Privacy Policy

Last Updated: November 9, 2026

IN SHORT

We collect what we need to run your account and server: your email address and payment details, your server settings, and basic information about how you use the site. (More)

We use it to provide the service, bill you and keep the site secure, and, only if you accept analytics cookies, to understand how the site is used. (More)

We share it with the providers that run parts of the service, such as Stripe for payments and Google for sign-in, hosting and analytics. We never sell it. (More)

Some of those providers process information outside Australia. Your server files, databases and backups stay in Australia. (More)

We keep billing records for five years, as tax law requires, and delete your account 30 days after you ask. (More)

You can see, correct or delete your information from My Account, and you can complain to us or to the Office of the Australian Information Commissioner. (More)

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from mchosts.com.au (the "Site").

AUSTRALIAN PRIVACY ACT COMPLIANCE

As an Australian business (Requiem Technologies Pty Ltd ACN 651 078 849), we comply with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). This includes ensuring that personal information is collected, used, stored, and disclosed in accordance with Australian law. We are committed to protecting your privacy and handling your personal information responsibly and transparently.

PERSONAL INFORMATION WE COLLECT

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

We collect Device Information using the following technologies:

- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

- “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.

Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, payment information (including credit card numbers), email address, and phone number. We refer to this information as “Order Information.”

When you create an account and use our hosting services, we collect information necessary to provide those services, including your email address (via Firebase Authentication), server configuration and settings, player lists, add-on subscription details, backup metadata (such as backup names, timestamps, and file sizes), usage statistics, service-related preferences, server access credentials (SFTP and database passwords are stored in hashed form; a password players type to join your game server is kept as you set it in your server's settings, where the game reads it, and on most games is in your backups) and, for Hytale servers, the sign-in token described below, and, for Factorio servers, the factorio.com username and token described below, and the contents of any support tickets and messages you send us (including any information you choose to include in them). We refer to this as "Account and Service Information." This information is stored in Google Firebase and is used solely to provide, operate, and improve our services.

If you run a Hytale server, you sign it in to your Hytale account from the control panel. You do that on Hytale's own website, and we never see your Hytale password. Hytale then gives your server a sign-in token. It is stored in your server's files on our servers in Australia, together with the key that decrypts it, so anyone who has a copy of those files, including a backup you download, can use that login. We do not read or use the token ourselves. It is deleted with your server files when your server is removed.

If you run a Factorio server and want it to download mods from Wube's mod portal or appear in Factorio's public server browser, you type your factorio.com username and the service token from your factorio.com profile into the control panel. We never ask for your factorio.com password. They are stored in a file on your server on our servers in Australia that no backup includes, so a backup you download does not carry them. Your server sends them only to Wube's services, to download the mods you install and to list your server. We do not read or use them ourselves. Press Remove in the control panel to delete them at any time, and they are deleted with your server files when your server is removed.

When we talk about "Personal Information" in this Privacy Policy, we are talking about Device Information, Order Information, and Account and Service Information.

When you check out or claim a promotional server, we use your IP address to estimate your country. This check exists because our services are offered to customers in Australia and New Zealand only, and only the country-level result is used. The lookup runs against a local copy of the GeoLite2 database; your IP address is not sent to any third party for this purpose. This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

We also use the country your card was issued in, which Stripe provides, for the same reason.

COOKIES WE USE

Our website uses cookies to operate and improve our services. A cookie is a small text file stored in your browser when you visit a website.

Necessary Cookies (always active):
These cookies are required for the website to function and cannot be disabled.

• _stripe_mid — Set by Stripe. Used for fraud prevention and payment session continuity. Expires in 1 year.
• _stripe_sid — Set by Stripe. Used for fraud prevention during a payment session. Expires in 30 minutes.

Analytics Cookies (optional, consent required):
These cookies are only set if you accept analytics cookies via the consent banner. They help us understand how visitors use the site.

• _ga — Set by Google Analytics. Distinguishes unique visitors. Expires in 2 years.
• _gid — Set by Google Analytics. Identifies a browsing session. Expires in 24 hours.
• _ga_B3DZT4R0ZT — Set by Firebase Analytics (Google Analytics 4). Maintains GA4 session state. Expires in 2 years.
• _ga_791GZ8W4WY — Set by Google Analytics 4. Maintains session state for our website analytics property. Expires in 2 years.

Before you choose, and if you decline:
Our analytics provider's script (Google Consent Mode) loads on every visit, but it starts in a fully denied state and stays there unless you accept. While denied it does not read or write any cookies, does not store anything on your device, and does not identify you. It sends only anonymous, cookieless signals such as the page address and whether a consent choice has been made. This lets us understand roughly how many people visit without tracking anyone who has not agreed to it. If you accept, the cookies listed above are set and normal analytics begins. If you decline, the denied state is kept and the analytics cookies above are deleted.

You can change your choice at any time using the Cookie Preferences link in the footer of any page, which reopens the consent banner. You can also opt out of Google Analytics entirely at https://tools.google.com/dlpage/gaoptout.

HOW DO WE USE YOUR PERSONAL INFORMATION?

We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, provisioning and operating your services, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:

Communicate with you, including sending transactional emails such as payment confirmations, service notifications, and alerts related to your server (for example, notifications that your offsite backup storage quota is full);

Process your server data automatically on your behalf, including performing scheduled backups where you have enabled the auto-backup feature;

Screen our orders for potential risk or fraud; and
When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

SHARING YOUR PERSONAL INFORMATION

We share your Personal Information with the following third-party service providers who help us operate our business:

Payment Processing: Stripe (https://stripe.com/en-au/privacy) - processes credit card payments and securely stores your payment methods so that recurring subscription charges and saved cards can be processed. We do not store full card numbers on our own systems.

Hosting & Database: Google Firebase (https://firebase.google.com/support/privacy) - hosts our website, databases, and user authentication.

Analytics: Google Analytics (https://www.google.com/intl/en/policies/privacy/) - helps us understand how customers use the Site. You can opt-out here: https://tools.google.com/dlpage/gaoptout

Server Infrastructure: Our game servers and Discord bots are hosted on infrastructure in Australia. Server data (including world files and configurations) may be stored on our hosting providers' systems.

MySQL Databases: If you provision a MySQL database through the control panel, the data you choose to store in it is held on our shared database infrastructure in Australia. This data is controlled by you and the plugins or mods you run, and may include player-related information such as usernames or in-game statistics. We access this data only as needed to operate, maintain, and secure the database service on your behalf.

Offsite Backup Storage: If you subscribe to our offsite backup add-on, your server backup files are stored in Google Cloud Storage (https://cloud.google.com/terms/cloud-privacy-notice) in Australia. These files are compressed archives of your server directory and are accessed only to perform backup, restore, and deletion operations on your behalf.

Email delivery: Titan Email (https://support.titan.email/hc/en-us/articles/360038535773-Titan-Privacy-Policy) delivers the emails we send you, including invoices, service notices and any marketing you have opted in to.

Advertising measurement: If you accept analytics cookies, Google Ads (https://policies.google.com/technologies/ads) receives conversion events from the same Google tag so we can tell which advertising led to a purchase. If you decline, nothing is sent.

Knowledgebase chat assistant: The chat widget on our knowledgebase sends your question, the earlier messages in that chat, and the relevant help articles to Google's Gemini service (https://policies.google.com/privacy) to write the reply. It does not send your name, email address or account details. Do not put passwords or payment details into the chat.

Review requests: We may email you a link to leave a review on Trustpilot (https://corporate.trustpilot.com/legal/for-reviewers/privacy-policy-end-user). Trustpilot only receives information if you follow the link and write a review.

Free tools: The DNS checker on our Tools page asks Google Public DNS (https://developers.google.com/speed/public-dns/privacy) and Cloudflare DNS (https://developers.cloudflare.com/1.1.1.1/privacy/public-dns-resolver/) to look up the hostname you enter. Those requests come from your browser, so your IP address and the hostname reach Google and Cloudflare; both delete the address within two days. Our status page at status.mchosts.com.au is served through Cloudflare (https://www.cloudflare.com/privacypolicy/), which sees the IP address of anyone who visits it.

Modpack platforms: When you install a modpack we look it up on CurseForge (https://legal.overwolf.com/docs/overwolf/platform/platform-privacy-policy/) or Modrinth (https://modrinth.com/legal/privacy) from our servers. We send the pack name and version, not anything about you.

Discord bots: If you host a Discord bot, your bot connects to Discord (https://discord.com/privacy) with your own bot's token, and Discord receives whatever your bot sends it. We keep your bot's token and the other settings you give it on your server, where they are included in your server's backups, and we use them only to run your bot. When you set up one of our premade bots, your browser asks GitHub (https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement) for the bot's latest release, so your IP address reaches GitHub. Your server then downloads the bot and the packages it needs from GitHub and from public package registries. We do not send any of them your name, email address or account details.

Hytale account service: If you run a Hytale server, you sign it in to Hytale's account service, run by Hypixel Studios Canada Inc. (https://hytale.com/privacy). Your server then stays in contact with that service while it runs, to keep its session alive and to check each player who joins. Hypixel receives your server's sign-in token and handles the sign-in of your players through the game itself. We do not send Hypixel your name, email address or account details.

Game online services: Most games check the players who join, list servers and run crossplay through their publisher's own online services, such as Steam, Xbox network, Microsoft's PlayFab for Valheim crossplay and Epic Online Services for ARK crossplay, and Wube Software's own services for Factorio, which check each player who joins, list your server when you switch the public listing on and supply the mods you install. When your server runs, the game software contacts those services itself. They receive what the game sends them, such as your server's name and address and the connections of players who join. We do not send them your name, email address or account details. An ARK server also runs BattlEye anti-cheat unless you turn it off; BattlEye's program on each player's computer checks that computer and reports to BattlEye Innovations in Germany and to the game's publisher, under BattlEye's own privacy policy (https://www.battleye.com/privacy-policy/). We receive nothing from it. A 7 Days to Die server registers with Epic Online Services and Steam when it starts, and uses Epic Online Services for crossplay with PlayStation and Xbox if you turn crossplay on. It also runs EasyAntiCheat, part of Epic Online Services, unless you turn it off. EasyAntiCheat's program on each player's computer checks that computer for cheating, as the licence agreement The Fun Pimps publish for the game describes (https://7daystodie.com/eula).

Your players: Your server files, logs and databases contain information about the players who join your server, such as usernames, UUIDs and IP addresses. That information is controlled by you. We store it on your behalf and access it only to operate, back up, restore and secure your server. On a Hytale server, players are identified by their Hytale account, so their account ID and display name appear in your server's files and in the control panel. If you list a Factorio server in the game's public browser, the names of the players on it are shown there to anyone browsing. If you host a Discord bot, the same applies to what your bot keeps about the members of your Discord servers, such as their user IDs, names, messages and, for some bots, email addresses.

These third parties are contractually obligated to use your information only for the purposes we specify and to protect your information with appropriate security measures.

We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

We do not sell, trade, or rent your personal information to third parties for their own marketing or commercial purposes.

OVERSEAS DISCLOSURE

Some of the providers we use store or process information outside Australia. Stripe processes payment information in the United States and India. Firebase Authentication, which handles sign-in, runs in the United States. Google Analytics and Google Ads process the analytics and advertising data described above in the United States. Questions you type into the knowledgebase chat assistant are sent to Google's Gemini service, which may process them in any country where Google operates. Hytale's account service is run from Canada and may process information in the United States, the United Kingdom and the European Union; it receives your Hytale server's sign-in token as described above. Wube Software Ltd, which runs Factorio's services, is a United Kingdom company and may process your Factorio server's details, the account you enter and your players' sign-ins outside Australia. Games' own online services, such as Steam, Xbox network, PlayFab and Epic Online Services (United States), and BattlEye (Germany), may handle your server's details and your players' connections outside Australia. Your account records, your game server files, your databases and your off-site backups stay in Australia.

Before we send information overseas we take reasonable steps, including contractual terms with each provider, to make sure it is handled in a way consistent with the Australian Privacy Principles.

These locations come from each provider's published privacy terms, linked in the section above, at the date of this policy. Providers can change where they process data; we update this section when we learn of a change.

DATA BREACH NOTIFICATION

In the event of a data breach that is likely to result in serious harm to you, we will notify you and, where required, the Office of the Australian Information Commissioner (OAIC) as soon as practicable. We will provide information about the breach, the kind of information involved, and steps you can take to mitigate potential harm. We maintain security measures designed to protect your information and regularly review our security practices.

DO NOT TRACK

Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

AUTOMATED DECISIONS

A few decisions about your account are made by software without a person reviewing them first.

At checkout we use your IP address to estimate your country. If it is clearly outside Australia and New Zealand, checkout is refused, because we sell to customers in those two countries only. If the country cannot be determined, checkout goes ahead.

We also check which country your card was issued in. If it was issued outside Australia and New Zealand, the card is refused before anything is charged. If the card does not show a country, it is accepted.

Stripe's fraud systems may decline a payment or block a card automatically.

If a subscription payment fails and Stripe's retries also fail, the subscription is cancelled and your server is shut down and removed automatically. We email you before this happens.

These decisions use your IP address, your payment details and your payment history. If you think one of them was wrong, open a support ticket and a person will look at it.

YOUR RIGHTS

Under Australian privacy law and GDPR (if applicable), you have the following rights regarding your personal information:

Access: You have the right to access the personal information we hold about you.

Correction: You can request that we correct any inaccurate or incomplete personal information.

Deletion: You can request that we delete your personal information, subject to certain exceptions (e.g., legal obligations). You can request account deletion through your My Account page on the Site.

Data Portability: You can request a copy of your personal information in a structured, commonly used format.

Withdrawal of Consent: Where we rely on consent to process your information, you can withdraw that consent at any time. For analytics cookies specifically, use the Cookie Preferences link in the footer of any page to reopen the consent banner and change your choice.

Marketing email: Every marketing email we send has an unsubscribe link, and you can turn marketing email off in My Account. Invoices, service notices and support replies are still sent.

To exercise any of these rights, please contact us at support@requiemtech.com.au or use the My Account page on our website. We will respond to your request within 30 days.

If you are a European resident, we note that we are processing your information to fulfill contracts we have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests. Your information may be transferred outside of Europe, including to Australia.

DATA RETENTION

We keep billing records, including your name, email address, billing address and invoices, for five years after each transaction, because Australian tax law requires it. We keep your account details while your account is open. When you ask to close your account, it is deleted 30 days after your request, along with your support tickets and your payment-provider customer record. The billing records above are kept for the five-year period even after your account is closed.

Server data and backup files (local and offsite) are retained for the duration of your active subscription. Upon cancellation or termination of your service or offsite backup add-on, server data and all associated backup files will be permanently deleted within 30 days. Data stored in any MySQL database is deleted when you delete that database, or upon cancellation or termination of your service. You may request early deletion through the control panel or by contacting us at support@requiemtech.com.au.

CHANGES

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

COMPLAINTS

If you think we have mishandled your personal information, email support@requiemtech.com.au or open a support ticket. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner at https://www.oaic.gov.au.

CONTACT US

For more information about our privacy practices, or if you have questions, please contact us by e-mail at support@requiemtech.com.au.