goga.host

Privacy Policy

Last updated: June 10, 2026

TL;DR: we collect almost nothing, because we designed the business so we don't need to.

What we collect

Email address
The only identity we ask for: sign-in links, invoices, service notices. Aliases and burners welcome.
Billing ledger
Top-ups, charges, crypto transaction IDs. Kept because we owe you an accurate balance.
Service records
Your servers, their specs and names, support conversations.
Network metadata
Traffic volume and flow patterns per VM, on the hypervisor. Abuse detection and capacity planning. Never packet contents.

What we deliberately don't

  • No legal name, address, phone or ID. No KYC.
  • No payment identity: crypto arrives via a processor; we see a transaction, not a person
  • No analytics trackers, ad pixels or fingerprinting on this site
  • No content of your disks, databases or traffic. Your server is yours.

Logs

7d
control-panel web logs (IP + URL), kept to debug attacks on the panel itself
30d
aggregated VM network metadata
0
browsing / connection logs of what your server does

Who sees your data

Your rights

EU residents have GDPR rights (access, rectification, erasure, portability). Practically: mail [email protected] and we'll export or delete your account data. Deleting an account with an active server cancels it at the end of the paid period; ledger entries we must keep for accounting stay, detached from your email.

Changes: material changes are emailed to every account 14 days before they take effect. This page lives in version control - ask and we'll show you any past revision.