Privacy Policy

Draft. This page has not been reviewed by a lawyer yet and our company details are not final.

What we collect

• Your email address, and a password that is stored only in hashed form.
• Your orders and invoices: what you bought, when, the amount, the coin and the transaction reference.
• Your account balance and every change to it: top ups, payments from it and credit.
• Which IP address was assigned to which of your services, and when.
• The public SSH keys you add to your account, so they can be put on your servers.
• The messages you send us, such as support requests.
• Web server logs of this website and the client area (IP address, time and page). They are deleted after 14 days.
• The time of your last 20 logins to the client area, with the last part of the IP address removed, so you can spot a login that was not you. You see the same list on your account page.
• To slow down password guessing and spam, a scrambled key made from your IP address, kept for at most an hour. It cannot be turned back into the address, and the secret behind it is replaced every day.

What we do not collect

• Your name, postal address or phone number.
• Identity documents. There is no KYC on any plan.
• Card or bank details. We only accept cryptocurrency.
• The content or the traffic of your services. We do not inspect or record what you do on your server.

This website uses no analytics, no advertising and no scripts from other companies. It sets no cookies. The client area sets one cookie, which keeps you logged in.

You are welcome to reach us through Tor or a VPN, and to sign up with an anonymous mailbox.

Domain names

Domain names are the one exception. Registries require contact details for the owner of every domain, and we pass on what you enter when you register one. Free WHOIS privacy keeps those details out of the public record.

How we use it

We use this information to provide and bill your services, to keep our network secure and to meet our legal obligations. We do not use it for advertising and we do not sell it.

Who we share it with

• The data centers that carry our traffic. They do not receive your account details.
• Cloudflare, who sit in front of this website and the client area to absorb attacks. They see your IP address, the pages you ask for and whatever you send through a form, including when you sign in. Your services themselves do not pass through them.
• Domain registries, for the domains you register through us.
• Authorities, only when we receive an order that is valid under the law that applies to us. We check every request, and we can only hand over what is listed on this page.

How long we keep it

• Account details: for as long as the account is open. Ask us and we close it.
• Invoices: for as long as accounting law requires.
• IP assignment records: for 12 months after a service ends.
• Data on your services: until the service is cancelled or deleted for missed payment, as described in the Terms of Service.

Your rights

You can ask what we hold about your account, have it corrected, or have the account deleted. Write to [email protected] from the email address of the account. Where data protection law applies to you, you may also complain to your data protection authority.

Who is responsible

Nyra Host is responsible for the data described here. Changes to this policy are published on this page with a new date.