Version of 11.11.2026. Service operator: Hushdeak Ltd (135743157882).
Hushdesk collects only the data it needs to provide the service and never asks users for a name, email, phone number or ID.
1. Data we do not collect
- Names, email addresses, phone numbers or identity documents.
- Bank card or account details: we accept cryptocurrency only.
- IP addresses of site and dashboard visitors: our web server logs do not record them. Brute-force protection uses an anonymised key that is deleted after 15 minutes.
- Third-party trackers, ad pixels and external fonts are not used on the site.
2. Data we store and why
| Data | Purpose | Retention |
|---|---|---|
| Hash of the access code (the code itself is not stored) | Logging in | While the account exists |
| Two-factor secret and hashes of backup codes | Login protection | While 2FA is on |
| Orders: configuration, country, OS, period, status | Providing the service | While the account exists |
| Payments: amount, coin, network, transaction hash | Payment confirmation | While the account exists |
| Server access details (IP, login, password), encrypted | Giving the user access | Until deleted by the user or until the server is deleted |
| Support messages | Support | While the account exists |
| Technical session cookie | Keeping you logged in | Until logout or 30 days of inactivity |
Blockchain transactions are public by nature. We cannot hide or delete data recorded on a blockchain.
If a complaint is filed about a server, its content and the measures taken are kept for up to 12 months (see the Abuse policy).
3. Data on your server
We do not view, copy or analyse the contents of rented servers. We do not make server backups. When the paid period ends, the server and all its data are deleted and cannot be restored.
4. Sharing with third parties
We do not sell or share user data with third parties for advertising or analytics. Data may be disclosed only under a request that is legally binding on us under the laws of «the laws of the Republic of Seychelles», and only to the extent we hold it (see section 2).
5. Deleting your account
You can ask for your account to be deleted through a support request. We delete the account and all related data within 7 days, unless retention is required by law or for an ongoing complaint investigation.
6. Security
The site is served over HTTPS. Access codes are stored only as hashes and server access details are encrypted. You are responsible for keeping your access code safe: it cannot be recovered.
7. Changes to this policy
We announce material changes with a banner in the dashboard at least 7 days before they take effect.