1. Data controller
Controller: HOSKES DESENVOLVIMENTO DE SISTEMAS LTDA, CNPJ 53.371.345/0001-18, São Paulo, SP, Brazil.
Data protection contact: privacy@hoskes.com
This Policy describes how we process personal data when you use Hoskes Hoster at https://hoskes.com.
2. Data we collect
- Account: email, username, password hash, phone (optional), profile picture URL
- OAuth: Discord identifiers and profile data when you connect Discord
- Billing: Stripe and Mercado Pago transaction identifiers, plan status (we do not store full card numbers)
- Hosting: server names, tunnel subdomains, ports, online status, friends list
- Application: device version, language preference, session tokens
- Technical: IP address, browser type, cookies, server logs
3. Purposes and legal bases
We process data to provide and improve the Service, authenticate users, operate LAN hosting features, process payments, prevent abuse, and comply with law.
Legal bases under LGPD include contract performance, legitimate interest (security, fraud prevention), consent (where required), and legal obligation.
5. International transfers
Your data may be processed on servers outside Brazil. When we transfer data internationally, we apply appropriate safeguards consistent with LGPD requirements.
6. Retention
We retain personal data while your account is active and as needed for legal, security, and billing purposes. Account data may be deleted after termination following a reasonable grace period.
You may request deletion by contacting privacy@hoskes.com.
7. Your rights (LGPD)
Under LGPD, you may request:
- Confirmation of processing and access to your data
- Correction of incomplete or inaccurate data
- Anonymization, blocking, or deletion of unnecessary or unlawfully processed data
- Portability to another provider, where applicable
- Information about sharing and refusal of consent, where consent is the basis
- Revocation of consent
8. Security
We use HTTPS, HttpOnly session cookies, access controls, and industry practices to protect data. No method is 100% secure; report concerns to security@hoskes.com.
10. Children
The Service is not directed to children under 18. We do not knowingly collect data from minors.
11. Changes
We may update this Policy. The "Last updated" date reflects the current version. Material changes will be posted on this page.
12. Contact and ANPD
Privacy: privacy@hoskes.com
You may also lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), Brazil's data protection authority.
This document is provided for transparency. It does not constitute legal advice. For formal questions, contact our legal team.