Your Privacy Matters

Your account

• Email address: to sign you in and send account emails such as sign-in codes, panel logins, renewal and suspension notices, and ticket replies
• Password: stored as a salted hash, never in plain text. We cannot see your password
• Minecraft username: to create your panel account and identify your server
• Discord account: if you sign in with or link Discord, we store your Discord ID, username, avatar and the email on your Discord account
• Two-factor authentication: if you turn on 2FA, we store your 2FA secret and recovery codes
• Sign-in details: the IP address and browser of each sign-in, to send new sign-in alerts and to stop abuse
• Credits and billing: your credit balance, credit history and what you bought. Card details are handled by Stripe, and we never see your full card number

Your servers and VPSes

• Settings you choose: server names, software, versions, subdomains, custom domains and plan
• Files and data: everything stored on your servers, VPSes, websites and bots, and their backups. These live on our machines
• VPS usage: CPU, memory, network and disk activity, recorded every minute for your usage graphs
• VPS network protection events: when one of our automatic protections blocks something, we record which VPS, which protection and how many times. We do not record what your traffic contains
• Public server data: whether your server is online, its player count and its description, shown in our server lists and in-game selector

Support and community

• Tickets: messages and attachments you send in tickets on our website, panel or Discord
• Live chat: messages you send in the chat box on our website
• Reviews, forum posts and giveaway entries: what you post and the name shown with it. Reviews and forum posts are public
• Server Spotlight: your server name and address are shown publicly on our website, panel sign-in page and in-game selector. We count views and clicks as totals only
• Referrals: who referred you, so the right person gets the reward
• PulsedAI: how many requests you make each day. If you rate an answer, we keep that conversation with your rating

Visits to our website

• Page-view counts: how many times each page is viewed, how many different visitors we had each day, and which site sent them. To tell visitors apart within one day we use a scrambled code made from the IP address and browser. It exists only in memory and is thrown away every day. Only daily totals are stored, and no cookies are used for this
• Server logs: our web server logs each request, with the IP address, page and browser, for security and to stop abuse

We use your information to:

• Create, run and bill your servers, VPSes and other services
• Sign you in and keep your account secure
• Send account emails such as sign-in codes, renewal and suspension notices, and ticket replies
• Answer support tickets and live chats
• Detect and stop abuse, attacks, spam and fraud, and protect our network and other customers
• Give you Discord roles that match your account, such as Customer
• Improve PulsedAI using conversations you choose to rate
• Meet our legal obligations

AI in support. Some replies to support tickets are written by our own AI model, which runs on our own servers. To answer, it can read your ticket and details about your own servers, such as their status and settings. Your ticket is not sent to an outside AI company.

Marketing. We only send marketing emails if you tick the newsletter box, and every one has an unsubscribe link. Our Discord bot may send you messages, such as review requests and giveaway news. You can opt out of these. We never sell your data.

We use these services to run PulsedMC:

• Cloudflare: all traffic to our website and panel passes through Cloudflare for security and speed, so Cloudflare sees your IP address and the pages you request. See Cloudflare's Privacy Policy
• Stripe: card payments and monthly credit refills. See Stripe's Privacy Policy. If we offer another payment method at checkout, that provider handles payments made with it
• Resend: sends our emails, so your email address and the emails we send you pass through it
• Discord: sign-in with Discord, our Discord server, support tickets, live chat and staff alerts. When you sign in with Discord, we add you to the PulsedMC Discord server and give you roles that match your account. Live chat messages and ticket messages are passed to private channels in our staff Discord server so staff can answer them. See Discord's Privacy Policy
• Google reCAPTCHA: protects our panel sign-in from bots. It collects information about your device and how you use the page. See Google's Privacy Policy and Terms
• Google AdSense: shows ads on our website and panel. Google and its partners use cookies to show ads based on your visits to this and other websites, and to measure them. We do not see this data. You can turn off personalised ads in Google's Ad Settings or at aboutads.info, and read how Google uses information from sites that use its services
• DNS for VPSes: after our own filter, domain lookups from a VPS are answered by Quad9 and Cloudflare, so they see the domain names your VPS looks up
• Modrinth: if you install a modpack from the panel, your server downloads it from Modrinth

Your servers, VPSes, panel and database run on machines we operate. They are not a third party.

Your account, servers, VPSes, tickets and backups are stored on servers we operate in the United States, in Salt Lake City, Utah and Ashburn, Virginia. Billing records are also kept by Stripe.

Passwords are stored as salted hashes. 2FA secrets and recovery codes are stored in our database and only used to check sign-ins. Sign-in tokens are stored in your browser's local storage and checked on every request.

Staff access to customer data and servers is limited to what each role needs, and staff actions on customer VPSes are logged.

• Account data: kept while your account is open
• Servers, VPSes and backups: deleted when you delete them, when you delete your account, or as set out in the Terms of Service. Backups are deleted together with their server or VPS
• Credit and purchase records: kept for our accounting and tax records, even after your account is deleted. Stripe keeps billing records as the law requires
• Tickets and live chats: kept until you ask us to delete them
• Web server logs: 14 days
• VPS usage graphs: 35 days
• VPS network protection counts: about 1 day. Alerts sent to our staff are kept as a record of abuse

You can delete your account at any time from your account page. To ask us to delete other data, contact us and we will do it within 30 days, unless we have to keep it by law, to settle a dispute, or to deal with abuse.

Depending on where you live, you may have the right to see, correct, download or delete your personal data, and to object to or limit how we use it. EU and UK residents can also complain to their local data protection authority.

To use any of these rights, open a ticket, email [email protected] or message us on Discord. We may need to check that the account is yours first.

We may share your information with law enforcement or other authorities when the law requires it, or when we believe it is necessary to prevent harm to a person, to stop abuse coming from our network, or to protect our rights and our customers. This can include account details, sign-in IP addresses, billing records, network protection records and the contents of servers and VPSes.

PulsedMC is not for children under 13. If you are under 18, you need a parent or guardian's permission to use it. If you believe a child under 13 has given us personal information, contact us and we will delete it.

We may update this policy. The date at the top always shows the latest version. If we make important changes, we will also post a notice in our Discord server or email you. If you keep using the Service after a change, you accept the updated policy.

Questions about your privacy? Reach out and we'll get back to you.