Privacy policy
Last updated 28 October 2026
We only collect what we need to run your services and send you invoices. We don't sell data, show ads or use tracking or analytics.
Who we are
Skylit Hosting is the controller for the personal data described here.
- Company
- Skylit Hosting, [legal entity and legal form]
- Address
- [street and number], [postcode and city], the Netherlands
- KvK
- [KvK number]
- privacy@skylithosting.com
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Name, email address, password (stored only as a hash), country | Your account, logging in, service emails | Contract |
| Company, VAT number, address, postcode, city, phone (all optional) | Correct invoices; business customers need them for VAT | Contract and legal obligation |
| Orders, invoices and payment status | Billing and bookkeeping | Contract and legal obligation (tax law) |
| IP address and browser name of each login session | Keeping your account secure, spotting misuse | Legitimate interest |
| Copies of emails we sent you (without passwords) | Showing what was sent when you ask about it | Legitimate interest |
| Messages you send us (email, Discord) | Answering your questions | Contract or legitimate interest |
We don't ask for your date of birth, ID documents or anything else we don't need. Payment details such as card or bank numbers go straight to the payment provider; we never see or store them.
Files and data on your servers
Whatever you put on a game server or website is yours. For that data you are the controller and we are only the processor: we store it, we don't look at it, except when that's needed to fix a problem you reported, or when the law or abuse forces us to. Business customers who need a data processing agreement (verwerkersovereenkomst) can ask us for one.
Who else gets data
Our servers, the client area, the game panel and the website hosting run on our own hardware in the Netherlands. A few outside companies help us:
| Company | What for | What they get |
|---|---|---|
| Mollie B.V. (Netherlands) or Stripe (EU entity in Ireland), whichever you pick at checkout | Handling payments | Invoice number and amount, and the payment details you enter on their page |
| your-webhost.nl (Netherlands) | Domain names and sending our outgoing email | Your email address and the content of emails we send you |
| Discord Inc. (United States) | Staff alerts about new sign-ups and orders, and support chat if you contact us there | Your name and email address in staff alerts; whatever you post if you use Discord |
Discord is in the United States. Transfers there rely on the EU–US Data Privacy Framework or the EU standard contractual clauses. We never sell personal data and never share it for advertising. We give data to authorities only when Dutch law requires it.
How long we keep it
- Invoices and the billing details on them: 7 years, because Dutch tax law requires it.
- Your account: until you ask us to delete it. After deletion we keep only what the tax rules above require.
- Server data: removed when the service ends. Copies in our backups are overwritten as the backups rotate.
- Login sessions: end after 30 days, or earlier when you log out or change your password.
- Password reset links: work for 1 hour and are removed a day later.
Your rights
You can ask us to show, correct, export or delete your personal data, to limit how we use it, or object to how we use it. You can change most details yourself under Account in the client area.
Deleting your account: use "Delete my account" on the Account page, or email privacy@skylithosting.com. We first end your services, then remove your personal details. Invoices stay for 7 years, as explained above. We answer every request within one month.
Not happy with how we handle your data? Tell us first, so we can fix it. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Age
You must be 16 or older to create an account. To order a paid service you must be 18, or have permission from a parent or guardian. If we find out that a child under 16 signed up, we delete the account.
Cookies
We use one cookie, only to keep you logged in. No tracking, analytics or advertising cookies. See the cookie policy.
Security
Passwords are stored as bcrypt hashes. Connections use HTTPS. Server login details are stored encrypted. If a data breach puts your data at risk, we tell you and the Autoriteit Persoonsgegevens as the law requires.
Changes
If we change this policy in a way that matters to you, we email you before the change takes effect. The date at the top shows the latest version.