The short version
The main points in plain words. The full text below is what applies.
We never sell your data
We collect what we need to run your account and servers, and share it only with the services listed below.
Tracking is opt-in
Analytics, ads and session replay load only after you choose Accept all. Change it any time in Cookie settings.
Logs last 30 days
Connection logs with IP addresses, yours and your players', are kept for up to 30 days.
The AI reads only what you ask
Byte opens server files or console output only at your request. Chats aren't used to train third-party models, and you can delete them.
Servers in the EU
Hetzner runs your servers and our backup storage in the EU. Services based in the US are covered by EU transfer safeguards.
Your data, your call
Email us to get a copy, correct it or have it deleted. We reply within a month.
01Data Controller
The entity responsible for processing your personal data within the meaning of the GDPR (Art. 4 No. 7) is Jamie Penning, Enkhuizen, Netherlands.
Email for privacy matters: [email protected]
Full postal contact details are shared upon verified legal or regulatory request. Further legal details can be found in our Legal Notice.
02Data We Collect and Why
We only collect personal data that is necessary to provide our hosting service, our management panel, and the optional features you choose to use. The table below maps each category to its legal basis under Art. 6 GDPR and its retention period.
Account data
Name, email address, and Clerk user ID
- Legal Basis
- Art. 6(1)(b), contract performance
- Retention
- Until account deletion
Server content
Your Minecraft world files, configs, plugins/mods, and the server backups you create on our infrastructure
- Legal Basis
- Art. 6(1)(b), contract performance
- Retention
- Kept while the server exists; inactive free servers are hibernated into a compressed archive or deleted as described in our Terms
Connection & technical logs
Your IP address, browser/user agent, and panel usage logs, plus the IP addresses of players connecting to your Minecraft servers and the proxy
- Legal Basis
- Art. 6(1)(f), legitimate interest in security, abuse prevention, and operating the network
- Retention
- Up to 30 days
Error & performance monitoring
Error reports, stack traces, page path without query parameters, browser/device information, performance diagnostics, redacted console breadcrumbs, and recent interaction breadcrumbs (via Sentry)
- Legal Basis
- Art. 6(1)(f), legitimate interest in keeping the service secure, reliable, and debuggable
- Retention
- Usually up to 90 days in Sentry
Session replay (optional)
A sampled, video-like reconstruction of page layout and interactions. All text and input values are masked, images and other media are blocked, console output is omitted, and URL query parameters are removed before transmission
- Legal Basis
- Art. 6(1)(a), consent
- Retention
- Only while consent is active; usually up to 90 days in Sentry
Minecraft account
Minecraft UUID, username, and skin once you link your account, plus your vote records (UUID, username, server, timestamp) when you vote for a server
- Legal Basis
- Art. 6(1)(b), contract performance, and Art. 6(1)(f) for server-listing votes
- Retention
- Until account deletion or unlink
Bedrock account
For players who join through our Bedrock (Geyser/Floodgate) gateway: Xbox Live gamertag and the derived Floodgate identifier used to route the connection
- Legal Basis
- Art. 6(1)(b), contract performance, and Art. 6(1)(f) for network operation
- Retention
- For the duration of the session and in connection logs (up to 30 days)
AI assistant (“Byte” and AI setup)
Your chat messages, and any server files or console output the assistant reads at your request, plus web-search queries it runs for you. These are shared with our AI providers (OpenRouter, which routes to Google Gemini), Brave Search, and Modrinth to generate a response
- Legal Basis
- Art. 6(1)(b), contract performance for this optional feature
- Retention
- Conversation history is kept until you delete it or delete your account
Support tickets
Messages, attachments, and transcripts of support tickets you open in our Discord, including your Discord identifier and timestamps
- Legal Basis
- Art. 6(1)(f), legitimate interest in providing support and preventing abuse/fraud
- Retention
- Retained only as long as needed for support quality and dispute handling
Analytics & advertising
Aggregated page views and selected link actions measured with Sentry Application Metrics, plus Google Ads / Google Tag Manager identifiers. These load only after you accept the cookie banner
- Legal Basis
- Art. 6(1)(a), consent under GDPR and Dutch Telecommunicatiewet cookie rules
- Retention
- Until consent is withdrawn; Google data is kept for no more than 26 months and Sentry data is usually kept for no more than 90 days
Payment data
Transaction records processed by Whop, our payment provider. We never receive your full card details
- Legal Basis
- Art. 6(1)(c), legal obligation under applicable EU/NL tax and accounting law
- Retention
- Up to 10 years where legally required
About the Byte AI assistant. The in-panel assistant only reads your server's files or console output when you ask it to, and shares the minimum needed with our AI providers to answer your request. Conversations are not used to train third-party models, and you can delete any conversation at any time.
About Sentry. Error and performance monitoring runs to help us detect and fix faults. Aggregated page and selected link metrics, and Session Replay, start only after you select “Accept all.” Before a replay leaves your browser, Sentry masks all text and input values, blocks images and other media, omits console output, and removes URL query parameters. We do not enable request or response body capture. Sentry is not used for advertising, selling data, or building user profiles.
03Recipients and Data Processors
We share personal data only with processors who are contractually bound by a Data Processing Agreement and provide sufficient guarantees under Art. 28 GDPR. We do not sell your personal data.
- Clerk: authentication and user management, USA.
- Hetzner Online GmbH: physical server infrastructure and encrypted backup storage, Germany, EU.
- Cloudflare, Inc.: DNS, CDN, TLS, DDoS protection, and bot-protection challenges for our websites, USA and global edge network.
- Whop, Inc.: payment processing for credit packs, plan subscriptions and ranks, USA.
- Google LLC: Gemini AI responses for the assistant, and consent-based advertising/analytics, USA.
- OpenRouter, Inc.: routing of in-panel AI assistant requests to language models, USA.
- Brave Software, Inc.: web search used by the AI assistant, USA.
- Rinth, Inc. (Modrinth): plugin and mod catalogue lookups for the AI assistant, Canada.
- Sentry (Functional Software, Inc.): error monitoring, performance diagnostics, consent-based aggregate website metrics, and consent-based masked session replay, USA / Germany.
- Discord, Inc.: community, support tickets and transcripts, and service notifications, USA.
04International Data Transfers
Several processors are headquartered in the United States, outside the European Economic Area. For such transfers we rely on mechanisms under Chapter V GDPR, including Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
You may request more information about transfer safeguards at [email protected].
06Minors
Our services are not intended for children under 16 without parental or guardian consent. If you are under 16, you must obtain permission from a parent or legal guardian before using SwiftServers.
07Additional Information Under Article 13(2) GDPR
Providing personal data required during registration and service use is necessary to create and maintain your account and hosting services. Without this data, the service cannot be provided.
We do not carry out automated decision-making or profiling within the meaning of Article 22 GDPR.
08Your Rights Under GDPR (Arts. 15-22)
You may exercise these rights free of charge by contacting [email protected]. We will respond within one month.
- 01
Right to Access (Art. 15)
Obtain a copy of all personal data we hold about you.
- 02
Right to Rectification (Art. 16)
Correct inaccurate or incomplete personal data.
- 03
Right to Erasure (Art. 17)
Request deletion of your data.
- 04
Right to Restriction (Art. 18)
Restrict how we process your data in certain circumstances.
- 05
Right to Portability (Art. 20)
Receive your data in a structured, machine-readable format.
- 06
Right to Object (Art. 21)
Object to processing based on legitimate interests.
- 07
Right to Withdraw Consent (Art. 7(3))
Withdraw any consent at any time without penalty.
- 08
Right to Lodge a Complaint (Art. 77)
File a complaint with a supervisory authority.
09Security Measures
We implement appropriate technical and organizational measures as required by Art. 32 GDPR, including TLS 1.2+, encryption at rest, least-privilege access controls, regular security reviews, and Docker isolation with private networking.
10Right to Lodge a Complaint (Art. 77 GDPR)
The competent lead supervisory authority is Autoriteit Persoonsgegevens (AP), Hoog Catharijne, Catharinasingel 2, 2511 GX Den Haag. Website: autoriteitpersoonsgegevens.nl.
You may also lodge a complaint with the supervisory authority in your EU member state of residence or place of work.
11Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced via the website or by email. The "Last updated" date always reflects the most recent version.