We use account, technical, Minecraft identity and server information to provide and protect RecoilHost. We do not sell personal information. Crisp live chat is loaded on our public website to provide support.
1. Scope and who is responsible
This Privacy Policy explains how RecoilHost (RecoilHost, we, us or our) handles personal information through recoilhost.com, its subdomains, the control panel, Minecraft proxy network, hosted servers, support, voting, account linking, rewards and related services (together, the Service).
RecoilHost is responsible for personal information used to operate the platform. Customer server owners are responsible for deciding how their own Minecraft server uses player information and User Content, as explained under Customer servers.
This policy is intended to describe our practices clearly and support rights available under the Australian Privacy Act 1988 and other applicable privacy laws. Some rights vary by location.
2. Information we collect
Information you provide
- Account information: username, email address, password hash, verification status, profile settings and authorised subusers. We do not store your password in readable form.
- Support and communications: messages, attachments, contact details and the history of support, abuse, privacy or legal enquiries.
- User Content: server worlds, files, backups, plugins, mods, configuration, console input and other material you upload or create.
- Payment information: if paid features are offered, billing status, purchase identifiers, amounts, currency and limited transaction details. A payment provider may collect card or account details directly; RecoilHost does not need to store complete card numbers.
Minecraft and service information
- Minecraft usernames and name history, Java UUIDs, Bedrock/Floodgate UUIDs and XUIDs, linked account status, first and last seen times, join counts and proxy or server presence;
- server identifiers, owner and member relationships, subdomains, region, software, configuration, resource allocations, online state and operational events;
- votes, voting-site identifiers, reward status, vote-token and credit balances, purchases, redemptions, resource boosts and immutable transaction or audit entries; and
- moderation, security, staff actions, suspension history, abuse reports and records needed to prevent duplicate accounts, fraud or limit evasion.
Information collected automatically
When you use the website, panel, API, proxy or hosted service, we and our service providers may collect IP address, port, date and time, requested page or operation, referrer, browser and device type, operating system, language, session identifiers, user agent, crash details, network and performance data, and security events.
Server software and plugins may record player usernames, UUIDs, IP addresses, chat, commands and gameplay events in server files or logs controlled by the server owner. RecoilHost may host those files as part of the Service.
Sources
We collect information from you; your authorised users; Minecraft clients and servers; Velocity, Geyser and Floodgate; voting websites; our panel and infrastructure; support providers; security tools; and payment or authentication providers you choose to use.
3. How and why we use information
We use personal information where needed to provide the Service, pursue legitimate operational and security interests, meet legal obligations, or with consent where consent is required. Purposes include:
- creating accounts and servers, authenticating sessions and recovering accounts;
- routing Minecraft connections, distinguishing Java, Bedrock and authorised offline identities, linking accounts and keeping identity history consistent;
- operating server files, console, SFTP, domains, capacity, automatic sleep, backups and support;
- recording votes, preventing duplicate rewards, administering tokens, credits, purchases and boosts;
- responding to support, privacy, abuse and legal requests;
- detecting attacks, spam, fraud, limit evasion, compromised accounts and Terms violations;
- maintaining audit records, debugging faults, measuring reliability and improving features;
- sending verification, security, service, policy and other necessary account communications; and
- sending optional promotions where permitted, subject to available unsubscribe or consent controls.
We may aggregate or de-identify information so it no longer reasonably identifies an individual. We may use that information for capacity planning, statistics, security and service improvement.
6. How long we keep information
We keep personal information only for as long as reasonably needed for the purposes described above, including security, dispute resolution and legal obligations. Typical periods are:
| Information | Typical retention |
|---|---|
| Active account and server records | While the account or server is active. |
| Server files | Until the server is deleted. Residual copies in backups, if any, may remain for up to 90 days before rotation. |
| Account information after a verified deletion request | Removed or de-identified from active systems within a reasonable period, normally 30 days, subject to the exceptions below. |
| Session, access and routine security logs | Usually up to 12 months. |
| Support communications | Usually up to 24 months after the matter closes. |
| Minecraft identity, vote, credit, transaction, audit, fraud and abuse records | As long as reasonably needed to maintain account integrity, honour balances, resolve disputes, prevent abuse and meet legal or accounting obligations; some records may be retained for up to 7 years. |
We may retain information longer when required by law, subject to a preservation request, relevant to an active dispute or security incident, or needed to establish or defend legal claims. When information is no longer needed, we delete it or de-identify it where reasonably practicable.
7. Security
We use reasonable administrative, technical and physical safeguards appropriate to the Service, such as access controls, credential hashing, encrypted transport, network isolation, logging and restricted administrative access. No online system is completely secure. You are responsible for using a unique password, protecting credentials, limiting subuser access, updating server software and keeping your own backups.
If you discover a vulnerability or believe an account has been compromised, contact support@recoilhost.com and do not publicly disclose sensitive details before we can investigate.
8. Your rights and choices
Depending on where you live, you may have rights to:
- ask whether we hold personal information about you and request access or a portable copy;
- correct inaccurate or incomplete information;
- request deletion or de-identification;
- object to or restrict certain processing;
- withdraw consent, without affecting processing already carried out;
- opt out of marketing communications; and
- complain to an applicable privacy or data-protection authority.
To make a request, email support@recoilhost.com from your account email where possible. Describe what you need and the relevant account or Minecraft identity. We may request proportionate information to verify your identity and protect other users. We normally respond within 30 days, or within another period required by law.
A deletion request may not remove information that belongs to another customer's server files or public Minecraft systems, and we may retain limited records where legally permitted for security, fraud prevention, balances, transactions, disputes or compliance. We will explain a refusal or limitation where required.
If you are in Australia and are dissatisfied with our response to a privacy complaint, you may contact the Office of the Australian Information Commissioner. EEA and UK residents may also complain to their local supervisory authority.
9. Customer servers and player privacy
Customers decide which plugins, mods, logs, whitelists and integrations run on their Minecraft servers. For personal information collected through those choices, the customer server owner determines the purpose and is responsible for providing player notices, choosing lawful settings, handling player requests and complying with applicable law. RecoilHost generally processes that information only to host and transmit the server files and provide support, security and infrastructure.
Players should contact the relevant server owner first about server-specific chat, plugin databases, bans, logs or gameplay data. RecoilHost may assist the owner or act directly where required by law, but cannot reliably interpret every customer plugin or independently decide which in-world data should be changed.
10. Children
The Service is not for children under 13. Users aged 13 to 17, or under the age of legal majority where they live, must have permission from a parent or legal guardian. We do not knowingly request sensitive information from children or knowingly use children's personal information for personalised advertising.
If you believe a child under 13 has provided personal information to RecoilHost, email support@recoilhost.com. We will investigate and delete the information where required, subject to reasonable verification and safety needs.
11. Changes to this policy
We may update this Privacy Policy when our services, providers or legal obligations change. The updated date will appear at the top. We will provide prominent notice, and request fresh consent where required, before a material new use takes effect.
12. Contact and complaints
For privacy requests, questions or complaints, email support@recoilhost.com with the subject Privacy request. Explain your concern and the outcome you are seeking. We will acknowledge and investigate complaints within a reasonable time and normally respond within 30 days.
Do not send passwords, session cookies, API keys, SFTP credentials or other secrets by email.