Privacy
This policy explains what personal data VPS Provider (“we”, “us”) collects when you use vpsprovider.io, create an account or rent a server, why we use it, who processes it for us, how long we keep it and how you can control it. For any privacy question write to support@vpsprovider.io. Last updated 6 November 2026.
Data you give us
When you create an account: your email address and a password, which we store only as a salted PBKDF2 hash. In the Console you can add your name, company, VAT number, billing address, country and phone number, SSH public keys, and turn on two-step verification, for which we store the secret your authenticator app uses. When you order a server: the configuration you chose (model, location, Linux distribution, billing period, quantity), the price, currency and language. When you write to support: the content of your message.
Sign in with Google
If you choose “Continue with Google”, Google shares with us your name, your email address and whether Google has verified that address (the openid, email and profile scopes). Google may also include your profile picture: we don’t store it. We use this data only to create your VPS Provider account or sign you in to it, and to send you the emails about your account and your servers. We store your email address and name in our account database. We never receive your Google password, we don’t ask for access to your Gmail, Drive, contacts or any other Google data, and we don’t keep Google access tokens after sign-in. We don’t sell this data, share it with third parties, use it for advertising, or use it to train artificial intelligence models. VPS Provider’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect VPS Provider from your Google account at any time at myaccount.google.com/connections, and delete your VPS Provider account from the Console.
Payment data
Card details are entered on Stripe’s payment page and stored by Stripe, not by us. We keep only the Stripe customer and session identifiers that let us charge the rental you agreed to, and the status of each payment.
Data collected automatically
To protect accounts from password guessing we record failed sign-in attempts together with the email address or IP address, and delete them after one day. Our hosting provider, Cloudflare, keeps technical request logs, including IP addresses, for a few days to run and secure the site. For statistics we count page views per day, page, language, country and referring site or campaign. These counts contain no IP address, no cookie and nothing that identifies you.
How we use your data
To create and secure your account; to prepare, deliver and manage the servers you rent; to charge the rentals you ordered; to send you service emails such as address confirmation, password reset, order confirmation and login details; to answer your support requests; to prevent fraud and abuse; and to meet our legal and tax obligations. The legal bases are the performance of our contract with you, our legitimate interest in keeping the service secure, and legal obligations. We don’t send marketing emails and we don’t use your data for advertising or profiling.
Who processes data for us
Cloudflare (website hosting, database and outgoing email), Stripe (payments), Google (only if you sign in with Google) and Hostinger (our support mailbox). Each one processes data only to provide its service to us. We don’t sell personal data to anyone. Some of these providers process data outside the European Union, including in the United States; those transfers rely on safeguards such as the EU Standard Contractual Clauses.
Cookies
We use only the cookies needed to keep you signed in (“sessione” and “connesso”, for up to 30 days) and a short-lived “google” cookie that lasts ten minutes during sign-in with Google. There are no tracking or advertising cookies, so no cookie banner is needed. Stripe sets its own cookies on its payment page to prevent fraud.
How long we keep data
Account data stays until you delete your account. Deleting it from the Console removes your profile, SSH keys, sessions and two-step verification immediately. If a reservation doesn’t turn into a rental, we delete its data within 12 months. Rental and billing records are kept as long as tax law requires.
Your rights
You can see and correct most of your data in the Console and delete your account there. You can also ask us to access, correct, delete, restrict or export your data, or object to its use, by writing to support@vpsprovider.io; we reply within 30 days. If you’re in the EU or UK you can complain to your data protection authority.
Security
All traffic uses HTTPS. Passwords are hashed, session cookies are HttpOnly and only their hash is stored, and email links are single-use and expire. You can protect your account further with two-step verification.
Children
Our services are for businesses and adults. We don’t knowingly collect data from anyone under 16.
Changes
If we change this policy we update the date at the top of this page, and we email account holders about significant changes.