Privacy Policy

This Privacy Policy explains what personal data NextGenHost ("we," "us," or "our") collects when you use our website and hosting services (the "Service") at https://nextgenhost.cc, why we collect it, and the choices you have. It should be read together with our Terms of Service.

1. Data We Collect

Account data. When you register, we collect your username, email address, and password (stored as a salted cryptographic hash — we never store your plaintext password). If you upload an avatar image, we store that image.

Billing data. We record your wallet top-ups, server purchases/extensions, and the resulting transaction history (amounts, timestamps, and a description of each transaction) so we can maintain an accurate balance and give you a record of your spending. When you pay via PromptPay, payment card and bank details are handled directly by our payment processor, Stripe — we receive your email address and the transaction outcome, not your full payment credentials. See Section 5.

IP address logging. We log the IP address associated with login attempts and new account registrations, for account-security and abuse-prevention purposes (for example, detecting credential-stuffing attempts or abusive bulk registration).

Server activity and console commands. When you use the in-dashboard console (RCON) to send commands to your own Minecraft server, we log the command text against your account and server, for troubleshooting, abuse investigation, and support purposes. We also keep an activity log of significant lifecycle events on your servers (creation, start/stop, backups, plugin installs, and similar).

Support messages. If you contact us for support (by email or any other channel we make available), we retain that correspondence, and any information you choose to include in it, to respond to you and to keep a record of the issue.

Cookies. We use a single essential session cookie (PHPSESSID) to keep you signed in; it is required for the Service to function and is not used for advertising or cross-site tracking. We do not currently use third-party analytics or advertising cookies. If that changes, we will update this Policy first.

2. How We Use Your Data

We use the data described above to: operate and secure your account and servers; process payments and maintain accurate billing records; detect, investigate, and prevent fraud, abuse, and violations of our Acceptable Use Policy; provide customer support; communicate with you about your account, your servers (including expiry warnings), and material changes to our policies; and comply with legal and accounting obligations.

We do not sell your personal data, and we do not use it for third-party advertising.

3. Analytics

We do not currently run third-party website analytics (such as Google Analytics) on the Service. Standard web-server request logs are kept for a limited period for security and operational troubleshooting.

4. Data Retention

We retain account, billing, and transaction data for as long as your account is active, and for a reasonable period afterward as needed to meet accounting, tax, fraud-prevention, or other legal obligations — financial transaction records in particular are generally retained longer than other account data for these reasons. IP-address login/registration logs and server console/activity logs are retained for a limited operational window and are periodically purged; they are not kept indefinitely. Database backups are retained on a rolling basis (currently up to roughly a week) for disaster-recovery purposes and are then automatically deleted.

5. Third Parties We Share Data With

We share the minimum data necessary with the following categories of third party, solely to provide the Service:

• Stripe (payment processing) — receives your email address and IP address as part of processing a PromptPay payment. Stripe's own privacy policy governs its handling of your payment details.
• Modrinth, CurseForge, and Hangar (plugin/mod marketplace sources) — receive search/download requests when you browse or install content through our marketplace; we do not send them your account identity.
• Internal operations alerting — a small amount of operational data (an internal user ID and a transaction amount, never your name, email, or payment details) may be relayed to our internal team-notification channel for fraud/error monitoring. This is not customer-facing and is not shared outside our operating team.

We do not otherwise sell, rent, or share your personal data with third parties, except where required by law or to protect our legal rights.

6. Data Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS) to the Service, hashed password storage, and access controls on our production systems. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we work to keep these protections current.

7. Your Rights

Depending on your location, you may have rights to access, correct, or request deletion of your personal data, or to object to or restrict certain processing. To exercise any of these rights, contact us via our Contact page or at [email protected]; we will respond within a reasonable time. Note that some data — in particular, financial transaction records — may need to be retained even after an account-deletion request, where we have a legal or accounting obligation to keep it; where that applies, we will anonymize the remaining account data associated with it rather than delete the whole record.

8. Children

The Service is not directed at children under 13 (or the minimum age required by your local law to consent to data processing), and we do not knowingly collect personal data from children below that age. If you believe a child has provided us with personal data, contact us and we will take appropriate action.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where practical, provide notice through the dashboard or another reasonable channel.

10. Contact

Questions about this Privacy Policy, or requests relating to your personal data, can be sent via our Contact page or to [email protected].