YOUR ACCOUNT. YOUR INFORMATION.

Vpsfarmer privacy notice

Updated 11 November 2026.

This notice describes how Vpsfarmer handles information for the hosting website and customer portal at vpsfarmer.com. For privacy questions, account information requests, or deletion requests, contact [email protected]. The website is currently a preview; online ordering and payment collection are disabled.

Account and service information

We store the name and email address you provide, a password hash if you use a password, linked social-account identifiers, account settings, and sign-in timestamps. If you enable two-factor authentication, we store an encrypted authenticator secret and hashed recovery codes. The portal also stores information you submit or generate while using its features, such as support tickets, server assignments and settings, SSH public keys, usage estimates, and service or billing records where applicable. Do not include passwords or other secrets in support tickets.

We use this information to authenticate users, link accounts, operate server controls, provide support, maintain service records, and protect accounts and infrastructure. Signing in does not authorize a purchase.

Google, GitHub, and Discord sign-in

Social sign-in is optional. When you choose a provider, we request basic identity information and, for sign-in or account creation, your email address. For Google, this means the openid, email, and profile scopes. We use the returned Google account identifier, verified email, and basic profile information to create or authenticate your Vpsfarmer account or link Google to an existing account. We retain the account identifier, email, and account name where provided. The website does not request access to Gmail messages, Google Drive files, calendars, or contacts.

Provider access tokens are used on the server to obtain identity information during the sign-in exchange; the current implementation does not persist those tokens. We do not sell Google user data, use it for advertising, or use it to train general-purpose AI models. We do not automatically merge accounts just because their email addresses match.

Cookies and connection information

Essential cookies support sessions and protect social sign-in and account linking. Optional preference storage remembers your billing-cycle choice only if you allow it. The website currently installs no analytics or advertising trackers. See the cookie notice at cookie notice for names, durations, and controls.

Your browser sends connection information such as your IP address, request details, and browser information when accessing the website. Cloudflare handles website traffic and security. Server and infrastructure logs may contain connection information. Account and administrative audit records record actions needed to investigate security and support issues.

Who processes information

Website requests pass through Cloudflare. The selected identity provider processes its own sign-in and consent flow under its own privacy policy. Authorized operators and infrastructure or support providers may access information as needed to operate, maintain, or secure the service. Provider processing may take place outside your country. This notice will be updated when the service's data practices change, including before new payment or tracking integrations are introduced.

Storage, retention, and security

Portal account and service records are stored in the portal database and may be included in administrative backups. We use HTTPS, protected server credentials, password hashing, and access controls. These measures reduce risk; no service can guarantee absolute security.

We keep information while it is needed to operate accounts and services, provide support, investigate security issues, or meet applicable recordkeeping requirements. This preview does not have an automatic account-data deletion schedule. Backups and records retained for security or recordkeeping may outlast an active account. Contact us to request access, correction, or deletion; we may need to verify account ownership and explain which records can be removed or must be retained.

Your choices

You can manage linked providers in Account & security. Removing the last social sign-in method requires a working local password so you do not lose access. You can also revoke Vpsfarmer's authorization through your Google Account connections, GitHub authorized applications, or Discord authorized apps. Revoking provider access does not automatically delete your Vpsfarmer account or service records; contact us to request deletion. Cookie settings let you change optional preference storage.

Changes and contact

We publish changes on this page with a new update date. Questions and privacy requests can be sent to [email protected].