Privacy Policy

Last updated: October 18, 2026

What we collect

Account data (username, email, bcrypt password hash), the game servers you add (IP, port, name, location), payment records (PayPal transaction ID, amount, payer email as provided by PayPal) and security logs (IP address of failed login attempts, kept 24 hours).

What we don't collect

We never see or store your card or bank details — payments are processed entirely by PayPal. We do not sell personal data.

Cookies

One essential session cookie keeps you logged in. No advertising or tracking cookies.

Public data

Boosted servers (name, IP:Port, location, player count) are shown publicly in the live server list. Live purchase notifications show only a masked username (e.g. "Flo***").

Retention & your rights

Payment records are kept as required by accounting law. You can request access to, correction of, or deletion of your data (GDPR) via Discord or support@xboost.info.