Privacy policy
This document explains in plain language how EliteHost collects, uses and protects your personal data.
Last updated: August 8, 2026
1.General provisions
EliteHost (elitehost.uz) is a platform providing hosting for Minecraft servers and Telegram bots. Below, “we”, “the platform” or “the service” means this platform. “You” or “user” means the person using the site.
By using the site, signing up or buying the service, you agree to the practices described in this policy. If you don't agree, please don't use the service.
Summary
2.What data we collect
We collect only the data needed to provide the service. We never ask for more.
| When you sign up | Name, username, email address and password. The password is never stored in plain text — it's hashed one-way with Argon2id and we can't recover it. |
|---|---|
| When signing in with Google or Discord | The provider's unique identifier, email address, name and avatar. Nothing else is taken. |
| Technical data | IP address, browser and operating system type, sign-in time. This data is needed to spot suspicious activity and protect your account. |
| Payment data | Payment amount, transaction number and the receipt you upload. WE DO NOT STORE YOUR CARD NUMBER — the transfer is made directly in your banking app. |
| Service data | Your servers' names, plans, resource usage (CPU, RAM, disk) and status. This is needed for billing and technical support. |
| Bot environment variables | Your bot token and other secret keys are encrypted with AES-256-GCM. They're decrypted only inside the container where your bot runs. Our staff can't see them. |
| Correspondence | Messages in support tickets and conversations with the AI assistant. They're kept to improve service quality. |
| Telegram account | If you connect Telegram for 2FA — your Telegram ID, username and name. We have no access to your private chats. |
Data we DON'T collect
- Card number, CVV code or bank account details
- Passport or other ID document details
- Game data inside your server or personal data of your bots' users
- Geolocation data (precise location)
- Ad pixels that track your activity on other sites
3.Why we use data
- Providing the service — creating your account, launching and managing your servers.
- Billing — hourly billing, balance deductions and payment approval.
- Security — protecting your account from unauthorized access, spotting suspicious activity and stopping brute-force attacks.
- Support — solving your problems and answering your questions.
- Notifications — notifying you about server status, low balance and payments.
- Improving the service — analyzing resource usage to recommend more cost-effective plans.
What we DON'T do
4.Legal basis
Your data is processed under the Law of the Republic of Uzbekistan “On Personal Data”. The main legal bases are:
- Performance of contract — to perform our service agreement with you (account, servers, billing).
- Legal obligation — complying with tax and financial reporting requirements.
- Legitimate interest — keeping the platform secure and preventing fraud.
- Consent — for optional features (e.g. Telegram 2FA or marketing messages). You can withdraw consent at any time.
5.Third-party services
We use the following services to run the platform. Each gets only the minimum data it needs:
| Pterodactyl (on our own server) | Creating and managing your servers. Username and email are transmitted. This is infrastructure under our control. |
|---|---|
| Google / Discord OAuth | If you choose this method — for signing in. They give us your email and name. We send them nothing. |
| Telegram Bot API | For notifications and 2FA. Works only if you connected it. The message text is transmitted. |
| SMTP provider (Gmail, etc.) | For sending email. Your email address and the message text are transmitted. |
| Atria AI (AI assistant) | Only if you use the AI assistant. Your question and limited context (balance, number of servers) are transmitted. Passwords and API keys are NEVER transmitted. |
| Cloudflare (if connected) | DDoS protection and CDN. IP address and request metadata pass through it. |
Each of these services has its own privacy policy. You can choose not to use the AI assistant or the Telegram integration.
6.How long data is kept
| Account data | While your account is active. If you request deletion, it's deleted within 30 days. |
|---|---|
| Financial records | Payments and billing records are kept for 5 years as required by tax law (even after the account is deleted). |
| Server files | Until the server is deleted. When the balance runs out, the server is suspended, but files are kept for the period set by the admin (usually 14 days). |
| Sessions | 30 days or until you sign out. |
| Sign-in attempt log | 90 days. |
| Server metrics | 30 days. |
| System logs | 60 days. |
| Audit logs | Important actions (payment approvals, role changes) — at least 1 year, for security. |
| Support conversations | 180 days after the ticket is closed. |
7.How we protect your data
Technical safeguards:
- Passwords — hashed with the Argon2id algorithm. Not even our staff can see your password.
- Secret keys — bot tokens, API keys and SMTP passwords are encrypted with AES-256-GCM.
- Sessions — the token in your browser is stored in the database only as a hash. Even database access wouldn't let anyone steal your session.
- Encrypted connection — all traffic goes over HTTPS.
- Two-step verification — via Telegram or email (optional, but recommended).
- Access control — staff see only the data they need for their job. Every action is written to the audit log.
- Isolation — every server runs in its own Docker container.
Your responsibility
8.Your rights
You have the following rights over your data:
- Right of access — know what data is stored. Most of it is visible in the Profile section.
- Right to rectification — correct inaccurate data. You can do it yourself on the profile page.
- Right to erasure — ask us to delete your account and data (except financial records).
- Right to portability — receive your data in a machine-readable format.
- Right to object — object to certain kinds of processing.
- Right to withdraw consent — for example, disconnect the Telegram integration or opt out of marketing messages.
To exercise these rights, support contact support@elitehost.uz . We'll respond to your request within 30 days.
10.Minors
The service isn't intended for anyone under 16. If you're under 18, use it with the consent of a parent or legal guardian — the service is paid and creates financial obligations.
If we learn that we've accidentally collected data from someone under 16, we delete it immediately.
11.Changes to this policy
We may update this policy from time to time — for example, when we add a feature or the law changes. We'll announce important changes by email and a site notice at least 14 days in advance.
If you keep using the service after the changes, you accept the new terms. If you don't agree, you can delete your account.
12.Contact
For privacy questions, complaints or requests, contact us:
| support@elitehost.uz | |
| Support | elitehost.uz/support |
| Response time | Within 30 days (usually much sooner) |
If you're not satisfied with our answer, you have the right to contact the Personalization Agency under the Ministry of Digital Technologies of the Republic of Uzbekistan.