This Privacy Policy describes how LoafHosts, LLC ("LoafHosts", "we", "our") collects, uses, and shares information about you when you use our services.
1. Definitions
- Account — a unique account created for you to access our Service.
- Business (CCPA) — the legal entity that collects and processes California residents' personal information.
- Company — LoafHosts, LLC.
- Consumer (CCPA) — a natural person who is a California resident, including those temporarily outside the state.
- Cookies — small files placed on your device to track browsing history and other data.
- Country — Ohio, United States.
- Data Controller (GDPR) — the Company, which determines the purposes and means of processing personal data.
- Device — any device used to access the Service.
- Do Not Track (DNT) — a mechanism letting users signal a preference about tracking.
- Personal Data — any information relating to an identified or identifiable individual.
- Service — the website and hosting services provided by LoafHosts.
- Usage Data — data collected automatically when using the Service.
2. Information we collect
We collect information you provide directly, such as when you create an account, purchase services, or contact support:
- Name and contact information (email, phone).
- Billing and payment information.
- Account credentials and authentication data.
- Support communications.
- Server configuration and usage statistics.
- Technical information about your servers.
2a. Automatically collected information
- IP address and device identifiers.
- Browser type and version.
- Operating system information.
- Pages visited and time spent on the website.
- Referral sources and search terms.
- Server logs and performance metrics.
3. How we use your information
- To provide and maintain our hosting services.
- To process payments and manage billing.
- To provide customer support.
- To send service-related communications and updates.
- To monitor and improve our services.
- To detect and prevent fraud and security threats.
- To comply with legal obligations and enforce our terms.
- To send marketing communications (only with your consent).
4. Sharing and disclosure
We do not sell or rent personal information. We share information only in these circumstances:
- With your explicit consent.
- With service providers that help us operate (payment processors, support tooling).
- To comply with legal obligations, court orders, or valid government requests.
- To protect our rights, property, and safety, or those of our users.
- In connection with a business transfer, merger, or acquisition.
- To prevent fraud or investigate suspected illegal activity.
4a. Service providers
- Payment processors (PayPal, Stripe).
- Customer support platforms.
- Analytics and monitoring services.
- Email delivery services.
- Infrastructure and hosting providers.
5. Data security
We use technical and organisational measures to protect personal information, including:
- Encryption of data in transit and at rest.
- Regular security assessments and updates.
- Access controls and authentication.
- Employee training on data protection.
- Incident response procedures.
No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
6. Data retention
- Account information: retained while your account is active and for 2 years after closure.
- Billing records: retained for 7 years for tax and accounting purposes.
- Support communications: retained for 3 years.
- Server logs: retained for 90 days unless required for security investigations.
- Marketing data: retained until you opt out, or 3 years of inactivity.
7. Your rights
- Access to your personal information and how it is processed.
- Correction of inaccurate or incomplete data.
- Deletion of your personal information (subject to legal retention requirements).
- Restriction of processing in certain circumstances.
- Data portability — to transfer your data to another service.
- Objection to processing for marketing purposes.
- Withdrawal of consent where processing is based on consent.
7a. California (CCPA)
- Right to know what personal information is collected and how it is used.
- Right to delete personal information (with statutory exceptions).
- Right to opt out of the sale of personal information.
- Right to non-discrimination for exercising privacy rights.
7b. European Economic Area (GDPR)
- Right of access to your personal data.
- Right to rectification of inaccurate data.
- Right to erasure ("right to be forgotten").
- Right to restrict processing.
- Right to data portability.
- Right to object to processing.
8. Cookies and tracking
- Essential cookies — required for basic site function.
- Analytics cookies — help us understand how visitors use the site.
- Functional cookies — remember your preferences.
- Marketing cookies — used for relevant advertising.
You can control cookies via your browser. Disabling certain cookies may limit site functionality.
9. Third-party services and links
Our services may link to third-party sites and integrate with third-party tools. We are not responsible for their privacy practices. Review their policies before sharing personal information.
10. Children's privacy
Our services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have, we will take steps to delete it promptly.
11. International data transfers
Your information may be transferred to and processed in countries other than your own, including the United States. We use appropriate safeguards including:
- Standard contractual clauses approved by regulators.
- Adequacy decisions where applicable.
- Certification schemes and codes of conduct.
12. Data breach notification
If a breach poses a risk to your rights and freedoms, we will notify you and the relevant authorities as required by applicable law — typically within 72 hours of becoming aware of the breach.
13. Business transfers
If LoafHosts is involved in a merger, acquisition, or sale of assets, your personal information may be transferred. We will provide notice before your data becomes subject to a different privacy policy.
14. Changes to this policy
We may update this policy to reflect changes in practice or law. We will post the new policy on the site and update the "last updated" date. For significant changes we may also send an email notification.
15. Contact
- Privacy: privacy@loafhosts.com
- Support: support@loafhosts.com
- Discord: discord.gg/loafhosts
- Data Protection Officer: dpo@loafhosts.com