What we know about you, why, and for how long.
Last updated
The association SCP-HORIZON, at the address in the legal notice, reachable at contact@horizonhosting.fr.
For an account: an email address, a display name and the technical identifiers needed to keep a session open, the password hash included. A session adds a platform and a browser, each from a closed list of six, and never an IP address.
For the security of an account: a dated record of each change made to it and of each device signed out, carrying the same two words about the device that a session carries and nothing more.
For access to the game panel and SFTP, from your first server: an account on the panel, with your email address, your display name, a username drawn from your address, and a password encrypted so you can read it again on your account page.
For an order: the plan, the tier and the machine chosen, the region, the term with its discount and its price, the means of payment, the price paid and, when it has changed, the one the order was placed at, the language the contract was concluded in, the price changes, announced or not, with their dates, the version of the terms you accepted, the date the payment obligation was put in front of you and, where there was one, the date you asked for the service to start without waiting out the withdrawal period, the payment identifiers held by our processor, the memory, the CPU and the storage in force on the server and, when that size has changed, the one you are billed for, plan and options included, with the date of the change.
For a promo code used on an order: the code, the discount it gave (its type, its value and its duration), the date it was accepted, the date of the first payment it reduced, the date of the email announcing its end and the date it ended with the reason, the identifier of the coupon made at Stripe for a card payment, and, for each payment it reduced, its date, its length with its start and end dates, the price before the discount, what it took off and the reference of the invoice for a card payment, or of the credits movement otherwise. They are kept with the order.
For the options on an order: each option added, with its kind, its size, its price, the version of the terms accepted when adding it, its state, the date it was added, the date its removal was asked for, the date it ended and, where there was one, the date you asked to give it up. With it, where they apply: whether it was bought on a subscription paid in credits, the date of the email that announced its price, the date it ends while its removal is under way and the refund or dispute line of your credits history that took it back.
For the plan changes on an order: the plan and the machine before and after, the sizes, the monthly prices, the amount paid and its receipt, the top-up that paid it where there was one, the date of the change and the date it took effect, its state, the version of the terms accepted, the date you asked for it to take effect without waiting for the withdrawal period to end and, if you give it up, the date and time you did and what was given back to you. For an order that takes over a free server: the free order taken over. This data is kept with the order.
For version installs on a server, from the panel's Versions tab: the loader, the game version and the loader version asked for, whether a backup was asked for first, the date you accepted the publisher's licence (Minecraft's) with the panel account that accepted it, the state of the install, the step where it stopped and its dates, and the settings the server had before, which are used to go back to them. A return to the previous version is kept the same way, with the panel account that asked for it, and no licence to accept.
For mods and plugins on a server, from the panel's Mods or Plugins tab: each change asked for (an addition, an update, a removal or a return to the previous version), with the server's loader and game version, whether a backup was asked for first, the panel account that asked for it, its state, the step where it stopped and its dates and, for each file added, removed or put back, the mod or plugin, its version, the file name and the one it replaces or puts back, the reason (your request, another one that needs it, an optional dependency you ticked or an update) and whether it was actually placed, removed or put back. These changes stay with the order, even after the account is deleted. To recognise what is installed, we keep the list of jars in the mods or plugins folder (their name, size, date and fingerprint) while the server exists. Files, icons and searches go through our servers: your browser asks nothing of Modrinth, and we keep no files.
For the history in the panel's Performance tab: every five minutes while the server is running, how much processor, memory and storage it uses and its network rate received and sent, for the whole server, with the time of the reading. Nothing about your players, neither address nor username. These readings are attached to your order, and so to you, and serve only to show you these charts: GDPR article 6(1)(b). They can be seen in that tab, by you, by the people you give access to the server and by our team. They stay with the server: after a transfer to another account, its new holder also sees the earlier ones, with nothing that names you. You find them in the copy of your data, for the time the server was yours.
For the payments on an order: each collection, each refund and each reversal of a refund, with the date it happened, the period it covers, its amount as our processor reported it and the invoice reference.
For a subscription paid in credits: each period paid in advance, with its dates, its amount and what was given back on it, the last end-of-term reminder sent with the date it announced and, if you moved it to automatic renewal by card, the date you asked for it. For a subscription paid by card: the date of the email that confirmed the order, the invoice for which an email asked you to confirm a payment and, for a term longer than one month, the renewal date announced by the last email warning you of it.
For a server our team restarted or kept: the date it runs to without a payment, the date before which its files are not deleted, or the fact that their deletion is blocked.
For a free server: the game, the machine and the region, its size, the version of the terms you accepted when creating it with the date it was created, the date it first went online, the date of your last confirmation, the last reminder sent with the date it announced, the date it ended and the date it was deleted and, if it was stopped for a use the terms forbid, the date of the stop and the reason our team noted. A free server has no payment and no backup. The reason for a stop is kept for as long as the account exists, since it explains why the account can no longer create a free server, and erased with it; our team's journal of back-office actions keeps the stop and its date, without the reason.
For credits: the identifier of your customer record at our processor, each movement of your balance with its kind, its amount, the balance after it, its reference and its date, and each top-up with its amount, its state, its dates and the identifiers of its payment at our processor, what it paid for (an order, a renewal with its term, its discount and the date you asked for it to start without waiting out the withdrawal period, an option with its price, or a gift card), how that purchase ended, the language of its emails and the date of the one that confirmed it. Your saved cards stay with our processor: the site reads their brand, last four digits and expiry date when it shows them to you, and keeps none of it.
For a purchase paid in credits: a numbered receipt carrying your name, your email address, the plan, the term or, for an option, the number of days, the discount, the promo code and the price before it if there was one, the period paid for, the amount and, for a renewal, the date you asked for it to start without waiting out the withdrawal period, as they stood at the purchase, and an email confirming it.
For a card payment: a numbered invoice carrying your name, your email address, what was paid for, the period of a subscription, the amount, the promo code and the price before it if there was one, as they stood at the payment, and for a refund a credit note that cites it.
For a gift card you bought: its amount, its state, the date it was issued, the date it expires and the date its code first showed. Its code is never kept, only a hash that recognises it when it is entered.
For a credit transfer: a movement on the balance of each of the two members, linked by a shared reference. The address entered for a transfer is used to find the recipient's account and is not kept, and neither member's history shows the other's name or address. The email telling the recipient carries the sender's display name, never their address.
For a server moved from one account to another at its holder's request: the date of the transfer, the two accounts, the reason our team noted and, for a card subscription, the payment identifiers of the subscription ended, kept with the order. The server leaves with its files. The backups taken before the transfer are deleted at the transfer or, when the panel does not allow it yet (a suspended server, for one), as soon as it does: the new holder can see them until then. Its activity log does not show the new holder the name or email address of the previous one. Each of the two finds the order in the copy of their data for the time it was theirs, without the other's payments or payment identifiers, and neither email names the other. The reason refers to the previous holder's written request and the new holder's agreement, with no name or address; it is in the previous holder's copy. It stays with the order for five years after the transfer, the time during which the previous holder can bring a claim (French civil code, article 2224), even after either account is erased, then it is erased; our team's journal of back-office actions does not copy it.
For a server's address under horizonhosting.fr or horizonhosting.eu: each name it carried while it was yours, with its domain, the date it was taken and the date it was left, why it ended (a change, the server's deletion, a transfer or a removal by our team), whether it was drawn at random, the version of the terms accepted and what was published in the DNS for it; for a name our team removed, its category, the reason written to you, the date and the team member who removed it. The name is published in the DNS of our domains, hosted by OVH SAS, and readable by anyone: third-party services may keep it after its removal, out of our reach. For a name you chose, we also keep the IP address and the port you chose it from, for one year from that choice, and you find them in the copy of your data. A name is deleted one year after it left the server; a name our team removed keeps the reason written to you for five years, then only what keeps it refused until the removal is lifted.
For a message sent through the contact form: your name, your address, the topic, your text and a hash of your IP address.
For a report of illegal content, sent from the Report content page or by email to abuse@horizonhosting.fr or contact@horizonhosting.fr: what it holds, your name, your address and your good-faith statement among it, a fingerprint of your IP address if it came from the page, and our decision with its reasons. We process it to meet the obligation of article 16 of Regulation (EU) 2022/2065: article 6(1)(c) of the GDPR. We give your name to the member concerned only where strictly necessary.
For a withdrawal, sent with the Withdraw from contract here button or by email: the contract you withdraw from, the name and the address you give for the acknowledgement, the date and time it was sent, whether it reached us by the button or by email, the member of our team who typed in an email, the means of refund you choose when a card paid, the amounts the site gives back to you in credits and to the card, and the dates of the acknowledgement and of the refund. We process it to meet articles L221-21 and L221-24 of the French consumer code: article 6(1)(c) of the GDPR.
For a conversation with the site assistant: your messages and its answers, set out in the section The site assistant.
To perform the contract: article 6(1)(b) of the GDPR. An account on its own is not a contract of sale and opening one commits to nothing; holding it still rests on that basis, because the account is the service you asked for. An order adds the sale on top; a free server rests on the same basis, with no sale. A message about choosing a plan falls under the same basis, as a pre-contractual step.
Our legitimate interest, for account security, for answering a message that is not a sales enquiry, and for telling the recipient of a credit transfer who sent it, by display name: article 6(1)(f).
To meet a legal obligation: article 6(1)(c) of the GDPR. That is the basis for the accounting records we keep, among them your invoices and the receipts for your purchases in credits, which carry the customer's name (ministerial order no. 83-50/A of 3 October 1983, article 3).
Your consent, article 6(1)(a) of the GDPR and article 82 of the French Data Protection Act, for measuring our Google Ads ads, and only if you accept it in the cookie banner. The site shows no advertising, and there is no profiling and no analytics.
A message sent through the contact form is forwarded to a private Discord channel, because that is where we read it. Discord Netherlands BV and Discord Inc. are therefore recipients, and the transfer to the United States rests on the European Commission's standard contractual clauses.
A message written to the site assistant goes to Anthropic Ireland, Limited, which writes the answer with the companies of its group, among them Anthropic PBC in the United States: the section The site assistant says what goes and how long Anthropic keeps it.
Mail we send you leaves from the association's mailbox, hosted by OVH SAS inside the European Union. That provider therefore receives the address we write to and the content of the message, for delivery alone, on the basis of article 6(1)(f).
Payment is handled by Stripe, which receives what it needs to take the money, run your subscriptions and keep the cards you save.
If you accept the Google Ads cookies, Google Ireland Limited receives, on each page, its address and the identifier of the ad click that brought you, then, for each paid order, its number and amount, to tie the order to the ad. The _gcl_au cookie that carries this identifier is kept for 90 days. Google processes this data on its own account, and the transfer to Google LLC in the United States relies on the EU-US Data Privacy Framework. Withdrawing your consent, through the Cookie settings link in the footer, stops it.
Loading a page still reaches nobody but us, unless you accepted the Google Ads cookies: no font, no image and no script is requested from a third party. The other exception is paying, which loads Stripe.js, Stripe's payment script, from Stripe's servers: at the payment step of the order page, which also renews a server and pays for an option by card, when you pay for an order or confirm a payment from the My servers page, and at the payment step of the Credits tab.
Account data is kept for as long as the account exists. Deleting the account removes it at once: the record is removed, not flagged as removed, and only the backups keep a trace until they roll over, apart from what the law makes a host keep, below.
An expired session is deleted ninety days after it expired. The security record is kept as long as the account is: you read it to find out whether somebody else has been in your account, and our site is not allowed to delete a line of it.
A message sent through the contact form is deleted 365 days after it arrives; the copy in the Discord channel goes by hand. A report of illegal content is kept until we decide, then deleted one year after our decision; deleting your account, or asking for your messages to be erased, takes your name and address off it that day. A withdrawal is kept five years after it was sent, the time during which it can be disputed (French civil code, article 2224), then deleted; deleting your account detaches it from the account without deleting it, as with a receipt.
Accounting records, those tied to an order and the history of your credits with its top-ups, the gift cards you bought, your transfers and the receipts for your purchases in credits, are kept for as long as the law requires; a receipt keeps the name and the address it was issued to, and stays after the account is deleted. So do an invoice and a credit note, ten years after the close of their accounting year like any accounting record (French commercial code, article L123-22), and they are then deleted. Deleting the account removes your saved cards from our processor, except the one paying for a subscription still running, and deletes your customer record there, unless a subscription still running is attached to it.
Our staff's action log records each action taken from our administration tool, with the person who took it and, for an action on your account or your servers, the reference of the order, top-up or withdrawal concerned and, for a transfer, the account ids of both members; our site copies neither your name nor your address into it. An entry that refunds or sets an order's price is kept ten years, like accounting records (French commercial code, article L123-22); an entry that records an act that can be disputed, such as a transfer, a deletion, a server restarted or kept, a name removal or a withdrawal received by email, five years (French civil code, article 2224); any other, a name change made for you included, one year. It is deleted at the end of its period, nobody can delete it sooner, and deleting your account only takes your account id out of it: we keep it for the security of that tool and as proof of what our staff did (articles 6(1)(c) and 6(1)(f) of the GDPR).
Deleting the account also deletes a free server and its files, within minutes; its record stays, detached from the account and without the reason for a stop, like an order's. A server's version installs stay with its order in the same way: they keep the proof that the publisher's licence was accepted and, for a return, that the restore was asked for from your panel account. Mod and plugin changes stay with the order in the same way: they keep a record of what was asked for from your panel account. Your game panel account is deleted, with its username, your address and your name, within minutes of the last server on it being deleted: the panel does not delete an account that still has a server, and a server still paid for, by a card subscription that goes on, stays reachable that way until it ends.
If you had a server with us, the law makes a host keep what identifies the author of what is put online on it (French law 2004-575 of 21 June 2004, article 6, and decree 2021-1362 of 20 October 2021). When your account is deleted, your email address is kept for five years, and your display name and the fingerprint of your password for one year, with the orders of your servers, in a separate record our site writes but cannot read and that we open only on a judicial requisition. The IP address and the port you chose a server name from are kept for one year from that choice, and the panel's activity log, which notes the IP address of each action on your server, SFTP included, for one year. We keep them to meet that obligation: article 6(1)(c) of the GDPR, and deleting the account does not reach them (article 17(3)(b)).
The readings in the Performance tab are kept for 7 days, then summarised per hour (average and maximum), and that summary is kept for 90 days. They are deleted within the hour after the server is deleted, and at once with your account; a server still paid for after the account is deleted is no longer measured.
The web server's technical logs run in a fixed-size buffer with no archive: the oldest are overwritten by the newest, the faster the busier the site is.
Your server's backups and your conversations with the site assistant have their own periods, in the next two sections.
Every night we back up your whole server: the world, the configuration, the mods and the game's logs, which hold your players' usernames and IP addresses. A backup you take from the Backups tab holds the same. A free server has no backup at all, nightly or manual.
Backups are stored with OVH SAS in Roubaix, France, on storage separate from the machines that run the servers, and encrypted at rest.
During your subscription, after each successful nightly backup only those of the last 7 nights remain, 30 with the 30-day backups option. A server no longer backed up, because its subscription has ended or it is suspended, keeps its own until it is deleted. A backup you take, or one you lock through the panel's API, stays as long as you keep it. All of them are deleted with the server; after a transfer of the server to another account, those taken before the transfer are deleted too. A deleted backup can still be recovered by our team for 3 days, in case of a mistake, then is gone for good within the following week.
The assistant that opens at the bottom right of the pages is an artificial intelligence, the Claude model made by Anthropic, and not a person on our team. It answers from what this site says and from the published offers, and it can be wrong: check a price, a duration or a condition on the offers page and in the terms of sale. Its answer is not an offer: the price and the terms that apply are those the summary shows before you order.
Nothing leaves before your first message. From then on we keep the conversation: its reference, its dates, the language of the page, your messages and the assistant's answers with their times and, if you write to the team from the assistant, the reference of that message. Your IP address is used only in memory, to limit the number of messages, and is not kept with the conversation.
If you are signed in, the conversation is tied to your account: it is in the copy of your data and is erased with the account. Otherwise it is tied to no account: to get a copy of it or have it erased before its 30 days, write to contact@horizonhosting.fr quoting the conversation's reference, shown when you click Write to the team in the assistant, which you should note before closing the tab. Without it, we cannot tell which conversation is yours.
To write each answer, our server sends Anthropic your message, the earlier exchanges of the conversation and the language of the page, but nothing from your account and not your IP address. Your browser never contacts Anthropic. Our contract is with Anthropic Ireland, Limited, in Dublin, which acts for us as a processor. It keeps the messages in the United States, with the companies of its group, among them Anthropic PBC, and its own processors; the answer may be computed in another country where Anthropic runs its models. Anthropic does not use these messages to train its models and deletes them on its side within 30 days, except a message flagged for a breach of its usage policy or kept under a legal obligation. A flagged message can be kept up to two years, and Anthropic does not delete one conversation on request before its period ends. The transfer outside the European Union rests on the European Commission's standard contractual clauses, which Anthropic's data processing addendum incorporates: www.anthropic.com/legal/data-processing-addendum.
This processing rests on our legitimate interest in answering the questions you ask on the site: article 6(1)(f) of the GDPR. We delete a conversation 30 days after its last message; erasing your account erases yours with us, not the copy Anthropic keeps until its own period ends.
If you write to the team from the assistant, your name, your address and your note go as a contact form message, with the conversation's reference and its latest exchanges: they then follow that message's rules, kept 365 days, with a copy in the team's private Discord channel.
You can ask for access, correction, erasure, portability or restriction of your data, or object to processing based on our legitimate interest (article 21), by writing to contact@horizonhosting.fr.
A receipt carries your account's display name on the day of the purchase, and you can object to your name appearing on it: the display name can be changed at any time in your profile, and the next receipt takes the one you chose. A receipt already issued no longer changes: it is an accounting record the law requires us to keep, and the objection of article 21 does not reach what the law requires. An invoice follows the same rule.
If you have an account, two of those rights are buttons. Your account page gives you a copy of everything we hold about you as one file, and erases the account outright. It cannot reach the copy of each message in the private staff channel, which we delete by hand, the reason for a server transfer, kept five years as proof of the written request, the reason for a server name our staff removed, kept five years, our staff's action log for its period, your game panel account while a server remains on it, what the law makes us keep to identify the author of a content if you had a server, or our backups until they roll over.
If our answer does not satisfy you, you can complain to the CNIL.
Horizon Hosting is an independent host, with no link to any game publisher. Game names, logos and images belong to their publishers and only show which game a server runs. Not an official Minecraft service. Not approved by or associated with Mojang or Microsoft.