We use first-party analytics to see which parts of the site work. No ads, no data sold. How we handle data
20% off your first month FIRST20 See the terms
loothost
Start

Legal

Policies for using loothost

The plain-language terms for using loothost: what you get, how billing and cancellation work, and how we handle your data.

Privacy Policy

Last updated 2026-09-11

This Privacy Policy explains how Davos Dev LLC (“loothost”, “we”, “us”) collects, uses, and shares information in connection with the loothost managed Minecraft hosting service (the “Service”).

1. Information we collect

  • Account information. The email address you use to create an account, and basic profile details you choose to provide.
  • Billing information. Payments are processed by Stripe. We do not store full card numbers; Stripe handles payment data under its own privacy policy. We retain billing metadata such as your plan, subscription status, and invoices.
  • Server configuration and world data. The configuration, settings, and world data of the servers you run are stored on our servers and in our backups.
  • Connection and network data. IP addresses and connection metadata associated with your use of the Service and with connections to your servers, used to operate the Service and to detect and prevent abuse.
  • Diagnostics and error telemetry. We use Sentry to collect error telemetry to keep the Service reliable.
  • Website analytics. We use PostHog to understand how the website and the control panel are used in your browser: pages viewed and features used. These events identify you only by your internal account number, never by name or email address. If you decline analytics cookies we do not set them, and nothing is stored on your device for analytics. A declined visit may still be counted using a temporary identifier PostHog derives on its own servers and discards each day; that identifier cannot be tied back to you or to your account.
  • Service records. Separately from the choice above, and whether or not you accept analytics cookies, we record the events that make the Service work and that we must be able to account for: a checkout started, a pre-order queued, fulfilled or expired, a server going live, a plan slot reclaimed. These are records of our contract with you, not advertising. They are recorded against your internal account number, and they are sent to PostHog in the United States and retained there. Declining analytics cookies does not stop them, because they are not collected by a cookie and we cannot operate or account for the Service without them.

2. How we use information

We use information to provide, maintain, secure, and improve the Service; to process payments and manage subscriptions; to communicate with you about your account and the Service; to detect, prevent, and respond to abuse, security incidents, and violations of our Acceptable Use Policy; and to comply with legal obligations.

3. Legal basis for processing

If you are in the European Economic Area or the United Kingdom, we process your personal information on one or more of the following legal bases:

  • Performance of a contract. To create and operate your account, build and run your servers, and process payments under our Terms of Service.
  • Legitimate interests. To secure the Service, detect and prevent abuse, keep the Service reliable, and improve it, where these interests are not overridden by your rights.
  • Legal obligation. To comply with applicable law, including tax and accounting requirements and lawful requests from authorities.
  • Consent. Where we ask for it, which is specifically the analytics cookies described in section 6. You may withdraw that consent at any time, without affecting processing that already took place. Withdrawing it stops the cookie-based analytics in your browser; it does not stop the service records described in section 1, which rest on the two bases above rather than on your consent.

4. Sub-processors and service providers

We share information with the following providers, who process data on our behalf to operate the Service:

  • Stripe. Payment processing.
  • Cloud hosting and storage providers. Server infrastructure (located in the European Union) and encrypted backups.
  • Cloudflare. DNS, network, and edge services.
  • Resend. Transactional email.
  • Sentry. Error telemetry.
  • PostHog. Product and website analytics, processed in the United States. We send it your internal account number, your team's URL identifier, the date you signed up, and details of the service records in section 1 such as the plan, region and server involved. We do not send it your name or your email address.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5. Your rights (GDPR / CCPA)

Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you, and to object to or restrict certain processing. You can download a copy of your personal data at any time from your profile page. To make any other request, including deletion, contact us at [email protected]; export and deletion requests are honored within thirty (30) days. We will respond as required by applicable law. You may also have the right to lodge a complaint with your local data-protection authority. (Self-service account deletion is planned; until then, deletion requests are handled manually.)

6. Cookies

We use cookies and similar technologies that are necessary to operate the website, for example, to keep you signed in, to remember your theme preference, and to remember your answer to the analytics question below.

We also use first-party analytics cookies, set by PostHog, to recognise a returning visitor across pages and days. We ask before setting them. Until you answer, none are set and no analytics data leaves your browser. If you decline, none are set at all and we fall back to a daily-rotating identifier that PostHog computes on its own servers and deletes, which means a declining visitor cannot be recognised from one day to the next. You can change your answer at any time by clearing this site's cookies, and we will ask again.

We do not use advertising cookies, and we do not allow third parties to set cookies through our site for their own purposes.

7. Data retention

We retain personal information for as long as your account is active and as needed to provide the Service. Specific categories are retained as follows:

  • Account information. For as long as your account is active; deleted on account closure, subject to the exceptions below.
  • Billing records. Invoices and transaction records are retained as required for tax, accounting, and legal purposes, typically up to seven (7) years.
  • Server world data and backups. After your subscription is cancelled or lapses, your world is preserved for a 30-day grace period, then saved to the Vault. A saved version is retained while an active plan or a Vault Keeper subscription funds it; an unfunded saved version is kept for a further 30 days and then permanently deleted. Backups are deleted when their server is deleted. See the grace period and Vault retention described in our Terms of Service.
  • Connection and network logs. Retained for a limited period for security and abuse-prevention purposes, typically up to ninety (90) days.
  • Error telemetry (Sentry). Retained according to our configured retention in Sentry, typically up to ninety (90) days.

We may retain information for longer where required to comply with legal obligations, resolve disputes, or enforce our agreements.

8. Security

We use reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

In the event of a data breach affecting your personal information, we will notify affected users and the relevant supervisory authorities without undue delay and within the timeframes required by applicable law.

9. International data transfers

We operate from, and use service providers in, multiple countries. In particular, server and world data is hosted on infrastructure located in the European Union (Germany), while other providers, such as Stripe, Cloudflare, Resend, Sentry, and PostHog, may process data in the United States or other countries. As a result, your information may be transferred to, and processed in, a country other than the one you live in, where data-protection laws may differ from those in your jurisdiction.

Where these transfers are subject to data-protection law, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or another lawful transfer mechanism, to protect your information.

10. Children

The Service is not directed to children under the age at which, under applicable law, a person can consent to the processing of their personal data, and we do not knowingly collect such data. You must be at least 13 years old to use the Service. If you are between 13 and the age of majority where you live, you may use the Service only with the involvement of a parent or guardian. If we learn that we have collected personal data from a child under 13, we will delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time and will communicate material changes through the Service or by email.

12. Contact

Questions about this Policy or your information may be sent to [email protected] (Davos Dev LLC).