Privacy Policy

Last updated: October 7, 2026

This Privacy Policy explains how XGS Hosting, a business based in Maine, United States (“XGS,” “we,” “us,” or “our”), handles information when you visit our website or use our services. Our customer accounts and hosting services are for people 18 years old and over.

1. Information we handle

Depending on how you interact with us, we may handle:

• Account and contact information, such as your name, email address, and account identifiers.
• Billing and transaction information, including invoices, purchase history, and payment status. PayPal and Stripe process payment credentials; XGS receives transaction and payment-status details.
• Support communications and information you provide in support tickets.
• Hosting information needed to provide and secure services, including server configuration and customer server content.
• Technical and security logs, including IP addresses, timestamps, and access or security events.
• Website usage information collected through XGS’s custom internal analytics tools, which may include IP addresses or account identifiers.

2. How we use information

We use information to create and manage accounts, provide hosting and support, process orders and account credits, communicate about services, maintain security, investigate abuse, prevent fraud, enforce our Terms, and meet legal, tax, accounting, and recordkeeping obligations. Our internal analytics tools help us understand and operate our website and services.

3. Cookies

Our website and services use essential session and security cookies. We do not use analytics cookies. Our custom internal analytics tools may collect IP addresses or account identifiers separately from cookies. If you block essential cookies in your browser, some account, security, or service functions may not work correctly.

4. Service providers and disclosures

We use Paymeter for billing; PayPal and Stripe for payment processing; Pterodactyl for the game control panel; and OVH, RackNerd, and InfraServers for hosting infrastructure. XGS self-hosts its support-ticket, analytics, and email systems. These providers handle information as needed to provide their respective services. XGS currently understands that customer information handled through these services is processed and stored in the United States.

We may disclose information when required by law or valid legal process, or when reasonably necessary to protect XGS, our customers, or others; investigate abuse or security issues; or enforce our Terms.

5. Retention

We keep information only as long as reasonably needed for the purposes described in this Policy, unless a longer period is required for a legal, accounting, security, or dispute-related purpose.

• Server files and backups: deleted within 30 days after the service ends on its confirmed cancellation effective date, including for banned accounts.
• Ordinary account and support-ticket records: retained for 12 months after account closure, then deleted or anonymized unless needed for a legal, accounting, security, or dispute-related purpose.
• Access/security logs and identifiable analytics data: information such as IP addresses, timestamps, access or security events, and account identifiers is retained for 90 days, then deleted or de-identified, unless specific information is needed longer for a documented incident, dispute, or legal obligation.
• Billing records: retained only as needed for accounting, tax, payment, and dispute purposes.

For banned accounts, XGS may retain information relevant to the ban case by case to investigate or prevent abuse, resolve a dispute, or comply with law. We limit retained information to what is reasonably needed, restrict access, review it periodically, and delete it when it is no longer needed, unless law requires otherwise. This does not extend the 30-day deletion period for server files and backups.

6. Security

We use reasonable safeguards intended to protect information. No method of storage or transmission is completely secure. If a security incident triggers a legal notice requirement, we will provide notices as required by applicable law.

7. Your privacy requests

You may submit a privacy request through billing support. Depending on applicable law, you may ask us to access, correct, or delete personal information. We may need to verify your identity and may retain information we are legally required or permitted to keep.

8. Changes to this Policy

We will post updated versions of this Policy on this page and give at least 30 days’ notice before material changes take effect. The “Last updated” date shows when this Policy was most recently revised.

9. Contact

For questions about this Policy or to make a privacy request, contact XGS Hosting through billing support.