Privacy Policy

1. Introduction

MaskHosting LLC ("MaskHosting," "we," "us," or "our") is committed to protecting your personal privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have about your data.

This policy applies to all personal data collected via maskhosting.com, my.maskhosting.com, and all MaskHosting services. By using our services, you agree to the data practices described in this policy.

MaskHosting is headquartered in a privacy-protected jurisdiction. Our offshore servers are located in the Netherlands and governed by the General Data Protection Regulation (GDPR) — one of the world's strongest privacy frameworks.

2. Information We Collect

We collect only the minimum amount of personal data necessary to provide our services. Here is what we may collect:

Account Information

When you register, we collect: name (optional for offshore plans), email address, and payment information. For anonymous offshore accounts, you may register with a pseudonym and pay via cryptocurrency.

Usage Data

We collect server logs including IP addresses, access timestamps, requested URLs, and browser/client information. These logs are retained for up to 30 days for security and debugging purposes.

Payment Data

Payment details are processed entirely by our payment processors (Stripe, PayPal, or crypto networks). We do not store full card numbers. We only receive transaction confirmation data.

Support Communications

When you contact our support team, we retain the content of your communications to resolve your issue and improve our services.

Cookies & Analytics

We use essential cookies for session management and login. We may use privacy-respecting analytics (no Google Analytics). You may disable non-essential cookies via your browser settings.

3. How We Use Your Information

We use your data strictly to provide and improve our services. Specifically:

To create and manage your hosting account
To process payments and send billing invoices
To communicate with you about your account, services, and technical issues
To detect and prevent abuse, fraud, and security threats
To comply with legal obligations under applicable law
To send service-related announcements and updates (not marketing without consent)

We do NOT use your data for advertising, profiling, or selling to third parties. Ever.

4. Data Sharing & Third Parties

We do not sell, trade, rent, or transfer your personal information to any third parties for commercial purposes. We may share data in the following limited circumstances:

Payment Processors

Stripe and PayPal process card payments on our behalf. They receive only the data necessary to process your transaction. Their privacy policies apply to data they handle.

Infrastructure Partners

Our data centres and network providers may have access to server-level data (e.g., IP addresses in network logs) strictly for operational purposes.

Legal Requirements

For accounts on our US-based servers, we may be compelled to disclose data in response to valid US legal process. For offshore (Netherlands) accounts, we only comply with valid Dutch or EU legal orders. We will notify affected users unless legally prohibited from doing so.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. You will be notified of any such change.

5. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected:

Active account data is retained for the lifetime of your account plus 30 days after closure.

Billing records and invoices are retained for 7 years for tax and accounting compliance.

Server access logs are retained for a maximum of 30 days, then permanently deleted.

Support ticket data is retained for 3 years from last interaction.

You may request deletion of your data at any time by contacting our privacy team (see Section 8). Deletion requests are processed within 30 days.

6. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it:

All data is transmitted over HTTPS with 256-bit SSL/TLS encryption
Passwords are stored using bcrypt hashing — never in plain text
Payment data is handled by PCI DSS Level 1 certified processors
Server access is restricted to authorised personnel via SSH key authentication
Regular security audits and vulnerability scans are performed
Two-factor authentication (2FA) is available for all accounts

While we implement strong security measures, no transmission over the internet is 100% secure. We encourage you to use strong, unique passwords and enable 2FA for your account.

7. Cookies & Tracking

We use the following types of cookies on our website:

Essential Cookies

Required for the website and client area to function. These include session cookies for login, CSRF tokens for security, and shopping cart state. These cannot be disabled.

Preference Cookies

Store your settings and preferences (e.g., language, timezone) to personalise your experience. You may disable these in your browser.

Analytics Cookies

We may use privacy-respecting analytics tools that do not share data with third-party advertising networks. All analytics data is anonymised.

We do NOT use tracking pixels, Facebook Pixel, Google Analytics, or any cross-site advertising trackers. You will never see MaskHosting ads follow you around the web because of our cookies.

8. Your Privacy Rights

Under the GDPR (for EU/EEA residents) and other applicable laws, you have the following rights regarding your personal data:

Right of Access

Request a copy of all personal data we hold about you.

Right to Rectification

Request correction of any inaccurate or incomplete data.

Right to Erasure

"Right to be forgotten" — request deletion of your data, subject to legal retention requirements.

Right to Restriction

Request that we limit how we process your data in certain circumstances.

Right to Portability

Receive your personal data in a structured, machine-readable format.

Right to Object

Object to certain types of processing, including direct marketing.

Right to Withdraw Consent

Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email our privacy team at support@maskhosting.com. We will respond within 30 days. You may also lodge a complaint with your national data protection authority.

9. Children's Privacy

MaskHosting services are not directed at children under 18 years of age. We do not knowingly collect personal information from children.

If you believe we have inadvertently collected data from a person under 18, please contact us immediately at support@maskhosting.com and we will delete the information promptly.

10. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top will reflect the most recent revision.

For significant changes, we will notify you by email or via a prominent notice in your client area at least 14 days before the changes take effect.

Your continued use of our services after the effective date constitutes your acceptance of the updated policy.

11. Contact & DPO

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Privacy / DPO Email: support@maskhosting.com

General Support: support@maskhosting.com

Billing: billing@maskhosting.com

We aim to respond to all privacy-related requests within 30 days.

Summary (TL;DR)