Privacy Policy

What we collect

• Account data: email, name, password (hashed), and the settings you configure.
• Service data: your servers, their files and databases, console logs, and resource usage - what's needed to host them.
• Copilot and support conversations: what you ask Copilot in the panel and its answers, the server details it reads to answer (status, settings, console lines), and the tickets you send us.
• Player activity: for game features you enable (statistics, join pages, rewards) we process in-game usernames, join/leave times and chat relayed through integrations you configure.
• Terminal and scheduled commands: the commands you and your team type in an app's terminal, run on an app through our MCP server or schedule on an app, with who ran or added them and when they ran, to catch abuse. The log does not keep what the commands print, nothing typed at a password prompt is kept, and passwords and tokens we recognize are masked before a command is stored.
• Payment data: handled by Paddle, our merchant of record. We never see card numbers - we receive transaction ids, amounts and billing country.
• Technical data: IP addresses and request logs for security, rate limiting and debugging.

What we don't do

• We don't sell your data. Ever.
• We don't read your server files except to operate the service, help you when you ask, or investigate abuse.
• We don't run third-party advertising trackers on the panel.

Who processes data for us

Infrastructure and services we rely on, each receiving only what their job needs:

• Paddle - payments, tax and invoicing (merchant of record).
• OVHcloud - the servers your services run on (EU and North America).
• Cloudflare - DNS, DDoS protection, content delivery, and Workers AI as a backup AI model.
• Anthropic - the AI model behind Copilot, crash diagnosis, support answers and our abuse checks. It receives only what each task needs, such as your question, console lines or code excerpts.
• Mailtrap - transactional email delivery.
• Discord - only for integrations you configure (webhooks, chat relay, social login).

Public pages

If you share your server's join page, it shows what you've enabled: server name, status, and optionally player usernames, booster names and messages. You control these toggles per server, and join pages are excluded from search engines. Boosters choose what name and message they attach - those are shown to the server owner and, if the owner enables it, publicly on the page.

Retention

• Service data lives while your subscription does, plus a short grace period after cancellation, then it's deleted.
• Invoices and transaction records are kept as long as tax law requires.
• Logs rotate on short schedules unless needed for an active security investigation.
• Terminal and scheduled commands are kept for 90 days, then deleted, also when the app or the account is deleted sooner.
• Copilot conversations are kept while your account is, so we can review answers and improve Copilot. Clearing a chat in the panel hides it from you; deleting the server or your account deletes it.

Your rights

You can access, correct, export or delete your personal data. Most of it is directly editable in the panel; for anything else emailsupport@fadehost.com and a human will handle it. EU/EEA customers have the rights the GDPR grants, including complaint to a supervisory authority.

Changes

If this policy changes materially we announce it in the panel or by email before it takes effect.