishhost.com.

QuishHost is the data controller responsible for your personal data. For any privacy-related inquiries, or to exercise your rights, contact us at privacy@quishhost.com.

2. What data we collect

We collect the following categories of personal data:

• Account data: name, email address, username, password (stored hashed).
• Billing data: billing address and payment details. Payments are processed by Stripe and PayPal; we do not store raw card numbers.
• Usage data: IP address, browser type, device information, pages visited, and timestamps.
• Server data: game server configurations and resource usage logs.
• Support data: messages and files you send us via support tickets.

3. Why we collect your data

• To create and manage your account.
• To deliver the hosting services you purchased.
• To process payments and issue invoices.
• To send service-related communications (downtime, maintenance, updates).
• To detect and prevent abuse, fraud, and violations of our Terms of Service.
• To improve our platform and troubleshoot issues.
• To comply with our legal obligations.

4. Legal basis (GDPR — EU/EEA users)

If you are located in the EU/EEA, we process your data on the following legal bases:

• Contract performance — to create your account and deliver the services you purchased.
• Legitimate interests — to secure our platform, prevent fraud and abuse, and improve our service. Where we rely on legitimate interests, we balance these against your rights and freedoms.
• Legal obligation — to comply with applicable laws, such as tax and accounting rules.
• Consent — for non-essential cookies and any marketing communications. You may withdraw consent at any time.

5. Data sharing

We do not sell your personal data. We share it with trusted third parties (processors) only as needed to operate our service:

• Stripe / PayPal — payment processing.
• Cloudflare — DDoS protection, DNS, and CDN.
• Our infrastructure / data center providers — server hosting.
• Law enforcement or public authorities — where required by law or to protect our legal rights.

These providers process data on our behalf under agreements that require appropriate safeguards.

6. International data transfers

Some of our processors may process data outside the EU/EEA. Where this happens, we ensure an adequate level of protection through legally recognized safeguards, such as the European Commission's adequacy decisions or Standard Contractual Clauses (SCCs). You may contact us for more information about these safeguards.

7. Data retention

We retain your account data for as long as your account is active. Upon account deletion, we delete or anonymize your personal data within 30 days, except where a longer retention period is required by law — for example, invoices and transaction records, which we retain for 10 years to comply with tax obligations. Backups containing your data are overwritten on our regular backup rotation cycle.

8. Your rights

Depending on your location, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Receive your data in a portable format (data portability).
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at privacy@quishhost.com. We will respond within the timeframe required by applicable law (under GDPR, normally within one month).

If you are in the EU/EEA and believe we have not handled your data lawfully, you also have the right to lodge a complaint with your local data protection supervisory authority.

9. Automated decision-making

We may use automated systems to detect fraud and abuse (for example, flagging suspicious payments or activity). These checks do not produce legal or similarly significant effects on you without human review. We do not use your data for automated decisions that would significantly affect you without a person reviewing the outcome.

10. Data security

We take reasonable technical and organizational measures to protect your data, including hashed passwords, access controls, and encryption in transit. No system is completely secure, but we work to protect your information and will notify you and the relevant authority of a personal data breach where required by law.

11. Children

Our Service is intended for users who are at least 18 years old, or the age of legal majority in their country. We do not knowingly collect personal data from children. If we learn that we have collected data from a child without appropriate consent, we will delete it.

12. Cookie Policy

You can manage or disable non-essential cookies through your browser settings or our cookie banner at any time. Disabling essential cookies may affect site functionality.

13. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via email or a banner on our website. Continued use of our services after changes take effect constitutes acceptance, except where your consent is legally required.

14. Contact

For any questions about this policy or your data, contact us at privacy@quishhost.com.