Privacy Policy

Last Updated: September 11, 2026

IN SHORT

We collect what we need to run your account and server: your email address and payment details, your server settings, and basic information about how you use the site. (More)

We use it to provide the service, bill you and keep the site secure, and, only if you accept analytics cookies, to understand how the site is used. (More)

We share it with the providers that run parts of the service, such as Stripe for payments and Google for sign-in, hosting and analytics. We never sell it. (More)

Some of those providers process information outside Australia. Your server files, databases and backups stay in Australia. (More)

We keep billing records for five years, as tax law requires, and delete your account 30 days after you ask. (More)

You can see, correct or delete your information from My Account, and you can complain to us or to the Office of the Australian Information Commissioner. (More)

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from mchosts.com.au (the "Site").

AUSTRALIAN PRIVACY ACT COMPLIANCE

As an Australian business (Requiem Technologies Pty Ltd ACN 651 078 849), we comply with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). This includes ensuring that personal information is collected, used, stored, and disclosed in accordance with Australian law. We are committed to protecting your privacy and handling your personal information responsibly and transparently.

PERSONAL INFORMATION WE COLLECT

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

We collect Device Information using the following technologies:

- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

- “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.

Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, payment information (including credit card numbers), email address, and phone number. We refer to this information as “Order Information.”

When you create an account and use our hosting services, we collect information necessary to provide those services, including your email address (via Firebase Authentication), server configuration and settings, player lists, add-on subscription details, backup metadata (such as backup names, timestamps, and file sizes), usage statistics, service-related preferences, server access credentials you set (such as SFTP and database passwords, which are stored in hashed form) and, for Hytale servers, the sign-in token described below, and the contents of any support tickets and messages you send us (including any information you choose to include in them). We refer to this as "Account and Service Information." This information is stored in Google Firebase and is used solely to provide, operate, and improve our services.

If you run a Hytale server, you sign it in to your Hytale account from the control panel. You do that on Hytale's own website, and we never see your Hytale password. Hytale then gives your server a sign-in token. It is stored in your server's files on our servers in Australia, together with the key that decrypts it, so anyone who has a copy of those files, including a backup you download, can use that login. We do not read or use the token ourselves. It is deleted with your server files when your server is removed.

When we talk about "Personal Information" in this Privacy Policy, we are talking about Device Information, Order Information, and Account and Service Information.

When you check out or claim a promotional server, we use your IP address to estimate your country. This check exists because our services are offered to Australian customers only, and only the country-level result is used. The lookup runs against a local copy of the GeoLite2 database; your IP address is not sent to any third party for this purpose. This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

COOKIES WE USE

Our website uses cookies to operate and improve our services. A cookie is a small text file stored in your browser when you visit a website.

Necessary Cookies (always active):
These cookies are required for the website to function and cannot be disabled.

• _stripe_mid — Set by Stripe. Used for fraud prevention and payment session continuity. Expires in 1 year.
• _stripe_sid — Set by Stripe. Used for fraud prevention during a payment session. Expires in 30 minutes.

Analytics Cookies (optional, consent required):
These cookies are only set if you accept analytics cookies via the consent banner. They help us understand how visitors use the site.

• _ga — Set by Google Analytics. Distinguishes unique visitors. Expires in 2 years.
• _gid — Set by Google Analytics. Identifies a browsing session. Expires in 24 hours.
• _ga_B3DZT4R0ZT — Set by Firebase Analytics (Google Analytics 4). Maintains GA4 session state. Expires in 2 years.
• _ga_791GZ8W4WY — Set by Google Analytics 4. Maintains session state for our website analytics property. Expires in 2 years.

Before you choose, and if you decline:
Our analytics provider's script (Google Consent Mode) loads on every visit, but it starts in a fully denied state and stays there unless you accept. While denied it does not read or write any cookies, does not store anything on your device, and does not identify you. It sends only anonymous, cookieless signals such as the page address and whether a consent choice has been made. This lets us understand roughly how many people visit without tracking anyone who has not agreed to it. If you accept, the cookies listed above are set and normal analytics begins. If you decline, the denied state is kept and the analytics cookies above are deleted.

You can change your choice at any time using the Cookie Preferences link in the footer of any page, which reopens the consent banner. You can also opt out of Google Analytics entirely at https://tools.google.com/dlpage/gaoptout.

HOW DO WE USE YOUR PERSONAL INFORMATION?

We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, provisioning and operating your services, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:

Communicate with you, including sending transactional emails such as payment confirmations, service notifications, and alerts related to your server (for example, notifications that your offsite backup storage quota is full);

Process your server data automatically on your behalf, including performing scheduled backups where you have enabled the auto-backup feature;

Screen our orders for potential risk or fraud; and
When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

SHARING YOUR PERSONAL INFORMATION

We share your Personal Information with the following third-party service providers who help us operate our business:

Payment Processing: Stripe (https://stripe.com/en-au/privacy) - processes credit card payments and securely stores your payment methods so that recurring subscription charges and saved cards can be processed. We do not store full card numbers on our own systems.

Hosting & Database: Google Firebase (https://firebase.google.com/support/privacy) - hosts our website, databases, and user authentication.

Analytics: Google Analytics (https://www.google.com/intl/en/policies/privacy/) - helps us understand how customers use the Site. You can opt-out here: https://tools.google.com/dlpage/gaoptout

Server Infrastructure: Our game servers are hosted on infrastructure in Australia. Server data (including world files and configurations) may be stored on our hosting providers' systems.

MySQL Databases: If you provision a MySQL database through the control panel, the data you choose to store in it is held on our shared database infrastructure in Australia. This data is controlled by you and the plugins or mods you run, and may include player-related information such as usernames or in-game statistics. We access this data only as needed to operate, maintain, and secure the database service on your behalf.

Offsite Backup Storage: If you subscribe to our offsite backup add-on, your server backup files are stored in Google Cloud Storage (https://cloud.google.com/terms/cloud-privacy-notice) in Australia. These files are compressed archives of your server directory and are accessed only to perform backup, restore, and deletion operations on your behalf.

Email delivery: Titan Email (https://support.titan.email/hc/en-us/articles/360038535773-Titan-Privacy-Policy) delivers the emails we send you, including invoices, service notices and any marketing you have opted in to.

Advertising measurement: If you accept analytics cookies, Google Ads (https://policies.google.com/technologies/ads) receives conversion events from the same Google tag so we can tell which advertising led to a purchase. If you decline, nothing is sent.

Knowledgebase chat assistant: The chat widget on our knowledgebase sends your question, the earlier messages in that chat, and the relevant help articles to Google's Gemini service (https://policies.google.com/privacy) to write the reply. It does not send your name, email address or account details. Do not put passwords or payment details into the chat.

Review requests: We may email you a link to leave a review on Trustpilot (https://corporate.trustpilot.com/legal/for-reviewers/privacy-policy-end-user). Trustpilot only receives information if you follow the link and write a review.

Free tools: The DNS checker on our Tools page asks Google Public DNS (https://developers.google.com/speed/public-dns/privacy) and Cloudflare DNS (https://developers.cloudflare.com/1.1.1.1/privacy/public-dns-resolver/) to look up the hostname you enter. Those requests come from your browser, so your IP address and the hostname reach Google and Cloudflare; both delete the address within two days. Our status page at status.mchosts.com.au is served through Cloudflare (https://www.cloudflare.com/privacypolicy/), which sees the IP address of anyone who visits it.

Modpack platforms: When you install a modpack we look it up on CurseForge (https://legal.overwolf.com/docs/overwolf/platform/platform-privacy-policy/) or Modrinth (https://modrinth.com/legal/privacy) from our servers. We send the pack name and version, not anything about you.

Hytale account service: If you run a Hytale server, you sign it in to Hytale's account service, run by Hypixel Studios Canada Inc. (https://hytale.com/privacy). Your server then stays in contact with that service while it runs, to keep its session alive and to check each player who joins. Hypixel receives your server's sign-in token and handles the sign-in of your players through the game itself. We do not send Hypixel your name, email address or account details.

Your players: Your server files, logs and databases contain information about the players who join your server, such as usernames, UUIDs and IP addresses. That information is controlled by you. We store it on your behalf and access it only to operate, back up, restore and secure your server. On a Hytale server, players are identified by their Hytale account, so their account ID and display name appear in your server's files and in the control panel.

These third parties are contractually obligated to use your information only for the purposes we specify and to protect your information with appropriate security measures.

We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

We do not sell, trade, or rent your personal information to third parties for their own marketing or commercial purposes.

OVERSEAS DISCLOSURE

Some of the providers we use store or process information outside Australia. Stripe processes payment information in the United States and India. Firebase Authentication, which handles sign-in, runs in the United States. Google Analytics and Google Ads process the analytics and advertising data described above in the United States. Questions you type into the knowledgebase chat assistant are sent to Google's Gemini service, which may process them in any country where Google operates. Hytale's account service is run from Canada and may process information in the United States, the United Kingdom and the European Union; it receives your Hytale server's sign-in token as described above. Your account records, your game server files, your databases and your off-site backups stay in Australia.

Before we send information overseas we take reasonable steps, including contractual terms with each provider, to make sure it is handled in a way consistent with the Australian Privacy Principles.

These locations come from each provider's published privacy terms, linked in the section above, at the date of this policy. Providers can change where they process data; we update this section when we learn of a change.

DATA BREACH NOTIFICATION

In the event of a data breach that is likely to result in serious harm to you, we will notify you and, where required, the Office of the Australian Information Commissioner (OAIC) as soon as practicable. We will provide information about the breach, the kind of information involved, and steps you can take to mitigate potential harm. We maintain security measures designed to protect your information and regularly review our security practices.

DO NOT TRACK

Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

AUTOMATED DECISIONS

A few decisions about your account are made by software without a person reviewing them first.

At checkout we use your IP address to estimate your country. If it is clearly outside Australia, checkout is refused, because we sell to Australian customers only. If the country cannot be determined, checkout goes ahead.

Stripe's fraud systems may decline a payment or block a card automatically.

If a subscription payment fails and Stripe's retries also fail, the subscription is cancelled and your server is shut down and removed automatically. We email you before this happens.

These decisions use your IP address, your payment details and your payment history. If you think one of them was wrong, open a support ticket and a person will look at it.

YOUR RIGHTS

Under Australian privacy law and GDPR (if applicable), you have the following rights regarding your personal information:

Access: You have the right to access the personal information we hold about you.

Correction: You can request that we correct any inaccurate or incomplete personal information.

Deletion: You can request that we delete your personal information, subject to certain exceptions (e.g., legal obligations). You can request account deletion through your My Account page on the Site.

Data Portability: You can request a copy of your personal information in a structured, commonly used format.

Withdrawal of Consent: Where we rely on consent to process your information, you can withdraw that consent at any time. For analytics cookies specifically, use the Cookie Preferences link in the footer of any page to reopen the consent banner and change your choice.

Marketing email: Every marketing email we send has an unsubscribe link, and you can turn marketing email off in My Account. Invoices, service notices and support replies are still sent.

To exercise any of these rights, please contact us at support@requiemtech.com.au or use the My Account page on our website. We will respond to your request within 30 days.

If you are a European resident, we note that we are processing your information to fulfill contracts we have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests. Your information may be transferred outside of Europe, including to Australia.

DATA RETENTION

We keep billing records, including your name, email address, billing address and invoices, for five years after each transaction, because Australian tax law requires it. We keep your account details while your account is open. When you ask to close your account, it is deleted 30 days after your request, along with your support tickets and your payment-provider customer record. The billing records above are kept for the five-year period even after your account is closed.

Server data and backup files (local and offsite) are retained for the duration of your active subscription. Upon cancellation or termination of your service or offsite backup add-on, server data and all associated backup files will be permanently deleted within 30 days. Data stored in any MySQL database is deleted when you delete that database, or upon cancellation or termination of your service. You may request early deletion through the control panel or by contacting us at support@requiemtech.com.au.

CHANGES

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

COMPLAINTS

If you think we have mishandled your personal information, email support@requiemtech.com.au or open a support ticket. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner at https://www.oaic.gov.au.

CONTACT US

For more information about our privacy practices, or if you have questions, please contact us by e-mail at support@requiemtech.com.au.