Privacy policy

BetaHost provides managed game hosting and is registered in Denmark under CVR number 46827406. We are the data controller for our website, accounts, billing, and support. For privacy questions or requests, email contact@betahost.org.

• Account: email address, account identifiers, authentication data, and account activity.
• Billing: Stripe collects payment and billing details. We receive purchase, subscription, invoice, refund, and payment records, plus limited card details: brand, last four digits, expiry date, and a card identifier. We do not store full card numbers or security codes.
• Servers: settings, worlds, backups, console logs, and server activity. Depending on the game, these may include player names, platform identifiers, IP addresses, and chat messages.
• Technical: IP addresses, browser and device information, request logs, errors, and security signals.
• Support: messages, contact details, and attachments you send us.

We receive this information from you, server owners, hosted games, and our authentication, payment, and security providers.

• Providing the service (contract): we use account, billing, and support information to provide hosting, manage subscriptions and refunds, and send service emails. This fulfils our contract with you or handles steps you request before buying.
• Security and reliability (legitimate interests): we use technical information and relevant account activity to resolve faults, prevent abuse and fraud, protect our services, and handle legal claims.
• Legal obligations: we use billing and related records to meet accounting, tax, and other legal requirements.

Without the required account and payment information, we cannot create your account or provide paid hosting.

Our encrypted sign-in cookie, bh-auth, expires after seven days and renews when your session refreshes. Signing out clears it. Blocking it prevents sign-in from working correctly.

Cloudflare Turnstile checks registration and password recovery requests for bots using your IP address and browser signals. Cloudflare also uses these signals to improve detection. See its Turnstile Privacy Addendum. Checks can block requests; email us if you cannot access your account.

Stripe also uses cookies and similar technologies for payments and fraud prevention. You can manage cookies in your browser settings.

We share information with providers that run parts of the service:

• Amazon Web Services: application hosting, website delivery and security, sign-in through Cognito, storage, backups, and automated service email.
• Stripe: the seller of record for subscriptions, handling payments, billing, and fraud prevention.
• Cloudflare: bot protection.
• Purelymail (Add Rabbit LLC): hosting our contact and support mailboxes, including messages and attachments you send us and our replies.
• Game server infrastructure providers: hosting and network services.

Some providers also use information for their own purposes under the linked privacy notices. We may disclose information when required by law or needed to investigate abuse, protect our services, or handle legal claims.

We host and back up worlds for server owners. Games may record player information even if players have no BetaHost account. Server owners can access player information in their game, console, world files, and backups; other players may see names, messages, and other information the game makes visible.

Server owners control their server settings and use of player information. Contact them about that use, or us about BetaHost’s handling of personal information. Game publishers and platform providers have separate privacy policies.

We host our website application and account database with AWS in Ireland. Website delivery, payments, bot protection, and support email can involve processing outside the European Economic Area (EEA), including in the United States.

• AWS: CloudFront delivers our website through a global network. AWS lists its processing locations in its subprocessor list. Its Data Processing Addendum incorporates EU standard contractual clauses for transfers to countries without an applicable adequacy decision, unless another recognised transfer mechanism applies.
• Stripe: payment and billing information may be processed in the United States, India, and other countries described in its privacy policy. Its Data Transfers Addendum provides for the EU–US Data Privacy Framework for covered US transfers and EU standard contractual clauses where applicable.
• Cloudflare: Turnstile signals may be processed in the United States and other countries where Cloudflare operates. Its Data Processing Addendum provides for the EU–US Data Privacy Framework for covered US transfers and EU standard contractual clauses for transfers without an applicable adequacy decision.
• Purelymail: our contact and support emails, including attachments, are stored in the United States. Purelymail identifies northern Virginia as its server location. See its privacy policy.

An adequacy decision recognises an adequate level of data protection. The EU–US Data Privacy Framework applies to participating US organisations. Standard contractual clauses are safeguards approved by the European Commission. The linked AWS, Stripe, and Cloudflare terms explain their transfer protections. Email contact@betahost.org for more information or a copy of the applicable safeguards.

• Account details: kept while your account is active and deleted within 30 days of closure. We close dormant accounts after 24 months without account activity or active services.
• Required accounting records: kept for five years after the end of the financial year they relate to.
• Support messages and attachments: deleted 12 months after the enquiry is resolved.
• Technical and security logs: personal information is kept for up to 90 days to troubleshoot faults and investigate security incidents.
• System backups: copies of records in our application database expire within 14 days after deletion from active systems. Purelymail retains backups of deleted emails for up to one month.
• Game console logs: personal information is scheduled for removal after seven days.
• Worlds and backups: scheduled for deletion with the server 30 days after the subscription ends. Deleted or replaced backup copies are scheduled for removal after a further 30 days.

We may retain specific records longer where required by law or necessary for an ongoing dispute or security investigation. We delete them when that need ends.

You can request access, correction, deletion, restricted use, or a portable copy of your personal information. You can also object to processing based on legitimate interests. These rights have legal limits, including required record retention.

Email contact@betahost.org to make a request. We may need to verify your identity. You can also complain to Denmark’s Datatilsynet or the data protection authority where you live or work in the EEA.

We update the date above when this policy changes. We notify you of material changes through the service or by email where required by law.