privacy policy

• your email and password. the password is stored as a scrypt hash — we cannot read it, and neither can anyone who steals the database.
• your name, company and country, if you filled them in. only the email is required.
• your services: machines, dns zones, vpn peers, and the balance ledger.
• session records: when you signed in and from what browser, so you can end other sessions yourself.
• support tickets, kept as long as the account exists.

• card numbers. we do not accept cards at all, so there is nothing to store.
• the contents of your server. we do not read your disk, and we do not scan your traffic. we see only what any network operator sees: source, destination, volume.
• your root password, after you dismiss it. it is shown once and then deleted from our database.

the one exception is honest and stated in the panel: wireguard private keys are kept so that you can reopen a config on a second device. if you would rather hold the only copy, tell us and we will add your peer from your own public key.

• hostvds — the infrastructure provider whose capacity your machine runs on. they process the same data any hosting provider does. hetzner online gmbh, germany — the dns service only.
• a domain registrar, but only when you register a domain through us, and only the contact details that registry rules require.
• nobody else. we do not sell data, we do not share it with advertisers, and we have no partners who receive it.

we hand data to law enforcement only against a valid legal order, and we tell you it happened unless the order forbids it.

• account data: while the account exists, then 30 days, then deleted.
• billing ledger: kept longer, because accounting records must be retained. it holds amounts and dates, not what you ran.
• server disks: wiped when you delete the machine.
• snapshots: deleted with the machine unless you keep them yourself.
• sessions: expire after 30 days on their own.

write to hello@looz.cloud and we will export everything we hold about you, correct it, or delete the account. no form, no ticket queue, no identity theatre beyond proving you control the email.

machines in paris, amsterdam and riga are inside the eu and subject to the gdpr. if you pick dallas, kansas city, fremont or hong kong, the data leaves the eu and that protection does not follow it — choose an eu location if this matters to you. if we ever move it out of the eu, we will tell you before we do, not after.

if data is exposed, we write to affected customers within 72 hours with what happened, what was taken, and what we did about it — even when it makes us look bad, and even when nobody would have noticed.