Privacy Policy
This Privacy Policy explains how Swap Hosting collects, processes, and safeguards client personal data, instance configurations, and network telemetry across our European datacenter nodes.
1. Data Controller & European Privacy Principles
Swap Hosting acts as the Data Controller under European privacy legislation, specifically Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR).
We adhere strictly to the principles of data minimization, lawful processing, and purpose limitation. We collect only the information necessary to provision server instances, authenticate client portal access, manage prepaid billing, and protect network integrity.
2. Categories of Information Collected
We process the following categories of data strictly for hosting operations:
Account & Identity
Email address, chosen username handle, cryptographically hashed passwords, and account registration timestamps.
Billing Reference Tokens
Transaction reference IDs, crypto invoice numbers, and payment status receipts. Raw payment card numbers are never stored on our systems.
Server Configurations
Virtual machine configurations, allocated vCPU/RAM quotas, provisioned IP addresses, operating system templates, and datacenter location tags.
Security Telemetry
Client IP addresses used during portal sign-in, session activity timestamps, and rate-limit counters to prevent unauthorized brute-force attempts.
3. Purpose & Lawful Basis of Data Processing
Personal data is processed exclusively under the following lawful grounds:
- Contractual Performance (Art. 6(1)(b) GDPR): Required for provisioning virtual instances, managing server reboots, routing network uplinks, and fulfilling technical orders.
- Security & Legitimate Interest (Art. 6(1)(f) GDPR): Operating automated anti-DDoS mitigation, defending network perimeters, and auditing infrastructure against malicious access.
- Legal Compliance (Art. 6(1)(c) GDPR): Retaining accounting records, invoice references, and responding to lawful requests by competent judicial authorities.
Swap Hosting does not sell, lease, or monetize client personal data to any marketing or advertising entities under any circumstances.
4. Data Security & Encryption Standards
All infrastructure databases and customer records are stored on dedicated European servers located in Tier-III/IV datacenter facilities with multi-tier access restrictions:
- Encryption in Transit: All HTTP and API communication is enforced strictly over TLS 1.3 with modern cipher suites.
- Encryption at Rest: Database volumes and configuration backups are encrypted using enterprise AES-256 standards.
- Role-Based Access: Administrative access is restricted using least-privilege credentials and encrypted key authentication.
- Data Residency: All operational data remains within European Union borders (Frankfurt, Amsterdam, Stockholm, Helsinki).
5. Client Rights Under GDPR
Under the GDPR, European clients hold comprehensive rights regarding their personal data:
- Right of Access: Request a full copy of personal information and active service metadata associated with your account.
- Right to Rectification: Update or correct inaccurate credentials directly in the client dashboard.
- Right to Erasure (“Right to be Forgotten”): Request the permanent deletion of your account and personal data.
- Right to Data Portability: Obtain server configurations and profile records in a structured, machine-readable format.
6. Account Erasure & Storage Sanitization
When an account is deleted by the user or upon written request, all associated customer records, authentication credentials, and active server partitions are permanently removed from production databases.
Server NVMe storage sectors undergo a cryptographic sanitization process, ensuring complete data destruction in accordance with industry security guidelines.
Privacy Inquiries or GDPR Requests?
Our data protection officer is available to assist with all privacy questions.