Privacy Policy

Last updated: October 30, 2026

This policy explains what information HQ Cloud collects, why we collect it, how we protect it and what choices you have. We keep it plain on purpose.

1. Who we are

HQ Cloud (“HQ Cloud”, “we”, “us”) provides bot, website, VPS, Minecraft, database, email and dedicated server hosting. We are the data controller for the personal information described here, except for content you host with us, where you are the controller and we act as a processor.

2. Information we collect

We collect only what we need to run our services.

Type	Examples	Why
Account data	Name, email address, Discord username, password hash	Create and secure your account
Billing data	Invoices, payment references, billing country	Process payments and meet tax duties
Service data	Plans ordered, resource usage, panel actions, IP allocations	Provide, monitor and bill services
Technical data	IP address, browser, device, access logs	Security, fraud and abuse prevention
Support data	Tickets, chats, attachments	Resolve your requests

We do not store full card numbers. Payments are handled by third-party payment providers.

3. Content you host

Files, databases, emails, bots, game worlds and backups remain yours. We do not read or use them except to:

provide the service, for example running backups or restoring a database;
investigate a support request you made, with your permission where possible;
investigate abuse reports or security incidents;
comply with a valid legal request.

4. How we use information

Deliver and maintain your hosting services.
Send invoices, renewals, suspension notices and service updates.
Detect and block attacks, spam and abuse, including DDoS traffic.
Provide customer, technical and ticket support.
Improve our website, plans and infrastructure.
Meet legal and accounting obligations.

5. Legal bases

Where the law requires a legal basis, we rely on: performing our contract with you, our legitimate interest in running a secure service, your consent where you give it, and compliance with legal obligations.

6. Who we share it with

We do not sell your personal information. We share it only with:

payment processors that take your payments;
data centre and network providers that run our hardware;
email, ticketing and community tools we use to support you;
authorities, when required by law or to protect rights and safety.

Each provider may only use the data to deliver its service to us.

7. International transfers

Our infrastructure and providers may be in different countries. Where data leaves your country, we use contracts and safeguards required by applicable law.

8. Cookies and browser storage

This website does not use advertising or tracking cookies. It stores two small preferences in your browser’s local storage so they are remembered on your next visit:

Key	Purpose
hq_cur	Your chosen display currency
hq_cycle	Your chosen billing period

You can clear these at any time in your browser settings. Our website fonts are loaded from Google Fonts, which may receive your IP address.

9. How long we keep data

Data	Retention
Account data	While your account is active, then up to 12 months
Billing records	As long as tax and accounting law requires
Access and security logs	Up to 90 days, longer if an incident is investigated
Support tickets	Up to 24 months after closing
Hosted content and backups	Deleted within 30 days after termination, unless you ask for earlier deletion

10. Security

We use SSL/TLS, access controls, DDoS protection, isolated virtualisation (KVM) and regular updates. Staff access to customer systems is limited and logged. No system is perfectly secure, so please use strong passwords, keep software updated and keep your own backups.

If you believe your account has been accessed without permission, open a ticket immediately.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete, export or restrict the use of your personal data, to object to certain processing, and to withdraw consent. To use these rights, open a ticket from your account email. We may need to verify your identity first and will respond within a reasonable time, normally within 30 days.

12. Children

Our services are not meant for children under 13, or under the age of digital consent in your country. If you think a child has given us personal data, tell us and we will delete it.

13. Changes to this policy

We may update this policy. When we make material changes we will change the date at the top and, where appropriate, notify you by email or in our Discord community.

Contact

To contact us about this document, open a support ticket or message us in the HQ Cloud Discord community.