Privacy policy

GameServersPanel is operated by GameServersHub LLC, a company based in Pensacola, Florida, United States (“GameServersHub”, “we”, “us”, “our”). For the personal data of people who hold a GameServersPanel account, we are the data controller. For data about players on game servers that our customers run, the server owner is the controller and we process that data on their behalf (see the player data section below).

You can reach us about anything in this policy at [email protected].

This policy covers gameserverspanel.com and the service domains that power it, including get.gsh-servers.com (software downloads), broker.gsh-servers.com (the secure connection your machines use), and api.gsh-secure.com (game mod catalogues).

In short: We collect what we need to run the panel and nothing more. No ads, no trackers, no selling data, no marketing email.

• You sign in with Discord or Steam. We store your name, email, and avatar from that account.
• Payments are handled by Stripe. Your card number never touches our systems.
• We use essential cookies only (your sign-in session). There is no advertising or analytics tracking, so there is no cookie banner.
• Activity records (who did what, with an IP address) are kept for 90 days, then deleted automatically.
• Your game files and backups stay on your own machines. We move them when you ask us to; we do not keep copies.
• Data about players on your servers belongs to your community. You control it; we process it for you.
• We never sell personal information or share it for advertising.

Account information. When you sign in with Discord or Steam we receive and store your display name, email address (when the provider shares it), avatar image, and the provider’s account identifier, along with the sign-in tokens needed to keep your session working. We do not see or store your Discord or Steam password. If Discord community access is enabled, signing in can also add you to the GameServersHub Discord server.

Billing information. Payments are processed by Stripe. We store a reference to your Stripe customer record, your plan, and its status (for example active, trialing, or lifetime). Card numbers and full payment details are held by Stripe, not by us.

Machines and game servers. When you connect a machine, we store its name, operating system and version, hardware totals (processor cores, memory, disk size), IP addresses, the folder you chose for game files, and the latest resource readings (processor, memory, and disk usage). For each game server we store its settings, current state, version details, and recent console output so the dashboard can show you what is happening.

Activity records. Meaningful actions in the panel (starting a server, editing files, changing settings, managing bans or team access) are recorded with the account that did them and the IP address the request came from. These records exist so you can see exactly what happened on your servers and who did it. They are deleted after 90 days.

Files you manage. The file manager moves file content between your browser and your own machine. We do not keep copies of the files you browse, edit, upload, or download. The activity record notes which file was touched and for how long it was viewed, not its contents.

API tokens and connected apps. If you create API tokens or connect a third party app, we store a secure fingerprint of the token (never the token itself), its permissions, and when it was last used.

Support communications. If you email us, we keep the correspondence so we can help you and improve the service.

Player data. The panel also processes information about players on your game servers. Because you control that data, it has its own section below.

• To provide the service: signing you in, connecting your machines, running your servers, and showing you live status.
• To keep accounts and machines safe: detecting abuse, verifying actions, and keeping the activity record your team relies on.
• To bill you: managing your plan and subscription through Stripe.
• To support you: answering questions and investigating problems you report.
• To improve reliability: understanding failures through the records above.

We do not use your information for advertising, we do not build marketing profiles, we do not make automated decisions with legal effects about you, and we currently send no marketing email at all. Where European law applies, our legal bases are performance of our contract with you, our legitimate interests in securing and improving the service, compliance with legal obligations, and your consent where we ask for it.

In short: Essential cookies only. No advertising, analytics, or cross-site tracking cookies.

The list below is generated from the same registry the site itself uses, so it always matches exactly what your browser stores. If we ever add an optional category (like analytics), it stays off until you allow it, and the consent banner will ask you again because the registry changed. You can review or change your choices at any time with the Cookie settings link in the footer of every page.

__Secure-authjs.session-token

Keeps you signed in to your account. Type: cookie. Category: Essential. Lasts: 7 days.

steam_openid_state

Protects the Steam sign-in handshake against forgery. Type: cookie. Category: Essential. Lasts: a few minutes, removed when sign-in completes.

gsh_cookie_consent

Remembers the cookie choices you make in this banner. Type: cookie. Category: Essential. Lasts: 12 months.

theme

Remembers your light or dark theme, saved only when you use the theme switch. Type: local storage. Category: Essential. Lasts: until you clear it or switch back.

We share personal information only with the service providers below, only as needed to run the panel. We never sell personal information and never share it for advertising.

Stripe

Payment processing, invoices, and the billing portal.

Discord

Sign-in with Discord and, where enabled, membership in our community server.

Valve (Steam)

Sign-in with Steam and fetching your public Steam profile name and avatar.

Cloudflare

Network security and delivery for the site and software downloads.

Mod catalogues

When you browse or install mods, the search or mod identifier is sent to the relevant catalogue (for example Modrinth for Minecraft or our CurseForge mirror for ARK). Your account details are not.

ipgeolocation.io

Only if you, as a server owner, add your own ipgeolocation.io API key to look up where your players connect from. We never send player IPs there otherwise.

Hosting providers

The data center infrastructure our servers and database run on.

We may also disclose information if the law requires it (for example a court order), to protect the rights and safety of users or the public, or as part of a merger, acquisition, or sale of assets, in which case this policy continues to apply to your data.

In short: Players on your game servers are your community. You are responsible for them; we process their data on your instructions.

To power features like the players list, sessions, and bans, the panel reads your game server logs and stores information about the players who join: in-game names, platform identifiers, connection IP addresses, join and leave times, playtime, in-game chat lines that the game writes to its logs, and any bans you create (including the reason you give).

• For this data, the server owner is the data controller and GameServersHub is a processor acting on the owner's instructions.
• Server owners are responsible for telling their players how their data is used and for having a lawful basis to use these features in their region.
• Ban lists can be published at a public address so your game servers can enforce them. Only publish what you are comfortable making public.
• Player location lookups happen only if you add your own geolocation API key, and results are kept for up to 30 days.
• If you are a player and want data about you corrected or removed, contact the owner of the server you played on. If you cannot reach them, email us and we will help.

Account data

Kept while your account exists. Deleted when your account is deleted.

Activity records

Deleted automatically after 90 days. Schedule run history follows the same 90 day window.

Console output

Only a recent window is kept per server; older lines are removed automatically.

Resource readings

We keep the latest snapshot per machine and server, not a long-term history.

Player data

Kept while the related server exists, or until the owner removes it or asks us to.

Backups and game files

These live on your own machines under your own retention settings. We do not hold copies.

Billing records

Kept as required for tax and accounting law. Stripe retains payment records under its own policy.

To delete your account and its data, email us from the address on your account. We will verify the request and complete the deletion within 30 days, except for records the law requires us to keep.

• All connections to the panel and between your machines and our service are encrypted in transit.
• Your machines connect outward to us. Our software never requires an opening that lets the internet connect into your machine.
• API tokens and access credentials are stored as secure one-way fingerprints, and managed database passwords are stored encrypted.
• Remote support access to one of your machines exists only if you switch it on for that machine, is limited to a designated support account, is fully recorded in your activity log, and can be switched off by you at any time.
• Access to production systems is restricted to the people who operate the service.

No online service can promise perfect security. If we learn of a breach that affects your personal data, we will notify you and the relevant authorities as the law requires.

Wherever you live, you can always access, correct, export, or delete the personal data in your account by contacting us. Depending on your region, the law also gives you specific rights:

• European Economic Area and United Kingdom: the rights of access, rectification, erasure, restriction, data portability, and objection, the right to withdraw consent at any time, and the right to complain to your data protection authority.
• United States state privacy laws (including California): the rights to know, correct, and delete personal information, and the right not to be discriminated against for exercising them. We do not sell personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of.

To exercise any right, email [email protected] from the address linked to your account, or include enough information for us to verify it is you. We respond within the time the applicable law sets (and aim for much faster).

We are based in the United States and process data there. If you use the service from outside the United States, your information is transferred to and processed in the United States. Where the law of your region requires safeguards for that transfer (for example in the European Economic Area or the United Kingdom), we rely on recognized mechanisms such as standard contractual clauses with our service providers.

GameServersPanel is not directed to children. You must be at least 13 years old (or the minimum age for online services in your region, if higher) to create an account. We do not knowingly collect personal information from children under 13; if you believe a child has created an account, contact us and we will delete it.

We will update this policy as the service evolves. When we do, we will change the date at the top of this page, and for material changes we will give clear notice on the site before they take effect. Your continued use of the service after a change means you accept the updated policy.

Questions, requests, or concerns about privacy: email [email protected]. GameServersHub LLC, Pensacola, Florida, United States.