Privacy Policy
Last updated: September 2026
This describes what Javer Studios collects when you use Javer Webhost, Simple Hosting, or Javer Game Host, and why. We try to collect only what the service actually needs to run.
What we collect
| Data | Why |
|---|---|
| Email address | Account identification, login, sending verification/security emails |
| Password (hashed, never plaintext) | Login authentication |
| IP address + timestamp on login attempts | Security — detecting abuse, account lockout after repeated failures |
| Two-factor auth secret, if you enable it | Login security |
| Google account ID/email, if you link Google sign-in | Alternate login method |
| GitHub access token, if you connect GitHub | Listing your repos and pulling code when you deploy — scoped to your own repos only |
| Stripe customer/subscription ID | Billing — we never receive or store your actual card number; Stripe handles that |
| Whatever you deploy (code, files, environment variables) | That's the product — running your app/server |
| The mail in your mailboxes, if you use email hosting | That's the product — receiving, storing and sending your mail. Mailbox passwords are stored hashed, never in plaintext |
Third parties we use
We rely on a small number of specific providers to run the service, and share only what each one needs:
- Stripe — payment processing. Handles your card details directly; we never see them.
- Resend — sends transactional email (email verification, login codes, security notifications). Receives your email address and the message content.
- Cloudflare — CDN, DDoS protection, and the tunnel that routes traffic to our servers. Sees traffic metadata as part of normal request routing, same as any site behind Cloudflare. Also stores the messages you send us through our support and contact forms, and runs our AI support assistant.
- Akamai (Linode) — a server we rent in Tokyo and run ourselves. It stores the mail in your mailboxes if you use email hosting, and relays player traffic to Javer Game Host servers.
- Oracle Cloud — a server we rent in Tokyo and run ourselves. It holds our encrypted offsite backups, and relays some network traffic for Javer Webhost virtual machines.
- name.com — the registrar for domains you buy through us. It receives the domain name only: we register every domain under Javer's own account and contact details, with WHOIS privacy turned on, so your personal details are not sent to name.com or published in WHOIS.
- Google / GitHub — only if you choose to link them for sign-in or repo access.
We don't sell your data, and we don't share it with anyone beyond what's listed here and what's needed to operate the service or comply with the law.
Where your data lives
Every server we run is in Tokyo, Japan. Your account, apps, sites, databases, virtual machines and game servers run on dedicated hardware we operate ourselves. A few parts run on servers we rent from cloud providers and run ourselves: email hosting and our traffic relays on Akamai (Linode), and encrypted offsite backups on Oracle Cloud. Backups are kept for disaster-recovery purposes.
Your controls
- Change your password or enable/disable two-factor authentication anytime from Settings.
- Disconnect Google or GitHub anytime from Settings — this revokes our access to that account.
- Cancel a paid subscription anytime from the Billing page.
- Remove a mailbox, or turn mail off for a domain, anytime from the Domains page. A removed mailbox's mail is kept for 30 days so it can be restored if you ask, then deleted permanently. If a domain expires and is not renewed, its mailboxes are removed 30 days after it expires, and the same 30 days then apply.
- Request account deletion by emailing [email protected] — we'll remove your account and associated data, except where we're required to retain billing records for legal/tax purposes.
Cookies
The panel uses cookies strictly for keeping you logged in (session refresh token and a CSRF protection token) — not for tracking or advertising.
Changes
We may update this policy as the product evolves. Material changes will be posted here with an updated date.
Contact
Questions about this policy or your data: [email protected].