Privacy Policy

Data we collect

• Account info: name, email and a secure hash of your password.
• Usage data: server creation, start/stop, resource usage and billing events.
• Payments: taken via Shopier; we never see or store your card details.
• Optional: a profile avatar you upload.
• Security: your last login date and last login IP address; the IP address at the time you gave consent.
• Optional: if you link your Discord account, your Discord user id, username and the date you linked it. Unlinking from the panel deletes all three immediately.

How we use it

We process data to provide the service, bill you, protect security, prevent fraud and offer support. We do not sell your data to third parties for advertising.

Sharing

We share data only when necessary to run the service (e.g. the payment provider) or when legally required. Sharing with infrastructure providers is limited to technical necessity.

Retention periods

• Account data: while your account is open; deleted or anonymised within 6 months of closure.
• Billing and payment records: kept for 10 years as required by tax law (cannot be deleted).
• Consent records (terms, privacy, distance sales): 10 years after account closure, as proof of consent.
• Server world and files: kept with no time limit, since File Protection is on for every server; on the free tier, if the server is never started for 30 days the world and the server are deleted together.
• Support conversations: 3 years after closure. At the end of that period the conversation and its attachments are deleted automatically.
• Discord link: while it stays linked; deleted immediately when you unlink it or delete your account.
• Server/access logs: 12 months.

International transfers

To run the service some data is processed on providers' servers abroad: hosting and network infrastructure (Germany/EU), site delivery and security (global), email delivery, payment infrastructure (Türkiye) and — if you accepted cookies — analytics, ad measurement and ad serving. Transfers are limited to what the service requires and are covered by contractual safeguards. See the KVKK Disclosure Notice for details.

Cookies

Necessary cookies: required to keep you signed in and for security (secure session, 'remember me') and are always used. Analytics and advertising cookies: they run only if you click 'Accept' in the cookie notice — Google Analytics to improve the site, Google Ads to measure our ads' effectiveness, and Google AdSense to show ads on the public pages of the site. Third-party vendors, including Google, may use cookies to serve ads based on your prior visits to this site. Ads appear on the public pages of the site; in the control panel they may appear only on the waiting screen while a free server is starting. As long as you have paid and have balance, you see no ads anywhere. If you 'Reject', only necessary cookies remain, and you can change your choice anytime. You can also opt out of ad personalization at adssettings.google.com and optout.aboutads.info.

Ads and the free tier

We cover the machine, network and storage cost of free servers; ad revenue is what keeps that tier free. Ads are therefore shown only when you have never paid, or when you have paid but your balance has run out and you have not run a paid server for 15 days. Gift or promotional coins do not count as payment. When you start a free server you may see a full-screen promotion during the boot wait; you can close it after a short while, and closing it does not slow the boot down — the server is already being prepared in the background. Once you have paid, ads stop appearing in the panel and on the site. We do not sell your personal data to third parties for advertising; ads are personalised only if you accepted cookies.

Security

Passwords are stored as one-way hashes, traffic is encrypted with TLS and access to server nodes is restricted. Still, no method on the internet is 100% secure.

Your rights

Under Article 11 of Turkish Law No. 6698 (KVKK) you may: learn whether your data is processed, request information about it, learn the purpose of processing, know the third parties it is transferred to, request correction of incomplete or incorrect data, request erasure where the conditions are met, ask that these actions be notified to third parties, object to results produced solely by automated analysis, and claim compensation for damages you suffer. Send requests to support@arcadeservers.com; we respond within 30 days at the latest. See the KVKK Disclosure Notice for the full procedure.