Privacy Policy

Last updated: 2026-11-09

Status: Draft pending external legal review. This document describes our intent and current practice, but the binding policy will be the version signed by HidenEnterprises counsel before the public alpha launch.

This Policy describes how HidenEnterprises ("we", "us") processes personal data on the HidenCloud FREE service. We are the data controller.

1. What we collect

Account data (always)

• Your Discord account ID, which is also your account ID here
• Display name, taken from your Discord profile
• Avatar URL, taken from your Discord profile
• IP address at signup and at every login
• User-agent at signup and at every login
• A device fingerprint hash, computed in your browser from coarse device characteristics — timezone, screen size and colour depth, languages, CPU count, device memory and platform — and stored in a first-party fp_hash cookie so we can recognise the device on a later visit. We do not use canvas, audio, WebGL or font fingerprinting. It is used only to detect ban evasion and multiple accounts on a free tier, never for advertising or for tracking you on other sites.
• A hash of your SFTP password, only if you set one in your account settings (never the plaintext)
• If you use two-factor authentication in the panel: the authenticator secret and the recovery codes, stored encrypted
• If you allow browser notifications: the address your browser gives us for its push service, the keys needed to message that browser, and the browser's user-agent
• Selected language preference
• If you tick the newsletter box when accepting these policies, or turn it on later in your account settings: the date you agreed to receive the HidenEnterprises group newsletter. No address of any kind is stored with it. Turning it off in your account settings removes the date.

From Discord

Discord is the only way to sign in to the panel, and there are no other sign-in providers. The only password you can set is the optional SFTP password described above, which gives access to your server's files, not to the panel. When you sign in, Discord tells us:

• Your account ID, display name and avatar URL, which we store.
• Whether your account is verified and whether it has Discord's own two-factor authentication turned on. We store the date we confirmed it as verified when you signed up, and the two-factor reading as of your last sign-in.
• Your email address, which we read once and discard. We ask for it only because Discord reports whether an account is verified together with it. When you open an account, we also check whether its domain belongs to a temporary mail service; if it does, the account is not opened. The address is not stored, nor is its domain, and the panel has nowhere to store them.
• The language set on your Discord account. We read it at sign-in to pick Spanish or English for an account that has no language yet, and keep only that choice; the Discord setting itself is not stored. A language you choose in the panel is never overridden by it.
• The list of Discord servers you belong to. We use it during sign-in to check that you are in the HidenCloud Discord server while sign-ups are limited to its members. We do not store the list.

Operational data

• Server names, configurations, and resource usage metrics
• Backup metadata (size, creation time)
• Activity log of actions taken on your server
• Authentication events (Discord sign-ins, two-factor challenges, confirmations of sensitive actions, acceptance of the Acceptable Use Policy, data export and account deletion requests)
• Support tickets: subject, category, messages and the server concerned
• While our staff attend a technical ticket about a server, they can read the live console of that server. What they read is not stored; we record that a look took place, by whom and at which ticket
• If you report a bug from the panel: how much it affects you and, only for the items you leave ticked before sending, a screenshot or a short video you record, the context of your browser (the page you are on, the full user-agent string your browser sends, which names the browser and the operating system, the language, the window size and the theme) and the last actions in that tab (pages opened, buttons pressed, errors and failed requests, without query strings). We also copy to the report your last 20 actions from your server activity log of the previous 30 minutes, without IP addresses and without the text of console commands
• If Cloudy, the AI assistant, is switched on and you use it: your messages and its replies for each server, and, if you use crash assist, at most the last 12,000 characters of that server's console output, after automated removal of obvious secrets such as passwords and tokens
• If a server is flagged for abuse: what the node observed at that moment (for example process arguments and network peers, redacted when captured, and file paths and digests)
• If you are banned: a keyed hash of your Discord ID, plus the IP address, device fingerprint hash, network (ASN), reason and evidence recorded with the ban, and the text of any appeal you file against it

Inferred data

• Approximate geographic region (country and ASN), derived from your IP via MaxMind GeoLite2. We do not store precise location.
• If you are shown advertising: the advertising script sets its own cookies and identifiers in your browser, and we keep two daily totals about ad blockers (how many browsers blocked the ads, how many closed our notice about it) with nothing that says whose browser it was. Who the advertising operator is and what it collects is in §5.

2. What we never collect

• Payment instruments. There is no paid tier.
• Government identification documents.
• Biometric data.
• Browsing activity outside the HidenCloud Free panel.
• Tracking cookies of our own. The only third-party cookies on this site are those of the advertising operator named in §5, which are set only after you have answered its consent request where the law requires one, and never for accounts that have turned advertising off (see §5).

3. Why we process it

Purpose	Lawful basis (GDPR)
Operating your account and server	Contract (Art. 6(1)(b))
Anti-abuse, fraud prevention	Legitimate interest (Art. 6(1)(f))
Legal compliance (DMCA, court orders)	Legal obligation (Art. 6(1)(c))
Browser push notifications you allow in your browser	Consent (Art. 6(1)(a))
The HidenEnterprises group newsletter, if you opt in	Consent (Art. 6(1)(a)), withdrawable at any time in your account settings
Aggregate analytics on platform health	Legitimate interest (Art. 6(1)(f))
Advertising, which pays for the free tier	Consent (Art. 6(1)(a)) for the advertising cookies and identifiers, collected by the operator's consent manager and withdrawable at any time from the "Privacy settings" link in the footer; legitimate interest (Art. 6(1)(f)) for showing non-personalised advertising where you have not consented, and for the daily ad-blocker totals, which identify nobody

4. How long we keep it

Data	Retention
Active account data	Until you delete the account
Authentication events	90 days
Device fingerprints	2 years after the device was last seen
Server activity log	90 days
Sign-in and server activity records of a deleted account	Kept with the IP address, browser details and anything you typed removed, and deleted with every other record of their kind, 90 days after each was written
Security log (sign-in attempts, refused requests, bans, appeals and abuse decisions, with account ID and IP address)	180 days. These files are not edited when you delete your account; each day's file is deleted whole when it reaches this age
Audit log (actions on accounts, servers, databases and settings, by our staff or by the platform itself, with account ID and IP address)	2 years. These files are not edited when you delete your account; each day's file is deleted whole when it reaches this age
Application logs (errors, slow requests, API calls, traffic with our nodes, webhooks and background jobs), which can include your account ID and IP address	Up to 90 days, depending on the log. Each day's file is deleted whole when it reaches its age
Abuse evidence (what the node observed)	180 days
Ban records (keyed hash of your Discord ID, for anti-abuse)	Indefinite, tied to legitimate interest in preventing repeat abuse (Art. 6(1)(f)). Deleting your account removes the IP address, device fingerprint hash and evidence from the record; the keyed hash, the text of any appeal and the rest of the ban stay
Backups and snapshots of a server	Deleted from the node when the server is deleted. A server suspended because it expired or for abuse is deleted, with its backups and snapshots, when its 48-hour grace period ends. If the node cannot be reached, the deletion is retried and the server is not deleted until they are. If the node no longer recognises the server, what it still holds is recorded so that our team can remove it.
Final backup kept by the Expiry Archive perk	30 days from the server's termination, then deleted from the node. At most 2 are kept per account; a third replaces the oldest immediately, not at its own 30-day mark. Deleted immediately (not at the 30-day mark) if you delete your account or are banned.
Bug report data (browser context, actions in the tab, the copy of your server activity, the screenshot and the video, and, on a ticket about a server, a copy of that server's configuration, its last crash log and its last actions)	90 days after the ticket is resolved, or 180 days after it was opened if it is never resolved, whichever comes first. Reopening the ticket restarts the count. The ticket, its messages, the impact you reported and any other file attached to the messages are kept with the ticket

5. Who we share it with

• Cloud infrastructure providers processing data on our behalf: Hetzner (compute and storage in Germany, and the DNS records of the subdomains and reverse proxies you create) and Cloudflare (DNS, edge protection and the Turnstile check on the sign-in page and when you create or renew a server or invite someone to it or open a support ticket, which receives your IP address and the result of the browser challenge). Backups of your server are kept on the same machine that runs it and are not copied to any other provider.
• Sign-in and notifications: Discord Inc. It receives your sign-in. It also receives the direct messages the panel sends you, with the text of the notification. Nothing of your support tickets goes through Discord. Alerts for our staff about abuse and platform security are posted to staff channels there; they name a server by its short ID and a person by a public ID we generate. The alert for an appeal against a sanction on a server also gives the owner's display name.
• Staff alerts about support: Microsoft Corporation (Teams). When you open a ticket, our team is told in a Teams channel that a ticket is waiting, with its number, its category, the impact you reported, the short ID of the server and the public ID we generate for you. Not the subject, the messages, the files or your display name.
• AI assistant: Anthropic PBC, only when Cloudy is switched on and you use it. It receives your messages, the earlier messages of that conversation, the name of your server and of its template, and the console excerpt if you use crash assist.
• Source code and CI: GitHub Inc. hosts our source code and runs our continuous integration. The panel does not send it account data.
• Browser notifications: if you allow them, the text of each notification goes through the push service your browser uses, which is run by the browser vendor. The panel only sends to a fixed list of those services.
• Anti-abuse: MaxMind GeoLite2 databases for country and network lookups. We download them and query them on our own servers; your IP address is not sent to MaxMind.
• Anti-abuse, only if configured: proxycheck.io. When an operator has set a key and at least one of the Tor, VPN or hosting-network checks is on, and our own checks found nothing, the IP address of someone signing up, opening the create-server page or creating a server is sent to proxycheck.io to ask whether it belongs to a VPN, proxy, Tor exit or hosting network. Answers are kept for 7 days per address.
• Advertising: NitroPay, a service of Overwolf Ltd. The free tier is paid for by the advertising shown in the panel. No ads are shown on the server console, the file manager, the legal pages or our staff area, and its script is not loaded when you open one of those pages directly; once a page with ads has loaded it, it stays loaded in that browser tab, without showing ads, if you then move to one of them, until the tab is reloaded. It never loads for an account that has turned advertising off with the Ad-free perk or the Onyx membership and, where the law requires consent, only after you have answered its consent request. It receives what any advertising script sees in your browser: your IP address, your browser and device details, the address of the page and the identifiers it sets in its own cookies. We send it nothing about your account. How it uses that data, and how to object, is in its own policy: https://nitropay.com/privacy. Its consent manager and its "Do Not Sell or Share My Personal Information" link are in the footer of every page that carries ads.
• Law enforcement in response to a valid legal request.

We never sell your data. We share nothing from your account for advertising purposes; the advertising operator named above sees only what its own script collects in your browser, and you can refuse that through its consent manager. Under the California Consumer Privacy Act as amended by the CPRA, letting an advertising operator set cookies to show you personalised ads can count as "sharing" personal information; the "Do Not Sell or Share My Personal Information" link in the footer is how you opt out of it, and we honour the Global Privacy Control signal of your browser as that same opt-out.

6. International transfers

Primary data processing happens in Germany (Hetzner Falkenstein). Backups of your server stay on the machine that runs it and are not copied to any other provider. Edge protection uses a provider that may transfer data to the United States under Standard Contractual Clauses. Discord, Anthropic and GitHub are based in the United States.

7. Your rights

If you reside in the EU, UK, or California, you have the right to:

• Access the data we hold about you.
• Correct inaccurate data.
• Request erasure ("right to be forgotten").
• Export your data in a machine-readable format.
• Object to processing based on legitimate interest.
• Withdraw consent at any time for any consent-based processing.

You can exercise most of these rights directly from /account/settings. For anything not covered there, email [email protected]. To withdraw your consent to advertising cookies, use the "Privacy settings" link in the footer; to turn advertising off entirely, the Ad-free perk and the Onyx membership on the perks page do that for your account.

We will respond to lawful requests within 30 days.

8. Children

We do not knowingly process the data of children under 13. Accounts found to be associated with children under 13 are deleted immediately upon notice. See our Terms of Service for the minimum age requirement.

9. Security

We use TLS in transit and follow a layered defense posture documented in our internal security policies. Backups and snapshots of your server are stored unencrypted on the disk of the node that runs it, in a directory only the node's administrative account can read. We will notify affected users within 72 hours of confirming a breach that creates risk to your data, in line with GDPR Article 33.

10. Contact

• Data controller: HidenEnterprises
• Data Protection Officer: [email protected]
• General privacy questions: [email protected]
• EU representative: contact via [email protected] for details

11. Changes

Material changes to this Policy will be announced in the panel at least 14 days before they take effect.