Trust & security
Where your data sits
Servers run in OVH datacentres: Beauharnois, Canada for the NA region and Gravelines, France for EU. You pick the region when you create a server, and a server stays in the region you picked.
Your backups are never locked behind a ticket
Every server's backups are written on the box it runs on, and you can download any of them yourself from the panel — no ticket, no waiting. Each one is a full archive of the server's files — worlds, configs, plugins and mods. A managed MySQL database is a separate service and is not included.
Nodes authenticate each other
The control plane and every remote node speak over mutual TLS with per-node certificates, so a node cannot be impersonated by anything that merely reaches the network.
Card data never reaches our servers
Payments go through Paddle as merchant of record. Card data is entered on their side; we receive a signed webhook and a balance, never a card number.
The panel never hands your key to the browser
The dashboard talks to the API only from the server side, carrying a service key the browser never sees, plus your account identity from a signed session cookie.
File access is per-server and jailed
SFTP credentials are issued per server and confined to that server's directory, so one set of credentials cannot read another server's files.
Getting your data out is self-service
Backups — full archives of your server's files, worlds included — download from the panel at any time; a managed MySQL database is not in them. Unused credit is refundable — see the refund policy.
Live checks and the incident log: /status.