Privacy Policy

This policy explains how CentrixNodes handles personal information when you visit our site, create an account, buy hosting or contact support. It applies to everything at centrixnodes.net and to the services we provide from it.

The short version: we collect what we need to sell you a server, keep it running, keep it secure and get paid. We do not sell personal information, and we do not share it for advertising.

CentrixNodes operates hosting infrastructure from Buffalo, New York. For the personal information described in this policy we act as the controller, which means we decide why and how it is processed.

You can reach us about anything in this policy at support@centrixnodes.net.

Most of what we hold is what you typed in yourself:

• Account details: name, email address, and any company name, address and phone number you supply.
• Billing details: the address on your invoices, the currency you pay in, your invoice and payment history, and the last four digits and expiry of a stored card. Full card numbers never reach our systems.
• Support content: tickets, emails and Discord messages you send us, including anything you attach or paste into them.
• Service configuration: the hostnames, SSH keys, DNS records, game settings and other details you enter to get your service working.

Some information is generated by the act of using the service:

• Connection data: IP addresses used to reach the site, the dashboard and your servers, with timestamps.
• Device and browser data: browser type, operating system, language and screen size, used to render the site properly and to spot fraud.
• Usage and performance data: page requests, panel actions, resource usage, latency measurements and error traces.
• Security logs: authentication attempts, mitigation events and abuse reports touching your service.

The live latency figures on our locations page are measured from your own browser to our nodes. The measurement happens on your device; we receive no personal information from it.

Our payment processors tell us whether a payment succeeded and give us a risk signal for fraud screening. If you sign in or contact us through Discord, we see the profile information Discord exposes. Abuse reports and legal notices from third parties may also name you.

• To create your account, provision your services and keep them running.
• To take payment, issue invoices, apply credit and handle refunds and chargebacks.
• To answer tickets, respond in Discord and provide support.
• To send service messages: renewal notices, maintenance windows, incident updates and policy changes.
• To secure the platform: detect and mitigate attacks, investigate abuse and prevent fraud.
• To understand how the site and panel are used, so we can improve them.
• To comply with our legal obligations and to establish or defend legal claims.

Marketing email is opt-in and separate from service messages. You can unsubscribe from marketing at any time; you cannot unsubscribe from notices about an active service, because you need them.

Where the UK or EU GDPR applies to you, we rely on:

• Contract: everything needed to provide the service you ordered and to bill for it.
• Legitimate interests: securing our network, preventing fraud and abuse, improving the service, and defending legal claims, balanced against your rights.
• Legal obligation: tax and accounting records, and responses to lawful requests.
• Consent: optional analytics and marketing email, which you can withdraw at any time.

We use cookies and local storage that are strictly necessary for signing you in, keeping your session, remembering your currency and your light or dark theme preference, and protecting forms against abuse.

Where we use anything beyond that, it is optional and you will be asked first. You can clear or block cookies in your browser, though the dashboard will not stay signed in without the necessary ones.

Card payments are handled by PCI-DSS compliant payment providers. Card details are collected by the provider and never stored on our servers; we keep only a token, the card type, the last four digits and the expiry so that renewals work and you can recognise the card.

The provider processes your information under its own privacy policy as an independent controller for fraud prevention and regulatory purposes.

We share personal information only where there is a reason to:

• Service providers: payment processing, billing, email delivery, ticketing, monitoring and infrastructure, each bound by contract to use it only on our instructions.
• Data centre and network partners: where a facility or transit provider needs details to investigate an incident affecting your service.
• Legal and safety: where the law requires it, or where disclosure is necessary to investigate abuse, fraud or a threat to someone's safety.
• Business transfer: if the business or part of it is ever sold, subject to the same protections and with notice to you.

We do not sell personal information, and we do not share it with advertisers or data brokers.

Our core systems are in the United States, and we operate nodes in other regions. Where information is transferred out of the UK, EEA or another region with transfer rules, we rely on an appropriate safeguard, usually standard contractual clauses, and keep the transfer to what the service requires.

• Account and billing records: for the life of the account and then as long as tax and accounting law requires, typically six to seven years.
• Support tickets: normally three years after they close, so we have the history if the same problem returns.
• Security and connection logs: normally up to twelve months, longer if they form part of an open investigation.
• Service data on your servers: deleted on the schedule described in our Terms once the service ends.

When a retention period ends, information is deleted or irreversibly anonymised.

Access to customer information is limited to staff who need it, over authenticated and logged channels. Traffic to our site and panels is encrypted in transit, credentials are hashed, and administrative access requires two-factor authentication.

No system is perfectly secure. If a breach affects your personal information and presents a real risk to you, we will notify you and the relevant regulator within the time the law allows.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you, and get a copy.
• Correct information that is wrong or incomplete.
• Delete information we no longer have a reason to keep.
• Restrict or object to certain processing, including processing based on legitimate interests.
• Receive your information in a portable format, or have it sent to another provider.
• Withdraw consent where we relied on it, without affecting what came before.
• Opt out of marketing email at any time.

Email support@centrixnodes.net and we will handle it directly. We answer within one month, and we will not treat you worse for exercising a right.

Anything you put on your own server, from player records and community databases to application data and your users' information, stays under your control. For that data you are the controller and we act as a processor, handling it only to run, back up and support the service, or where the law compels us.

That makes the privacy notice your own players or users see your responsibility, along with the lawful basis for collecting their information in the first place.

Our services are sold to adults and we do not knowingly collect personal information from children under 13, or under 16 where local law sets that threshold. If you believe a child has given us information, contact us and we will delete it.

We update this policy as the service or the law changes, and the effective date at the top always reflects the current version. Where a change materially affects you, we will tell you by email or in the dashboard before it takes effect.

Write to support@centrixnodes.net with anything about this policy, and we will answer properly rather than pointing you at a form.

If you are in the UK or EEA and you are not satisfied with our answer, you can complain to your local supervisory authority. We would appreciate the chance to put it right first.