The short version
- Our website sets no cookies and uses no analytics, ad trackers, third-party scripts or third-party fonts.
- Our web server logs contain no IP addresses or referrers and are deleted after 14 days. Cloudflare processes IP addresses to protect the site.
- To order a server, we only need an email address: no name, no phone number, no ID document.
- We never sell your data or use it for advertising. We share it only with the service providers we need, or when the law requires it.
- You can access, correct, export or delete your data: use our contact form with the topic “Privacy”. We answer within 30 days.
This summary helps you read the document; the full text below is what applies.
Contents
1. Who we are
DediJet (“we”, “us”) operates dedijet.com and provides dedicated servers. This policy explains what personal data we process when you visit our website, contact us or use our services, why we process it, how long we keep it and what rights you have. We are the controller of this data.
For any privacy question or request, use our contact form and choose the topic “Privacy”. To report abuse, use our abuse form or write to abuse@dedijet.com.
2. Our approach
- We collect only what we need, and keep it only as long as we need it.
- We do not sell personal data, show advertising or build profiles.
- Our website does not track you: no cookies, no analytics, no advertising or social media trackers.
- To order a server, an email address is all we need from you.
3. Visiting our website
3.1 No cookies, analytics or third-party code
Our website sets no cookies and uses no analytics, no advertising or tracking tools, no third-party scripts and no third-party fonts. Apart from the Cloudflare security check described in section 3.4, everything our pages load comes from dedijet.com. As there is no tracking to switch off, “Do Not Track” and Global Privacy Control signals change nothing here. Details are in our Cookie Policy.
3.2 Your currency preference
If you switch our prices between US dollars and euros, your browser saves that choice in its local storage (key dj-cur, value usd or eur) so that the next pages use the same currency. The value stays on your device, is never sent to us and contains nothing that identifies you. It remains until you clear it, for example by deleting the site data for dedijet.com in your browser’s privacy settings. In a private window, it is deleted when you close the window.
3.3 Web server logs
Our web server keeps an access log so that we can keep the site working, secure and fast. Each entry contains only the time, the request (method and page address), the response status, size and time, and the user agent string of your browser. It does not record your IP address or the page you came from (the referrer). We use the log to detect errors, attacks and performance problems, and delete it after 14 days.
3.4 Cloudflare
Our website is delivered through Cloudflare, which provides our DNS, content delivery network (CDN), DDoS protection and encryption (TLS). To deliver and protect the site, Cloudflare processes your IP address and technical details of your requests. Because it handles the encrypted connection, your requests, including the forms you send us, pass through its network on their way to our servers. Cloudflare acts as our processor; see Cloudflare’s privacy policy.
Only when its bot protection is triggered, for example when a security check (a “challenge”) is shown, Cloudflare may set a strictly necessary security cookie such as __cf_bm or cf_clearance. These cookies are not used for tracking or advertising.
4. Forms you send us
Our website has forms to contact us, request a quote, report abuse and be notified when a sold-out server is back in stock.
- What we store: the fields you fill in, such as your email address, the topic and your message, are stored in our own database so that we can answer you and follow up.
- No IP addresses: we do not store the IP address of the person sending a form. To limit spam, a one-way hash of it may be kept briefly in memory for rate limiting; it is never written to our database.
- Retention: contact, quote and abuse messages are deleted after 24 months. Back-in-stock requests are deleted once we have sent the notification, or after 12 months if the server is not back in stock by then.
Abuse reports. To resolve a report, we forward the relevant details to the customer responsible for the server concerned. If you ask us to keep your identity confidential, we remove your name and email address before forwarding, unless the law requires otherwise. Reports of child sexual abuse material and other serious crimes may be passed to the competent authorities, as described in our Acceptable Use Policy.
5. When you become a customer
5.1 What we process
Our client area opens soon. When you open an account and order servers, we process:
- Account data: your email address, the only personal information required to order, and your password, stored only as a hash;
- Service data: your servers, their configuration, location, IP addresses and reverse DNS records, and your invoices;
- Payment data: the transaction IDs and cryptocurrency addresses of your payments and refunds;
- Support tickets: the messages and files you send us, and our replies.
We do not ask for your name, phone number or an identity document. We may ask for more information only when we investigate suspected fraud or abuse. If our client area ever needs other personal data, we will update this policy before collecting it.
5.2 Payments and public blockchains
A cryptocurrency transaction, including its amount, the addresses involved and its time, is recorded on a public blockchain: anyone can see it, and nobody, including us, can change or delete it. We link the transaction ID and addresses to your invoice so that we can match your payment, process refunds and keep accounting records. Because the ledger is public, anyone who knows that an address is yours may be able to see that it paid DediJet. Individual Lightning payments are not recorded on the Bitcoin blockchain.
5.3 Network and server operation data
To run our network, mitigate DDoS attacks and handle abuse, our systems process traffic metadata for your servers, such as IP addresses, ports, protocols and traffic volumes, as well as hardware health data. We use this data only for these purposes and keep it only as long as they require. We do not record or read the content of your communications.
5.4 Data stored on your servers
As a rule, we do not access the data on your servers. For personal data that you store there, you are the controller and we act only as your hosting provider (processor), under section 14 of our Terms of Service. That data stays in the location you chose.
6. Why we use your data
Where data protection law, such as the GDPR, requires a legal basis, we rely on the following:
| Purpose | Legal basis |
|---|---|
| Opening your account, delivering servers, billing, renewals and support | Performance of our contract with you |
| Answering contact messages and quote requests | Steps you ask us to take before a contract, and our legitimate interest in answering you |
| Back-in-stock notifications | Your consent, which you can withdraw at any time |
| Running the website securely: Cloudflare, logs and rate limiting | Our legitimate interest in a secure, working website |
| Preventing fraud and abuse, enforcing our Acceptable Use Policy and protecting our network | Our legitimate interests, and those of people affected by abuse |
| Keeping invoices and accounting records, and answering valid legal requests | Compliance with our legal obligations |
| Establishing or defending legal claims | Our legitimate interests |
We use your email address to run your account and services: server credentials, invoices, maintenance notices and abuse complaints. We do not send you marketing emails without your consent.
We do not profile you. Some contract steps are automated, such as delivering a server once your payment is confirmed, or suspending it when a renewal invoice is still unpaid 3 days after its due date, as set out in our Terms of Service. You can always ask for a person to review such a decision.
7. Who we share data with
We never sell personal data or share it for advertising. We share it only:
- with service providers (processors) that help us run DediJet, under contracts that require them to protect it and use it only on our instructions. Depending on the service, they include Cloudflare, the operators of the data centers that host our equipment, email delivery services and cryptocurrency payment services. We will give you the current list on request;
- with the customer concerned by an abuse report, as described in section 4;
- with authorities and courts, when the law requires it;
- with a successor that takes over the operation of DediJet, which will remain bound by this policy.
Legal requests. We check that every request from an authority is valid and lawful, and we disclose only the minimum data it requires. We tell the customer concerned before disclosing, unless the law or a court order forbids it, or an emergency involving a risk to life requires us to act first.
8. Where your data is processed
Data on your servers stays in the location you chose; we do not move it.
Our own systems, such as our website, database, email and billing, may process your data in the countries where we operate infrastructure: currently the United States, the United Kingdom, the Netherlands, Germany, Singapore and Japan. Our service providers may process it in other countries; Cloudflare, for example, operates a global network. Where the law requires safeguards for international transfers of personal data, we rely on adequacy decisions where they exist, and otherwise on standard contractual clauses or another mechanism recognized by that law.
9. How long we keep data
| Data | How long we keep it |
|---|---|
| Currency preference (on your device only) | Until you clear it |
| Web server logs (no IP addresses) | 14 days |
| IP hash used for rate limiting (in memory only) | Briefly; never written to our database |
| Contact, quote and abuse messages | 24 months |
| Back-in-stock requests | Until the notification is sent, and 12 months at most |
| Account, service, payment and support data | While your account exists, plus 12 months |
| Invoices and accounting records | As long as tax and accounting law requires |
| Data on your servers | Securely erased when the service ends |
After an account is closed, we keep its data for 12 months so that we can answer late questions and handle refunds, disputes and abuse investigations; we then delete it. We may keep specific data longer when the law requires it or to establish or defend a legal claim. Deleted data may remain in backups of our systems until those backups are overwritten.
10. How we protect your data
- Encryption in transit: our website, and our client area when it opens, are served only over HTTPS.
- Password hashing: passwords are stored only as hashes, never in readable form.
- Least privilege: team members can access a system only if their work requires it.
- Minimization: data we do not collect cannot leak; our logs and form records contain no IP addresses.
- Secure erase: the disks of every returned server are securely erased before the hardware is reused.
If a personal data breach is likely to put your rights at risk, we will inform you and the competent authorities as the law requires.
11. Your rights
Depending on the law that applies to you, you have the right to:
- access your personal data and receive a copy of it;
- have inaccurate data corrected (rectification);
- have your data deleted (erasure);
- receive your data in a structured, machine-readable format (portability);
- object to processing based on our legitimate interests;
- ask us to restrict processing while a question is being resolved;
- withdraw your consent at any time, where we rely on it; and
- lodge a complaint with a data protection supervisory authority, in particular where you live or work.
How to exercise them. Use our contact form with the topic “Privacy”. Customers can also open a ticket, including to export or delete their account data. We may ask you to confirm your request from the email address concerned, but we will not ask for an identity document. We answer within 30 days; if a complex request needs more time, where the law allows it, we tell you within those 30 days. Exercising your rights is free. Some data cannot be deleted at once, such as invoices that tax law requires us to keep.
US state privacy laws. If you live in a US state with a consumer privacy law, such as California, you have similar rights to know, correct and delete your personal information. We do not sell or share personal information as those laws define these terms, and we will not treat you differently for exercising your rights.
12. Children
Our services are not intended for children. You must be at least 18 to order (see our Terms of Service), and we do not knowingly collect personal data from anyone under 16. If you believe that a child under 16 has sent us personal data, contact us and we will delete it.
13. Changes to this policy
We will update this policy when our practices change, for example before our client area opens with its login cookie (see our Cookie Policy). The date at the top shows the current version. If a change materially affects how we use customers’ personal data, we will email account holders at least 30 days before it takes effect, unless the law requires a faster change.