Privacy Policy
Last updated: 27 September 2026
1. Who We Are
Astroworld Hosting is operated by Astroworld MC, a company registered in the Netherlands. We are the data controller for the personal data processed through our hosting services.
2. What Data We Collect
We collect the following data when you use our services:
- Email address, for account creation and communication
- Payment information, processed and stored by Stripe; we do not store card details
- Server logs, connection data, IP addresses for security and abuse prevention
- Usage data, server resource usage for billing and capacity planning
- Referral data, hashed visit logs and the link between a referrer and the customer they referred
3. How We Use Your Data
Your data is used to:
- Provide and maintain your hosting service
- Process payments and manage your subscription
- Send service-related communications (outages, billing, support)
- Email you tips and offers about our own hosting, which you can turn off (see section 9)
- Prevent abuse and enforce our Acceptable Use Policy
4. Third Parties
We do not sell your personal data to third parties.
Payment processing is handled by Stripe. Their privacy policy applies to payment data. We use Google Analytics for anonymous website usage statistics. Our emails are sent through Resend, which delivers them on our behalf and tells us whether an email arrived or bounced.
5. GDPR Compliance
As a Netherlands-based company, we comply with the General Data Protection Regulation (GDPR). You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Data portability
6. Data Deletion
You can request deletion of your personal data by contacting us at info@astroworldmc.com. We will process your request within 30 days.
After service cancellation, server files are retained for 7 days (see Terms of Service), then permanently deleted.
7. AI Server Copilot
The AI Server Copilot is an optional Beta feature. You must apply for and be accepted into the beta before it can be enabled on your account. If you use it, your requests and the specific server files, console logs, and configuration it needs to answer them are sent to our AI provider, Anthropic (the Claude API), which acts as a subprocessor on our behalf. This data is used only to generate the response you asked for and is not used to train AI models.
The Copilot only accesses the one server you ask it about, only reads what a request requires, and never changes anything without your explicit approval. You can avoid this processing entirely by not using the Copilot, or contact us at info@astroworldmc.com to disable it for your account.
8. Referral Programme
If you apply to the referral programme we keep what you told us in the form: where you would share the link, roughly how many players you reach, the address you gave for your server, community or channel, and how you intend to recommend us. We use it to decide on your application and to check later that the link is being used the way you described.
If you share your referral link, we log each visit through it so you can see how the link is doing and so we can spot abuse. Those visit logs store the IP address and browser identifier in hashed form only: we keep a one-way fingerprint, not the address itself, and it cannot be read back. A short-lived cookie remembers which link a visitor arrived through for 30 days, so the right person is credited when an order is placed.
When someone orders through your link we record the connection between the two accounts, the amount of that first payment, and your reward. Your referrals only ever see your link, never your identity, and you only ever see a masked version of their email address, never the full one. If you request a payout, the payment details you give us are used for that payment and kept only as long as our accounting obligations require.
9. Emails About Our Hosting
What we send. Everyone with an account receives tips, offers and news from us about our own hosting, and we tell you so when you sign up. They include, for example, help with setting up your first server, a reminder about an order you started and did not finish, or a tip based on how your server is used, such as when it keeps running out of memory. We do this based on our legitimate interest and on the exception in Dutch law for emails to customers about our own similar services (article 11.7 of the Telecommunicatiewet, the Dutch Telecommunications Act). This also applies to accounts made before we started these emails.
Turning them off. You can turn these emails off at any time in your account: on the email preferences page for your whole account, per kind (tips, offers and news), or on the page of a server for the emails about that server, per group (first weeks, usage advice, features and extras, milestones and reports). Every one of these emails also has a link at the bottom to turn them off. Emails about your account, your orders and your servers keep coming, because the service needs them. If you have not activated your account yet, we send up to two reminders with a new activation link.
What we keep for this.
- Which of these emails we sent you, and when
- For our other emails about your account, orders and servers, such as an order confirmation or a password reset: which kind of email we sent you, when, and whether it arrived. Not the subject and not the content.
- Whether you clicked a button or link in one of our emails, which one and when. Those links pass through our own site, which counts the click. Links that sign you in or reset your password never do. When a mail filter checks a link automatically right after delivery, we mark that and do not count it as your click. We do not track whether you open an email.
- Whether the email arrived or bounced, as reported by Resend
- When you turned tips, offers or news, or the emails about one of your servers, off or on again, and from which email, if you used its link
- Your choices for your account and for each of your servers, your time zone and language, and when you were shown the notice about these emails
- What you picked in a checkout you started and did not finish: plan, region, billing period and amount
- Your answers in the plan finder, if you were signed in
- Which pricing and order pages you viewed while signed in
- Your answer, if one of our emails asks you a question and you click one of the answers: why you did not start a server, a score, why you cancelled, or whether we may feature your server in our news (we only do that with your yes). If you answer in your own words, we keep that text too.
- A note that an email is due, for example a payment reminder three days after a payment failed, until it is sent or no longer needed
- For each of your servers, a summary per day: how much of the day it was online, the most players at once, the highest memory, processor and disk use, and how many backups were made and crashes we restarted. We also note when a crash was restarted, when a backup was made and when your plan renewed. These numbers are the ones you see in our emails about your server.
- The most players your server ever had at once and its Minecraft version, so we notice a new record or a version change
Security emails. When you sign in, we note for each device you use the country your connection comes from, as our network provider Cloudflare reports it, and your browser and operating system, for example Chrome on Windows. We do not store your IP address for this. When you sign in from a device or country we have not seen on your account before, or when your password or two-step verification changes, we email you with that country and device, so you can spot a sign-in that was not you. A device is removed from this list when it has not been used for 13 months, and the whole list when your account is deleted. Once a month we also run the security check of the Copilot over the settings of your server, and we email you only when it finds something serious.
How long. Unfinished checkouts, plan finder answers and viewed pages are deleted after 90 days, and so are notes that an email is due, 90 days after they were handled. The record of the emails we sent, with clicks, answers and choices, is deleted after 24 months, and all of it when your account is deleted. The daily numbers of a server are deleted after 800 days, and all of them when the server is deleted. Your choices are kept as long as your account exists. If one of these emails bounces or is reported as spam, we stop sending them to you. We use this data only to decide which email to send and when, and to see which emails help. For that last part we also look at whether you placed an order, bought Copilot credit or paid an open invoice in the days after an email; we use the orders and payments we already keep for that and store nothing extra. We do not share any of it with advertisers.
11. Contact
For privacy-related inquiries, contact us at info@astroworldmc.com. For server or account help, visit our Support page.
Delivery: most servers are handed over instantly and run within seconds of payment, the rest follow within 60 minutes during the day and within 12 hours at night.