Privacy Policy

1. Scope

This Privacy Policy applies to:

• The public gummies.cloud website.
• The gummies.cloud customer panel and account systems.
• Managed game-server hosting.
• KVM virtual private server hosting.
• Billing, customer support, security, and abuse-prevention activities.
• Other Floatpoint services that link to this Privacy Policy.

This Privacy Policy does not govern third-party websites, game communities, applications, or other services merely because they are hosted using gummies.cloud.

2. Customer Content

Customers may upload, transmit, store, or otherwise process information through their servers, virtual machines, applications, game servers, websites, databases, backups, and other hosted workloads. We refer to this information as Customer Content.

Customer Content may include:

• Virtual-machine disks, filesystems, and memory.
• Game-server files, worlds, databases, plugins, mods, and configuration files.
• Player usernames, platform identifiers, IP addresses, chat messages, commands, and activity logs.
• Websites, applications, databases, logs, and uploaded files.
• Backups, snapshots, and restored copies of hosted systems.

Customers generally determine what Customer Content is collected and how it is used. Customers are responsible for providing any required privacy notices, obtaining any required permissions or consent, and complying with laws applicable to their hosted services.

If your information was collected through a game server, website, application, or community operated by one of our customers, you should normally contact that customer first.

3. Administrative Access to Hosted Systems

Floatpoint personnel have the technical ability to access systems hosted using gummies.cloud infrastructure.

This ability may include access to:

• Virtual-machine consoles.
• Virtual disks and filesystems.
• Files, databases, logs, and configuration.
• Running processes and system memory.
• Network and firewall configuration.
• Game-server files and control panels.
• Backups, snapshots, and recovery systems.
• Host systems and virtualization infrastructure.

This applies to both managed and unmanaged KVM services.

The term “unmanaged” refers to the level of technical support and system administration included with a service. It does not mean that a virtual machine is technically inaccessible to Floatpoint or isolated from authorized Floatpoint personnel.

Our KVM services are not designed or represented as provider-inaccessible, zero-knowledge, or privacy-focused virtual machines. Customers should not use gummies.cloud where they require infrastructure that is technically inaccessible to the hosting provider.

We may access a hosted system when reasonably necessary to:

• Provision, maintain, troubleshoot, migrate, or restore the service.
• Respond to a customer support request.
• Investigate performance, networking, or reliability issues.
• Detect or investigate security incidents, fraud, attacks, malware, or abuse.
• Enforce our Terms of Service or Acceptable Use Policy.
• Protect Floatpoint, our infrastructure, our customers, or others.
• Comply with applicable law or valid legal process.

Access is limited to personnel and contractors authorized to operate, secure, or support the relevant systems.

4. Information We Collect

4.1 Account and authentication information

When you register, sign in, or manage an account, we may collect:

• Your name.
• Email address.
• Telephone number, if provided.
• Account and organization identifiers.
• Profile information.
• Login and session information.
• Authentication method.
• Multi-factor authentication status.
• Security and account-recovery information.
• Login history and authentication events.

We use Clerk for authentication and account-management functionality. Clerk may process authentication credentials, account identifiers, session information, device information, and related security data.

We do not intend to receive or store your plaintext password.

4.2 Billing and transaction information

When you purchase a service, we may collect:

• Billing name and address.
• Business or tax information.
• Services purchased.
• Invoice and transaction history.
• Payment amount, currency, status, and date.
• Payment-provider and transaction identifiers.
• Limited payment-method information, such as card brand and the final digits of a card.

We use Stripe to process payments. Complete payment-card credentials are submitted to and processed by Stripe rather than stored directly by gummies.cloud.

Stripe may separately process payment, identity, device, transaction, and fraud-prevention information under its own privacy practices.

4.3 Service and configuration information

We collect information necessary to provision and operate services, including:

• Server names and hostnames.
• IP addresses and ports.
• Selected games, operating systems, or software images.
• CPU, memory, storage, and bandwidth allocations.
• Resource usage and performance information.
• Startup commands and environment settings.
• Access permissions and administrative changes.
• Backup, snapshot, migration, reinstall, and restoration activity.
• Actions performed through our panel or API.

4.4 Network, device, and usage information

When you access our website, panel, API, or hosted services, we or our providers may collect:

• IP address.
• Approximate location derived from an IP address.
• Browser and operating-system information.
• Device type and language.
• Requested pages and URLs.
• Referring page.
• Timestamps and response codes.
• Authentication and API activity.
• Connection attempts.
• Bandwidth and resource usage.
• DNS, proxy, firewall, routing, and denial-of-service mitigation data.
• Error, availability, diagnostic, and security information.

4.5 Support and communications

When you contact us, we may collect:

• Your name and contact information.
• Support tickets and email messages.
• Screenshots, files, or logs you provide.
• Information about billing, technical, security, or abuse issues.
• Records of actions taken to investigate or resolve your request.

Do not provide passwords, private keys, authentication tokens, or other secrets through ordinary support channels unless we specifically request them through an appropriate method.

5. Cookies and Search Performance Data

We and our providers may use cookies, local storage, and similar technologies that are necessary to:

• Keep you signed in.
• Maintain secure sessions.
• Prevent fraud and unauthorized access.
• Remember account or interface preferences.
• Operate and protect the website and customer panel.
• Route traffic and mitigate malicious activity.

Disabling required cookies may prevent login or other portions of the service from functioning.

Google Search Console

We use Google Search Console for the public-facing gummies.cloud website to understand how that website appears and performs in Google Search.

Search Console may provide information such as search-result impressions, clicks, queries, pages, general device categories, countries, indexing status, and website-health information.

We do not use Google Search Console within the authenticated customer panel.

We do not currently use advertising pixels or cross-site behavioral advertising trackers on the customer panel.

6. How We Use Information

We use information to:

• Create and administer accounts.
• Authenticate users and maintain secure sessions.
• Provision and operate hosting services.
• Process purchases, invoices, refunds, credits, and taxes.
• Provide customer support.
• Monitor performance, reliability, and resource usage.
• Maintain backups and service continuity.
• Detect and respond to fraud, attacks, malware, spam, and abuse.
• Investigate unauthorized access or violations of our policies.
• Enforce our agreements.
• Communicate about account activity, maintenance, outages, or security incidents.
• Improve our website, panel, infrastructure, and services.
• Understand the performance of our public website in search results.
• Comply with legal, accounting, tax, and regulatory obligations.
• Establish, exercise, or defend legal claims.

We may send transactional and operational messages necessary for an account or active service.

We may also send promotional messages where permitted. Promotional emails will include a method to unsubscribe.

7. How We Disclose Information

We do not sell personal information.

We do not disclose Customer Content to advertisers or use it to create advertising profiles.

7.1 Service providers

We may disclose information to providers that help operate gummies.cloud, including:

• Clerk for authentication and account management.
• Stripe for payment processing and fraud prevention.
• Cloudflare for content delivery, networking, DNS, proxying, and security.
• Data-center and colocation providers.
• Hardware, network, Internet transit, and upstream providers.
• Monitoring, logging, backup, and incident-response providers.
• Email and customer-support providers.
• Accountants, legal advisers, insurers, and other professional advisers.

These providers may receive information reasonably necessary to perform their services.

7.2 Legal process, security, and abuse

We may preserve, access, or disclose information when we reasonably believe doing so is necessary to:

• Comply with applicable law.
• Respond to a subpoena, court order, warrant, or other valid legal process.
• Respond to an emergency involving a risk of death or serious physical injury.
• Investigate fraud, attacks, unauthorized access, malware, or unlawful activity.
• Enforce our Terms of Service or Acceptable Use Policy.
• Protect our rights, infrastructure, customers, users, or the public.

Where legally permitted and reasonably appropriate, we may notify the affected customer before disclosing Customer Content.

7.3 Business transfers

Information may be disclosed or transferred in connection with a merger, financing, acquisition, sale of assets, reorganization, bankruptcy, or similar transaction.

7.4 At your direction

We may disclose information when you authorize us to do so, enable an integration, add another administrator, or otherwise direct the disclosure.

8. Data Centers and Network Routing

Customer workloads are provisioned on infrastructure located in the United States.

Our websites, customer panel, authentication systems, payment systems, security providers, and other operational services may process information through third-party infrastructure.

Portions of our website and panel are delivered or protected using Cloudflare. Traffic may pass through Cloudflare’s network before reaching Floatpoint infrastructure.

Internet traffic may also pass through upstream carriers and intermediary networks. Routes can change because of congestion, outages, security filtering, peering arrangements, or other technical conditions.

If you access our services from outside the United States, information associated with that access may be transferred to and processed in the United States. Privacy laws in the United States may differ from those of your location.

9. Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may include:

• Account and service records while an account or service remains active and for a reasonable period afterward.
• Billing, tax, and transaction records for periods required by tax, accounting, fraud-prevention, or legal obligations.
• Authentication, operational, network, security, and abuse-prevention logs for up to 24 months.
• Support communications for operational history, dispute resolution, training, and security purposes.
• Customer Content while the associated service remains active.
• Deleted Customer Content temporarily within backups, snapshots, or recovery systems until those copies are overwritten or expire through ordinary backup processes.

Information associated with a legal hold, payment dispute, chargeback, security incident, or abuse investigation may be retained for longer when reasonably necessary.

After a service is terminated, customers should not rely on Floatpoint to retain or recover Customer Content.

10. Security

We use administrative, technical, and physical measures intended to protect information, including:

• Encryption in transit where appropriate.
• Authentication and access controls.
• Network filtering and denial-of-service mitigation.
• Logging, monitoring, and security alerting.
• Backups and recovery procedures.
• Restrictions on administrative access.
• Procedures for investigating suspected security incidents.

No hosting system, network, or storage platform can be guaranteed to be completely secure.

Customers are responsible for securing their operating systems, applications, game servers, accounts, credentials, SSH keys, access tokens, firewall rules, plugins, mods, databases, Customer Content, and customer-controlled backups.

To report a suspected security issue, contact security@floatpoint.net.

11. Age Restrictions and Children’s Privacy

You must be at least 18 years old to create a gummies.cloud customer account, purchase services, or enter into an agreement with Floatpoint.

Our services are not directed to children, and we do not knowingly allow individuals under 18 to purchase services directly.

Game servers, websites, applications, and communities operated by our customers may nevertheless be accessed or used by individuals under 18.

Customers operating services used by minors are responsible for:

• Determining whether their service is directed to children.
• Providing legally required privacy notices.
• Obtaining parental consent where required.
• Properly configuring plugins, logs, chat systems, and account integrations.
• Complying with children’s privacy and safety laws applicable to their service.

Customers must not use gummies.cloud to knowingly collect personal information from children in violation of applicable law.

If we learn that an individual under 18 has directly created a customer account or purchased services, we may suspend or terminate the account. A parent or guardian may contact privacy@floatpoint.net regarding information submitted directly to us by a minor.

12. Privacy Rights and Choices

Depending on your location and applicable law, you may have the right to:

• Request access to personal information we maintain about you.
• Request correction of inaccurate information.
• Request deletion of certain information.
• Request a portable copy of certain information.
• Opt out of certain targeted advertising, sales, or sharing.
• Appeal a decision regarding a privacy request.
• Exercise privacy rights without unlawful discrimination.

Because we do not sell personal information or use it for cross-context behavioral advertising, there may be no sale or targeted-advertising activity from which to opt out.

To submit a privacy request, contact privacy@floatpoint.net.

We may need to verify your identity before completing a request. We may retain information when permitted or required for billing, security, fraud prevention, legal compliance, dispute resolution, or protection of another person’s rights.

Requests involving customer-operated services

When Floatpoint processes information solely for a hosting customer, we may refer your request to that customer. The customer is generally responsible for requests concerning its game server, website, application, or community.

13. Third-Party Services

Our services may contain links to or integrations with third-party services, games, platforms, plugins, mods, applications, or payment tools.

Those services are governed by their own privacy policies.

Customers are responsible for reviewing the privacy and security practices of third-party software they install or operate using gummies.cloud.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, providers, practices, or legal obligations.

The updated version will be posted with a revised “Last updated” date.

Where required by law or where a change is material, we may provide additional notice through the website, customer panel, email, or another appropriate method.

15. Contact Us

Questions and general inquiries may be sent to:

Floatpoint, LLC d/b/a gummies.cloud

General inquiries: office@gummies.cloud

Privacy inquiries and requests: privacy@floatpoint.net

Security reports: security@floatpoint.net