Privacy policy
Effective 2026-10-01. Short, because we hold very little.
What we collect, and why
| Data | Why | Kept |
|---|---|---|
| Your email, and a display name if you give one | Sign-in links, notices about your server, billing receipts | Until you delete your account |
| Passkey public keys, hashed recovery codes, session records (IP address and browser string) | Signing you in and spotting misuse | Sessions 30 days; keys until you remove them |
| Stripe customer and subscription identifiers, billing country | Billing, tax and sanctions screening. Card numbers never reach us; Stripe holds them. | 7 years, for tax records |
| Your server's name, size, region, add-ons, admin username, state, IP address | Building and running it | Until the server is deleted |
| Health reports from your server every minute: service status, user count, disk, load, certificate dates, connection-failure counts and sample log lines | Knowing when it is broken before you do | Latest report only, plus 90 days of events |
| Encrypted nightly backups of your server | Rebuilding it after a failure, and your export | 7 or 30 days depending on plan; purged 30 days after deletion |
What we do not collect
Your users' names, positions, chat, markers, maps or video. That traffic goes to your server, not to us, and we do not read it. Our control plane never sits between a device and your server. The only way we touch your server is through the automated agent that runs it, and it reports health, not content.
Who else sees it
Cloudflare (our website, API and backups), Vultr (the virtual machine your server runs on), Stripe (payments and tax), Resend (email delivery). Each sees only what it needs for its job. We do not sell data and we do not advertise.
Cookies
One cookie, the sign-in session. No analytics, no trackers.
Security
Passkeys instead of passwords. Every server is its own machine with its own certificates. Connections are encrypted. Backups are encrypted before they leave your server. We page ourselves when a server stops checking in.
Your choices
Export your server any time from its page. Delete it any time. To delete your account, email us from the account's address; we delete it within 30 days and keep only the billing records tax law makes us keep. You can ask what we hold about you and we will send it.
Children
The service is for adults and organizations. We do not knowingly keep data on anyone under 18.
Changes and contact
If this policy changes materially we email you first. Intel Strategies LLC, trading as Gridbase, 616 Saddle Road, White Settlement, TX 76108, [email protected].
atak.pro