Privacy Policy

FyreflyHost operates under strict data minimization. We only collect the technical data required to authenticate accounts, provision game instances, and maintain platform security.

We process the following categories of technical data:

• Authentication Data: Usernames, registered email addresses, and salted password hashes. Passwords are never transmitted or stored in plaintext.
• Session Data: Ephemeral tokens, client IP addresses at login, and browser metadata strictly used for session verification and brute-force defense.
• Server Data: Server names, assigned port configurations, and uploaded world or script assets.
• Discord OAuth (Optional): Public user ID, username, and avatar hash when voluntarily authenticating via Discord.
• Audit Telemetry: System audit records of administrative actions (instance creation, plan changes) for platform accountability.

We work with trusted infrastructure providers to deliver edge hosting and security:

• Cloudflare: Edge computing, DNS routing, DDoS mitigation, R2 object storage for custom textures, and D1 relational database storage.
• Cloudflare Turnstile: Non-invasive, privacy-preserving bot detection on authentication endpoints without tracking individual users across the web.
• Discord: OAuth identity provider when Discord sign-in is chosen by the user.

All data in transit is encrypted using modern TLS protocols. Stored data is access-controlled and retained as follows:

• Server & Config Files: Retained during active use. Deleting a server immediately removes its container and associated data from active storage.
• Session Tokens: Automatically expire after predetermined inactivity windows or immediately upon logout.
• Security Records: Core audit logs are retained as needed for dispute resolution and security investigation.

You have the right to review, update, or request the permanent deletion of your account and personal data.

To request account deletion, submit a ticket via our Community Discord. Upon verification, account data and server configurations are permanently purged.

This policy may be updated periodically to reflect operational improvements or platform changes. Material changes will be marked with an updated revision date.