30% off every Performance planAMD Ryzen 9 7950X with DDR5 in Poland, on every new server: the first six months on a monthly plan
Skip to main content

Astroworld Hosting

Privacy Policy

By Astroworld Hosting

Last updated: 11 November 2026 (attachments and sharing a conversation with support in the Copilot, section 7). Previous update: 9 November 2026

1. Who We Are

Astroworld Hosting is operated by Astroworld MC, a company registered in the Netherlands. We are the data controller for the personal data processed through our hosting services.

2. What Data We Collect

We collect the following data when you use our services:

  • Email address, for account creation and communication
  • Payment information, processed and stored by Stripe; we do not store card details
  • Server logs, connection data, IP addresses for security and abuse prevention
  • Usage data, server resource usage for billing and capacity planning
  • Order details, the server name, address and software you choose, and anything you write in the requirements field at checkout, to set up your server
  • Referral data, hashed visit logs and the link between a referrer and the customer they referred
  • Invite data, your invite code, hashed visit logs, the link between the inviting and the invited account, and its status
  • Discord account, only if you link it: your Discord user ID and username, for support in our Discord (see section 12)

3. How We Use Your Data

Your data is used to:

  • Provide and maintain your hosting service
  • Process payments and manage your subscription
  • Send service-related communications (outages, billing, support)
  • Email you tips and offers about our own hosting, which you can turn off (see section 9)
  • Prevent abuse and enforce our Acceptable Use Policy
  • Start crashed servers again, explain what went wrong and make that help better (see section 10)

4. Third Parties

We do not sell your personal data to third parties.

Payment processing is handled by Stripe. Their privacy policy applies to payment data. We use Google Analytics for anonymous website usage statistics. Our emails are sent through Resend, which delivers them on our behalf and tells us whether an email arrived or bounced. If you use the AI Server Copilot, your questions, the server data it needs and any files you attach are processed by Anthropic (the Claude API) as our subprocessor; see section 7.

5. GDPR Compliance

As a Netherlands-based company, we comply with the General Data Protection Regulation (GDPR). You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict processing
  • Data portability

6. Data Deletion

You can request deletion of your personal data by contacting us at info@astroworldmc.com. We will process your request within 30 days.

After service cancellation, server files are retained for 30 days (see Terms of Service), then permanently deleted.

7. AI Server Copilot

The AI Server Copilot is an optional Beta feature. You must apply for and be accepted into the beta before it can be enabled on your account. If you use it, your requests and the specific server files, console logs, and configuration it needs to answer them are sent to our AI provider, Anthropic (the Claude API), which acts as a subprocessor on our behalf. This data is used to generate the response you asked for and for the daily quality check described below, and is not used to train AI models. The one exception is a question about a crash: then we also keep what section 10 describes.

You can attach files to a Copilot question, such as a screenshot, a log or a config file. What you attach is sent to Anthropic (the Claude API) as our subprocessor, only to answer that question, and is not used to train AI models. Images are not kept: after the answer, only the file name stays in the conversation. The text of a log or config file you attach becomes part of your question and is kept with the conversation, like the rest of your question, until you delete the conversation. Do not attach files that contain passwords, API keys or other people's personal data.

Once a day we also run an automated quality check on the Copilot conversations of the previous day. It reads your questions, the Copilot's answers and the steps it took (the files, settings and logs it read and the changes it made), and compares them with the current state of your server, such as the same files, your port allocations and the server log. This check also runs through Anthropic (the Claude API) as our subprocessor, and the data is not used to train AI models. It is there to find wrong answers and wrong changes: our support team uses the result to repair anything the Copilot broke on your server, and to give the Copilot general lessons so it does not make the same mistake again. Those lessons are general rules without names, server names, addresses or other details from your conversation. We keep the internal report of this check for 90 days.

The Copilot is also available in the website builder of your free server website. If you use it there, your request, the content of your website (texts, pages, settings, style and the ids of images you uploaded) and basic facts about your server (its name, address, version and how many players are online) are sent to Anthropic (the Claude API) as our subprocessor, to build or change your website as you asked. This data is not used to train AI models. In the builder the Copilot changes your website draft directly when you ask it to; nothing goes online until you publish. We keep your requests and the Copilot's answers with your website, so you can read the conversation back in the builder; they are deleted together with your website.

If you click Talk to support in the Copilot and give permission, our support team can read that one conversation and reply to you in it. They see your questions, the Copilot's answers and what you write to support there. What you write to support is not sent to the Copilot as a question, but the Copilot does read it as background the next time you ask it something in that conversation. You can withdraw the permission at any time with Stop sharing with support; after that, support can no longer read the conversation or reply in it. We keep when you gave the permission and when you withdrew it, with the conversation.

The Copilot only accesses the one server you ask it about, only reads what a request requires, and never changes anything without your explicit approval. You can avoid this processing entirely by not using the Copilot, or contact us at info@astroworldmc.com to disable it for your account.

8. Referral Programme

If you apply to the referral programme we keep what you told us in the form: where you would share the link, roughly how many players you reach, the address you gave for your server, community or channel, and how you intend to recommend us. We use it to decide on your application and to check later that the link is being used the way you described.

If you share your referral link, we log each visit through it so you can see how the link is doing and so we can spot abuse. Those visit logs store the IP address and browser identifier in hashed form only: we keep a one-way fingerprint, not the address itself, and it cannot be read back. A short-lived cookie remembers which link a visitor arrived through for 30 days, so the right person is credited when an order is placed.

When someone orders through your link we record the connection between the two accounts, the amount of that first payment, and your reward. Your referrals only ever see your link, never your identity, and you only ever see a masked version of their email address, never the full one. If you request a payout, the payment details you give us are used for that payment and kept only as long as our accounting obligations require.

If you invite friends with your invite link, we store your invite code, each visit to the link (with a one-way fingerprint of the visitor's IP address, never the address itself, and a random device identifier in a cookie), which accounts joined through your link and where each one stands. For an account that joined through a link, we store who invited it. We use this to add Copilot credits, to show you how your invites are doing (friends appear masked, like j***@gmail.com, never by name) and to stop misuse. It is kept for as long as either account exists.

9. Emails About Our Hosting

What we send. Everyone with an account receives tips, offers and news from us about our own hosting, and we tell you so when you sign up. They include, for example, help with setting up your first server, a reminder about an order you started and did not finish, or a tip based on how your server is used, such as when it keeps running out of memory. We do this based on our legitimate interest and on the exception in Dutch law for emails to customers about our own similar services (article 11.7 of the Telecommunicatiewet, the Dutch Telecommunications Act). This also applies to accounts made before we started these emails.

Turning them off. You can turn these emails off at any time in your account: on the email preferences page for your whole account, per kind (tips, offers and news), or on the page of a server for the emails about that server, per group (first weeks, usage advice, features and extras, milestones and reports). Every one of these emails also has a link at the bottom to turn them off. Emails about your account, your orders and your servers keep coming, because the service needs them. If you have not activated your account yet, we send up to two reminders with a new activation link.

What we keep for this.

  • Which of these emails we sent you, and when
  • For our other emails about your account, orders and servers, such as an order confirmation or a password reset: which kind of email we sent you, when, and whether it arrived. Not the subject and not the content.
  • Whether you clicked a button or link in one of our emails, which one and when. Those links pass through our own site, which counts the click. Links that sign you in or reset your password never do. When a mail filter checks a link automatically right after delivery, we mark that and do not count it as your click. We do not track whether you open an email.
  • Whether the email arrived or bounced, as reported by Resend
  • When you turned tips, offers or news, or the emails about one of your servers, off or on again, and from which email, if you used its link
  • Your choices for your account and for each of your servers, your time zone and language, and when you were shown the notice about these emails
  • What you picked in a checkout you started and did not finish: plan, region, billing period and amount
  • Your answers in the plan finder, if you were signed in
  • Which pricing and order pages you viewed while signed in
  • Your answer, if one of our emails asks you a question and you click one of the answers: why you did not start a server, a score, why you cancelled, or whether we may feature your server in our news (we only do that with your yes). If you answer in your own words, we keep that text too.
  • A note that an email is due, for example a payment reminder three days after a payment failed, until it is sent or no longer needed
  • For each of your servers, a summary per day: how much of the day it was online, the most players at once, the highest memory, processor and disk use, and how many backups were made and crashes we restarted. We also note when a crash was restarted, when a backup was made and when your plan renewed. These numbers are the ones you see in our emails about your server.
  • The most players your server ever had at once and its Minecraft version, so we notice a new record or a version change

Security emails. When you sign in, we note for each device you use the country your connection comes from, as our network provider Cloudflare reports it, and your browser and operating system, for example Chrome on Windows. We do not store your IP address for this. When you sign in from a device or country we have not seen on your account before, or when your password or two-step verification changes, we email you with that country and device, so you can spot a sign-in that was not you. A device is removed from this list when it has not been used for 13 months, and the whole list when your account is deleted. Once a month we also run the security check of the Copilot over the settings of your server, and we email you only when it finds something serious.

How long. Unfinished checkouts, plan finder answers and viewed pages are deleted after 90 days, and so are notes that an email is due, 90 days after they were handled. The record of the emails we sent, with clicks, answers and choices, is deleted after 24 months, and all of it when your account is deleted. The daily numbers of a server are deleted after 800 days, and all of them when the server is deleted. Your choices are kept as long as your account exists. If one of these emails bounces or is reported as spam, we stop sending them to you. We use this data only to decide which email to send and when, and to see which emails help. For that last part we also look at whether you placed an order, bought Copilot credit or paid an open invoice in the days after an email; we use the orders and payments we already keep for that and store nothing extra. We do not share any of it with advertisers.

10. Crash Help

When your server crashes, we read the end of its console log to start it again and to tell you in plain words what went wrong. We keep a short excerpt of that log, the Minecraft version and loader, and a fingerprint of the error, so we recognise the same error next time and can make our explanations and fixes better. Before we store the excerpt we remove IP addresses, UUIDs, email addresses, anything that looks like a password or token, and the chat messages and player names we can recognise.

Some crashes come with a fix button in the panel. If you use it, we keep what the fix changed, who pressed it and whether the server started afterwards, but not the contents of your files. A file the fix moves goes to the fix-backups folder on your server, so you can put it back. If you ask the Copilot in the panel why your server crashed, we keep the same kind of excerpt and note which checks and suggestions it used, but not your question or its answer; those stay in your Copilot history. We do the same when a plugin shuts your server down because it could not start. When one of our own steps on your server fails, such as getting it ready, setting up crossplay or moving a server in from another host, we note which step it was and its error message, but not your files or the links you gave us.

New kinds of errors are looked into by our support team, who use an AI assistant for this (Claude, by Anthropic). After 12 months we remove the link to your server, who pressed a fix button and the log excerpt; what is left is a count per type of error. We do not share this data with anyone else and we do not sell it.

11. Cookies

Essential. A consent cookie (astroworld_consent) remembers the choice you made in the cookie banner, set on the shared .astroworldmc.com domain so you are not asked again on every subdomain. If you sign in to the panel, a session cookie keeps you signed in. During checkout, Stripe sets its own cookies to run the payment. None of these can be switched off, because the site cannot function without them.

Functional. The referral link cookie described in section 8 remembers which link a visitor arrived through, for 30 days, so the right person is credited when an order is placed. The invite cookie does the same for an invite link, for 30 days, so the Copilot credits reach the right account when the visitor signs up. A second cookie holds a random device identifier, used only to recognise someone inviting themselves.

Analytics. If you accept analytics in the cookie banner, Google Analytics sets its own cookies for anonymous usage statistics, as described in section 4. We do not set any marketing or advertising cookies ourselves.

Our own ads, without cookies. When you arrive through one of our ads, the address contains a click code from Google and sometimes a campaign name. We keep that code, the campaign and the page you landed on for seven days, together with keys calculated from your IP address and browser using a secret that changes every day. We do not store your IP address itself, and we do not set a cookie for this. Our visitor counter notes in the browser tab how you arrived; that note is gone when you close the tab. If you create an account or place an order within those seven days, we keep which ad brought you with your order, and with your account for up to 90 days. We use this only to see whether our ads bring customers, based on our legitimate interest in knowing that, and we do not share it with Google or other advertisers.

12. Support in Discord

You can ask for hosting support in our Discord server. If you link your Discord account in your account settings, we store your Discord user ID and username with your account. When you then start a hosting support chat in Discord, our bot looks up which servers are yours and shows our support team your name, part of your email address and the server you picked. A case you open there is stored like a case from the dashboard, with a link to the Discord thread. When a support chat in Discord is closed, we keep a transcript of the thread (the messages, who wrote them and when, and links to files that were shared), and we send you a copy in a private message if Discord allows it. You can also rate the help you got; we keep that rating and any comment with the transcript. Transcripts and ratings are deleted after 12 months.

The code you use to link is valid for ten minutes and we only keep a hashed form of it. We keep the link until you remove it with the unlink button in your account settings or your account is deleted. We use it only to help you, as part of our agreement with you, and we do not share it with anyone else. What you write in Discord is also processed by Discord, under Discord's own privacy policy.

13. Contact

For privacy-related inquiries, contact us at info@astroworldmc.com. For server or account help, visit our Support page.

Delivery: most servers are handed over instantly and run within seconds of payment, the rest follow within 60 minutes during the day and within 12 hours at night.