Privacy notice

Last updated: November 2026. This explains what personal data KrillCloud holds and why. The data controller is [OWNER LEGAL NAME], a UK sole trader trading as KrillCloud, [CONTACT ADDRESS]. Contact: support@krillcloud.com.

What we hold

• Account and order data: your email address (and name if you give it), the plan, server name and software you chose, billing dates and status, and the time you accepted our checkout acknowledgement.
• Payment data: card details are handled only by Stripe and are never seen or stored by us. We keep Stripe's customer, subscription and invoice references and receipts.
• Control panel account: username, email and login activity.
• Server data: your world files, plugins, console output, settings and backups, including the IP addresses of players as they appear in your server's logs.
• Support: messages you send through the contact form or email, and our replies.
• Technical logs: IP addresses and request logs on our website and panel, for security and fault-finding.

Why we use it, and our legal basis

To take payment, create and run your server and support you (contract); to keep tax and accounting records (legal obligation); and to keep the service secure, prevent fraud and abuse and deal with disputes (legitimate interests). We send service emails (receipts, payment warnings, notices). We do not sell your data and do not send marketing without asking first.

Who else handles it

These companies process data on our behalf under their own terms:

• Stripe: payments and fraud screening (Stripe Radar).
• Resend: sending our emails.
• Hetzner and OVH: the data-centre providers where servers and backups run.
• Cloudflare: DNS and network protection for our domain and free server addresses.

Some of these may process data outside the UK, using safeguards required by UK GDPR, such as adequacy regulations or standard contractual clauses. We may also share data when the law requires it or to report abuse to the authorities.

How long we keep it

• Server files are deleted when the server is deleted. For unpaid accounts a final backup is kept for 30 days after deletion.
• Payment, invoice and tax records: 6 years, as the law requires.
• Support messages: up to 2 years after the last message.
• Website and panel logs: a few weeks.

Your rights

Under UK GDPR you can ask to see your data, correct it, delete it, restrict or object to how we use it, or receive it in a portable form. Email support@krillcloud.com or use the contact form; we reply within one month. We may need to keep some records (such as tax records) even if you ask for deletion. You can complain to the Information Commissioner's Office at ico.org.uk, though we would appreciate the chance to put things right first.

Cookies

This website uses only what it needs to work and does not use advertising or tracking cookies.