Privacy Policy

Last updated: March 15, 2026

1. Introduction

NoobHost, operated by Noobenheim ("we", "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our hosting services and website.

2. Information We Collect

Account Information

  • Name, email address, and password (or OAuth provider ID)
  • Billing information (processed and stored by Stripe - we do not store card numbers)
  • IP addresses used to access your account

Service Data

  • Server configurations and resource usage metrics
  • DNS records and domain configurations
  • Deployment logs and build artifacts
  • Support ticket content

Automatically Collected Data

  • Browser type, operating system, and device information
  • Pages viewed and actions taken on our website
  • Referral URLs and search terms
  • Cookies and similar tracking technologies (see our Cookie Policy)

3. How We Use Your Information

  • Provide, operate, and maintain our Services
  • Process payments and manage subscriptions
  • Send transactional emails (account confirmations, billing receipts, service alerts)
  • Respond to support requests
  • Monitor and improve service performance and security
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

4. Data Sharing

We share data only with:

  • Stripe - for payment processing
  • Infrastructure providers - to provision and operate servers on your behalf
  • Law enforcement - when required by valid legal process

All third-party providers are bound by data processing agreements.

5. Data Security

  • All data in transit is encrypted with TLS 1.2+
  • Backups are encrypted with AES-256
  • Access to infrastructure is restricted via SSH key authentication and bastion hosts
  • We conduct regular security audits and maintain firewall rules
  • Authentication is handled via Keycloak with support for two-factor authentication

6. Data Retention

  • Account data is retained for the duration of your account
  • After account deletion, personal data is removed within 30 days
  • Server backups are retained per our backup schedule (daily, weekly, monthly snapshots)
  • Billing records are retained as required by tax and accounting regulations
  • Server logs are retained for up to 90 days for security and debugging purposes

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Object to or restrict certain processing
  • Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@noobhost.com.

8. International Transfers

Our servers are located in the United States and Europe. If you access our Services from outside these regions, your data may be transferred to and processed in these locations. We ensure appropriate safeguards are in place for international transfers.

9. Children's Privacy

Our Services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on our website. Continued use of the Services after changes constitutes acceptance.

11. Contact

For privacy-related inquiries, contact us at privacy@noobhost.com or through our contact page.