1. Who is responsible for your data
The data controller is GMH SYSTEMS Sp. z o.o., registered office at Marcina Kasprzaka 31/119, 01-234 Warsaw, Poland (VAT ID PL5273203762). For any privacy matter, contact us at gamehost@gmhsystems.pl.
2. What personal data we collect
Account and billing data
Email address, username, a securely hashed password, and billing details (name or company name, address and VAT ID where provided).
Service operational data
Server configuration, IP allocations, subdomains, and data you store on or transmit through your server. We access server content only as needed to operate or secure the Services, or where legally required.
Technical and usage data
IP address, device and browser information, access and server logs, and analytics and cookie data (see the cookies section).
Fraud-prevention data
Signals from our anti-abuse tools (for example Cloudflare Turnstile) and from Stripe used to detect and prevent fraud and abuse.
3. Purposes and legal bases
We use personal data to:
- create and manage your account and provide the Services (performance of a contract, Art. 6(1)(b) GDPR);
- process payments, renewals, invoices and VAT (contract and legal obligation, Art. 6(1)(b) and (c));
- keep the Services secure, prevent fraud and abuse, and troubleshoot (legitimate interests, Art. 6(1)(f));
- provide support and communicate about your Service (contract or legitimate interests);
- run marketing, advertising and analytics (consent, Art. 6(1)(a), which you can withdraw at any time).
5. International transfers
Some providers (for example Google, TikTok, Hotjar and Stripe) may process data outside the EU/EEA, including in the United States. Where this happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
Anthropic, which provides the AI support assistant, processes assistant data in the United States on the basis of the Standard Contractual Clauses.
6. How long we keep your data
We keep account and Service data while your account is active. Invoicing and accounting records are kept for the period required by law (in Poland, generally five years). Data stored on your server is deleted after your Service ends, following a short retention window. We keep only what we need for the purposes above or to meet legal obligations.
7. Your rights
Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time (without affecting processing already carried out). To exercise these rights, contact gamehost@gmhsystems.pl.
9. How we protect your data
We use technical and organisational measures such as encryption in transit, access controls and monitoring to protect personal data. No system is completely secure, so we cannot guarantee absolute security; keeping your account credentials confidential is your responsibility.
10. Children’s privacy
The Services are not directed to children under 16. If you are under the age of digital consent in your country, please use the Services only with the involvement of a parent or guardian.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here and, for material changes, provide additional notice where appropriate.
12. Complaints
If you believe we have mishandled your data, please contact us first so we can help. You also have the right to lodge a complaint with a supervisory authority - in Poland, the President of the Personal Data Protection Office (UODO), or the authority in your country of residence.
13. AI support assistant
For Minecraft servers, the server panel includes an AI support assistant that answers questions about running your server and using the panel. Using it is optional.
When you use the assistant, we process the content of your questions and of the assistant's answers, together with information about the server you are asking about: the game, engine and version, your plan, the server status, the number of backups, databases and addresses, and the panel tabs and buttons visible to you. If you click “Analyse my server”, the assistant also reads extracts from your server's logs and configuration files. This access is read-only and the assistant never changes anything on your server.
Before any data is sent, we remove or mask passwords, tokens, API keys, email addresses, IP addresses and chat messages written by players. Please do not paste passwords or other sensitive data into the chat.
We use this data to answer your questions, to keep the assistant secure and to improve its quality (performance of a contract, Art. 6(1)(b) GDPR, and our legitimate interests, Art. 6(1)(f)). The answers are generated automatically and do not produce legal or similarly significant effects for you.
The answers are generated by Anthropic, PBC (Claude models), which acts as our processor and may process the data in the United States on the basis of the Standard Contractual Clauses. Anthropic does not use this data to train its models. Our support team may review conversations to resolve issues and improve the assistant.
We keep assistant conversations for up to 12 months from the last activity in a conversation and then delete them.
This document was drawn up in English. Translations into other languages are provided for convenience only - in the event of any discrepancy between a translation and the English version, the English version prevails.