Privacy policy
This policy describes how Cafora Host collects, uses, and protects your personal data. We are a Malaysian business serving the Minecraft community, and we handle your data with the care you would expect from a hosting provider.
Effective September 2026.
If you have questions about this policy or your data, contact us at privacy@cafora.host.
1. What We Collect
We collect the information you provide when you deploy a server: your name, email address, and payment details. We also collect the IP address associated with your server for connectivity and abuse prevention. Payment information is processed by our payment partners; we do not store full card numbers on our servers.
2. How We Use Your Data
We use your email address to provision your server, send service announcements, and communicate about your account. We use your IP address for DDoS filtering and network diagnostics. We do not use your data for automated profiling or behavioural advertising.
3. Data Storage
Your personal data is stored on infrastructure located in Malaysia. Server data — including world files, plugin configurations, and logs — is stored on the node where your server runs. We retain account data for as long as your account is active. After cancellation, we retain billing records for the period required by Malaysian law.
4. Data Sharing
We do not sell your personal data. We share data with third parties only where necessary to deliver the service: with our payment processor to complete transactions, with Path Network for DDoS mitigation, and with infrastructure providers who operate our data centre. Each of these partners is contractually bound to handle your data in accordance with applicable law.
5. Cookies
Our website uses essential cookies for session management and language preferences. We do not use tracking cookies, analytics cookies, or advertising cookies. Your language preference is stored locally; no cookie data is shared with third parties.
6. Your Rights
You have the right to access the personal data we hold about you, to request corrections, and to ask us to delete your data where there is no legitimate reason for us to keep it. To exercise these rights, contact us at privacy@cafora.host. We will respond within thirty days.
7. Security
We apply technical and organisational measures to protect your data: encryption in transit, access controls, and regular infrastructure audits. If we become aware of a data breach that affects your personal information, we will notify you without undue delay.
8. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated by email and noted on this page. Continued use of the service after changes take effect constitutes acceptance of the revised policy.
MY-L / Malaysia
Back to home