Skip to content
Game panel My CakeHosting

Privacy policy

We use as little data as possible, and only for what we need it for. Here you can read which data that is, what we use it for, how long we keep it, who we share it with and which rights you have. This is a translation; if the English and Dutch versions differ, the Dutch version prevails.

Version: 5 October 2026

Who is responsible?

CakeHosting is part of Space-Node, Sevenhuijsenlaan 7, 7608 SV Almelo, the Netherlands, Chamber of Commerce number 42164898. Space-Node is responsible for what happens to your personal data (the controller). Questions about privacy? Email info@cakehosting.net or open a ticket in My CakeHosting.

Which data do we use, what for and for how long?

Your account

Your name, email address, address, postcode, town, country and phone number, plus your company name if you enter one. We only store your password encrypted. We need these details for your account and your invoices, and to reach you if something urgent comes up with your service or your payment (performance of the contract).

How long: as long as your account exists. Want your account deleted? Just email us.

Orders, invoices and payments

What you order, the price, the VAT, your billing address and whether you have paid. Payments go through Stripe. Your card or bank details never reach us: we only see whether you paid, the type of payment method and a Stripe reference (performance of the contract and legal obligation).

How long: 7 years, because Dutch law requires us to keep our accounts that long.

Your services

Your server settings, such as the server name and location, and everything you put on it yourself, such as worlds, mods and log files (performance of the contract). If that includes data about your players, you are responsible for it and we act as your processor (section 8 of the terms of service).

How long: until your service ends. Then we delete your server. Copies in our backups disappear automatically within 30 days.

Help and contact

Your tickets, your emails to us and any attachments you send (performance of the contract, or our legitimate interest if you are not a customer yet).

How long: tickets for as long as your account exists, so we can look up earlier agreements. We keep a copy of the emails we send you for 90 days.

Your agreement when ordering, and withdrawals

When you agreed to the terms and asked us to start right away. If you withdraw from a contract, we keep your name, your email address, the contract and the moment you withdrew (legal obligation: we must be able to prove this and send you a confirmation of receipt).

How long: 7 years, just like your invoices.

Security and abuse

When you log in, we store your IP address so we can warn you when someone logs in from a new address. Changes to your account and orders are recorded in a log with the time and IP address. Our servers keep log files with IP addresses and the browser you use (legitimate interest: security and preventing abuse and fraud).

How long: server log files 14 days, the game panel activity log 90 days, the login and change log for as long as your account exists.

Requests for a dedicated server or colocation

Your name, your email address, your company name if you enter one, and what you are looking for. To prevent abuse, we also keep an unreadable code made from your IP address and the type of browser (at your request, to answer your request).

How long: up to 12 months, or longer if it leads to a contract.

What happens when you visit the website?

Without your consent, the website does not track you. Your IP address stays in our server log files for 14 days, and your visit goes through Cloudflare, which keeps the site secure and fast. We count visits with Cloudflare Web Analytics. It works without cookies and without following you; we only see totals, such as visits per page, loading time, country and browser.

Google Analytics, only with your consent

If you click Allow in the cookie banner, we also use Google Analytics to measure how you use the website and My CakeHosting: which pages you view, how you found us (for example through a search engine or a link), your device and browser, your approximate location (country and region) and whether you complete an order, with the amount. This shows us what works well and what can be better. The legal basis is your consent (article 6(1)(a) GDPR).

Google Analytics sets cookies for this (see the cookie policy) and does not store IP addresses. We do not use it for advertising: advertising features, Google signals and ad personalisation are switched off. The data stays with Google for 14 months at most. You can withdraw your consent at any time via Cookie settings at the bottom of every page; measuring then stops and we delete the Google Analytics cookies in your browser.

The support queue on the contact page only shows numbers: how many tickets are open and how quickly we reply. It contains no data about people.

Microphone on Build your cake

On the Build your cake page you can blow out the candles with your microphone. Your microphone only turns on when you press Blow with your microphone yourself and your browser gives permission. Your browser then only measures how loud the sound is, to tell whether you are blowing. Nothing is recorded, stored or sent to us or anyone else. The microphone switches off again as soon as the candles are out, after 30 seconds, when you turn it off yourself or when you leave the page.

Your cake itself stays in your browser. If you share it, it is stored as a code after the hash (#) in the link; that part of a link never reaches our server.

Who do we share your data with?

We never sell your data. We only share it with parties we need to deliver our services, and we make agreements with them on security and confidentiality (data processing agreements):

  • Stripe: payments (Ireland, with parts in the United States). Stripe is responsible itself for fraud checks and its own legal obligations.
  • Cloudflare: security and speed of the website, DNS, forwarding our email, visitor statistics and the DDoS protection of Premium servers.
  • Google: visitor statistics with Google Analytics, only if you give consent (Ireland, with parts in the United States).
  • OVHcloud: our main server in France and game servers in Europe, Canada and Singapore.
  • A data centre partner for the Premium servers in Amsterdam and in San Jose (United States).
  • Oracle Cloud: the servers for Discord bots, in the United States.
  • Hetzner: storage for our backups, in the European Union.
  • Our email provider in the Netherlands, which sends our email.
  • Discord: when a new order comes in, our team gets a message in a private channel with your name, what you ordered and the amount. Your email address is not included.
  • Our accountant, for our bookkeeping.
  • Government authorities, if the law requires us to.

Does your data leave the European Union?

Your account and invoice details are stored on our main server in France. Data only leaves the European Union in these cases:

  • You choose a server in Canada, Singapore or the United States yourself, or you rent a Discord bot. The files of that server are then stored in that country.
  • Stripe, Cloudflare, Google (only with your consent), Oracle and Discord are (partly) American companies.

For Canada, the European Commission has decided that the protection there is adequate. For American companies we rely on the EU-US Data Privacy Framework if the company has signed up to it, and otherwise on the European Commission’s standard contractual clauses. For Singapore we use the standard contractual clauses.

Are you under 18?

Then order together with your parent or guardian and read this privacy policy together. If a parent thinks we hold data about a child without their knowledge, please email us. We will sort it out together and delete what is not needed.

Which rights do you have?

You can access your data and have it corrected or deleted. You can restrict its use, object to it and receive your data in a common file format. You can change part of it yourself in My CakeHosting. For everything else, email info@cakehosting.net or open a ticket. We reply within one month, and sometimes ask you first to confirm that the request really comes from you.

We do not make decisions about you by computer alone. Stripe does check payments for fraud automatically; if Stripe refuses your payment, please contact us.

Not happy with how we handle your data? You can lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens. Of course we would rather hear from you first.

How do we protect your data?

With encrypted connections (HTTPS), passwords that are only stored encrypted, secured servers and backups. Only people who need it for their work can access customer data. If something does go wrong with your data, we report it to the Autoriteit Persoonsgegevens and, if it affects you, to you as well.

Cookies

The website, My CakeHosting and the game panel use cookies and local storage that are needed to work or to remember a choice you make yourself. Only for Google Analytics do we ask for your consent first. Our cookie policy lists exactly which ones.

Changes

We update this privacy policy when our services change. The date at the top shows which version you are reading. We also announce important changes by email.