What we store — and for how long
This is the complete list of personal data we hold about a customer. If something is not in this table, we do not collect it.
| Data | Why we need it | How long we keep it |
|---|---|---|
| Email address | Your login, invoices, service and security notices | Life of the account, then 30 days |
| Password | Signing in | Stored only as an Argon2id hash, never readable |
| 2FA secret | Two-factor authentication, if you enable it | Until you disable 2FA or close the account |
| PGP public key | Encrypting the emails we send you, if you add one | Until you remove it |
| Orders and invoices | Billing, renewals, refunds, accounting | As long as accounting rules require, then deleted |
| Payment records | Matching a payment to an invoice: coin, amount, transaction ID | Same as invoices |
| Server records | Running your service: assigned IPs, reverse DNS, hardware, traffic counters | Life of the service, then 30 days |
| Support tickets | Your support history | 24 months after the ticket is closed |
| Client-area sign-ins | Showing you recent logins and spotting account takeovers: time and IP address | 30 days |
| Website access logs | Keeping the site running: time, page, status code, browser type — no IP address | Rotated automatically |
What we never collect
- Your name, postal address, phone number or date of birth.
- Identity documents, selfies, utility bills or any other “proof”.
- Card numbers or bank details — we do not accept either.
- The contents of your server. We do not access your disks or inspect your traffic.
- Analytics, advertising identifiers or tracking pixels. This website sets no cookies at all.
Cookies
The public website uses no cookies, no local storage for tracking and no third-party scripts. The client area sets a single, strictly necessary session cookie when you sign in, which expires when you sign out or after a period of inactivity.
Who else handles data
- Cloudflare delivers this website and protects it against attacks. It processes connection data such as your IP address to do so. We do not use its analytics or tracking features.
- Our email provider transmits and stores the emails we exchange with you. Add a PGP key to your account and the content of our emails is encrypted end to end.
- Blockchains. Payments are recorded on public ledgers by design. Bitcoin, Ethereum and most other networks are transparent; Monero, and shielded Zcash, hide senders and amounts.
- Data-center operators host our hardware. Their staff have physical access to the racks under our procedures, but no access to customer accounts or data.
There is no payment processor: invoices are generated and matched by our own gateway.
Your server and its data
Your server is yours. We only touch the hardware for repairs — a failed disk, a faulty memory module — and log every intervention in your ticket history. When a service ends, drives are securely erased before the machine is reused: NVMe drives with a secure-erase command, hard drives by overwriting and verifying.
Requests from authorities
We disclose data only under a valid legal order from a competent authority. We check every request, challenge those that are unlawful or too broad, and notify the customer concerned unless we are legally prevented from doing so. The number of requests we receive is published in our transparency report, and our warrant canary is renewed every month.
We cannot hand over what we do not have: no identity, no IP history of your visits to this website, no content from your server.
Your rights
You can ask for a copy of your data, for corrections, or for your account to be deleted. Write from your account email to support@dedicrypto.com. We answer within 30 days; deletion covers everything except records we are legally required to keep for accounting.
How we protect it
Passwords are hashed with Argon2id, all traffic to our sites is encrypted with TLS, two-factor authentication is available for every account, and every email we send you can be PGP-encrypted. More on our security practices page.
Changes and contact
If we change this policy in a way that matters, we email you before the change takes effect. Questions: support@dedicrypto.com, PGP welcome (our key).