Privacy Policy
1. Introduction
This Privacy Policy explains how ElytraNode ("ElytraNode," "we," "us," or "our"; elytranode.com) collects, uses, stores, and protects personal information when you access our websites, platforms, billing systems, or services ("Services"). By using our Services, you acknowledge that you have read and understood this Policy. ElytraNode acts as the data controller only for personal data belonging to our direct customers. Customers are responsible for ensuring compliance when they collect or process personal information belonging to their own players or users; ElytraNode does not act as a data controller for customer-handled data.
We may update this Policy from time to time. Any changes will be posted on our website, and continued use of our Services constitutes acceptance of the updated Policy.
2. Information we collect
We collect information directly from you when you create an account, place an order, communicate with support, submit forms, join our affiliate program, or interact with our platforms. This may include your name, email address, billing address, telephone number, IP address, and any information voluntarily provided in tickets, chats, or forms.
We also automatically collect technical information, including IP addresses, browser type, device information, interaction logs, security logs, timestamps, page activity, and similar diagnostic data used to maintain the security and performance of our Services.
We may receive information from third-party services that assist with fraud prevention, payment processing, analytics, and advertising performance measurement.
ElytraNode does not knowingly collect personal information from children under 13 and does not target its Services to children.
3. How we use personal data and our lawful basis
We process personal data only when we have a lawful basis to do so under the GDPR, UK GDPR and other applicable laws. This includes performing a contract (for example, account creation, billing, service delivery), complying with legal obligations, protecting our legitimate interests (such as fraud prevention, network security, and service improvements), or where you have given explicit consent (such as receiving marketing emails where required).
We use your information to operate and provide our Services, manage your account, verify identity, prevent fraud or abuse, communicate with you about service updates or issues, fulfil orders, respond to support requests, and maintain platform functionality and security. We may send marketing communications when permitted by law; you may opt out at any time.
We may process anonymised or aggregated data for analytics, service optimisation, and statistical reporting without identifying you personally.
4. Sharing and disclosure of information
ElytraNode works with a number of trusted third-party service providers who assist us in operating our platform, preventing fraud, processing payments, analysing usage, providing customer support, and maintaining security and performance. These providers process personal data only as necessary to perform services on our behalf and are contractually required to handle all information securely and in compliance with applicable data-protection laws.
We share limited information with the following categories of providers:
- Fraud prevention: FraudRecord, used to detect and prevent fraudulent orders and abusive activity.
- Analytics, advertising, and service improvement: Google Analytics, used to understand service usage, performance, and user behaviour so we can improve our platform.
- AI-assisted support: where an AI provider is used to enhance support interactions provided through our control panel, the content shared is limited to what is necessary to provide responses. We do not use your personal data to train third-party AI models.
- Infrastructure and security: TCPShield, who provide the DDoS-protection layer in front of your server, and Cloudflare, used for CDN and traffic-optimisation services. Namecheap is used for domain registration. These providers process connection metadata (such as IP address, traffic volume, and request headers) as necessary to deliver and secure the service.
- Customer communication: Chatwoot, used for support chat and communication through our website.
- Payment processing: third-party gateways including Stripe, Cryptomus, and Razorpay (with PayPal, Paymentwall, and bank transfer to be added). ElytraNode does not store or process full payment card details; these providers process all sensitive payment information on our behalf.
We may also disclose information where required to comply with a legal obligation, court order, regulatory request, or governmental authority, or where necessary to protect the rights, security, and safety of ElytraNode, our customers, or others. If ElytraNode is involved in a merger, acquisition, restructuring, or sale of assets, personal data may be transferred as part of that transaction, subject to appropriate safeguards and continued protection consistent with this Privacy Policy.
5. International transfers
ElytraNode operates globally and may process or store data on servers located outside your country, including in jurisdictions that may not offer the same level of data protection. When transferring personal data outside the EEA or UK, we use lawful transfer mechanisms such as Standard Contractual Clauses (SCCs) or equivalent safeguards to ensure your data remains protected.
6. Data retention
ElytraNode retains personal data for as long as it is reasonably required to operate our Services, maintain accurate business and financial records, comply with legal obligations, prevent fraud and abuse, and support future reactivation of customer accounts. We do not automatically delete account data after inactivity.
If you choose to close your ElytraNode account, you may request this through our support team. Upon account closure, ElytraNode will deactivate the account and stop using your data for active service delivery; however, we will continue to retain information necessary to meet legal, tax, accounting, anti-fraud, and operational requirements.
In particular, ElytraNode is required under UK law to retain certain financial and transactional records for a minimum of six (6) years, and may retain additional information where necessary to protect ElytraNode's legitimate business interests, resolve disputes, enforce agreements, or maintain necessary internal records.
After all legal, regulatory, and operational retention requirements have expired, data will be securely deleted or anonymised. Customers may request deletion of specific personal data where permitted by law, but ElytraNode may decline such requests where retention is required for compliance or legitimate business purposes.
7. Data security
We take appropriate technical and organisational measures to safeguard your information, including encryption, secure networks, access controls, and regular security monitoring. Payment card information is processed exclusively by PCI-compliant third-party gateways and is never stored on our systems. No online service can guarantee absolute security, but we work continuously to protect your data from unauthorised access, alteration, or loss.
8. Your rights
Depending on your jurisdiction (including the EU GDPR, UK GDPR, CCPA/CPRA, and others), you may have rights relating to your personal data. These may include the right to access, correct, delete, restrict processing, object to processing, request data portability, or withdraw consent at any time. You may also have the right to opt out of certain data sharing or marketing communications.
For CCPA/CPRA customers, ElytraNode does not "sell" personal data as defined by California law, nor do we engage in targeted advertising practices that qualify as a "sale" without consent.
To exercise your rights, contact us using the details below. We may require reasonable verification of identity before fulfilling a request. You also have the right to lodge a complaint with the data protection supervisory authority for your country of residence.
9. Cookies and tracking technologies
We use cookies and similar technologies to operate our websites, enhance user experience, improve security, provide analytics, and deliver relevant content and advertising. You may manage cookie preferences via your browser or local settings.
10. Communications and marketing
We may send service-related emails such as billing notices, security alerts, and critical updates; these are required for account operation and cannot be opted out of.
Marketing emails are sent only where legally permitted, and you may unsubscribe at any time using the link provided or by contacting support.
11. Children's privacy
ElytraNode does not knowingly collect personal information from children under 13 or provide Services targeted toward them. If we learn that data from a child under 13 has been collected, we will delete it promptly. Where a customer's Minecraft server collects player data, that customer is responsible for their own compliance.
12. Contacting us
If you have questions about this Privacy Policy, wish to exercise your data rights, or need additional information, you may contact us at:
Email: support@elytranode.com