Privacy Policy
Last updated: October 2, 2026 · Version 2.2
LeonW Cloud ("we", "us", "our") respects your privacy and is committed to protecting your personal data in accordance with international data protection standards, including the EU General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, store, process, and protect your information when using https://leonw.store and our hosting services.
1. Information We Collect
- Account Data: When registering, we collect your username, email address, salted password hash (bcrypt/Argon2), and linked Pterodactyl panel identifier.
- Transaction & Order Records: Payment gateway identifiers, virtual credit balance adjustments, timestamped order records, and transaction IDs (e.g. from Waffo Pancake, GMpay). We do NOT store payment card numbers, CVVs, or private cryptocurrency keys.
- Technical Logs: IP addresses, browser user agent strings, and session timestamps logged strictly for fraud prevention, server diagnostics, and platform security.
2. How We Use Your Data
- To provision, maintain, and monitor your cloud hosting and game server containers.
- To process credit deposits, deliver payment receipts, and notify you of credit expiration or renewals.
- To provide customer support and troubleshoot technical service requests.
- To detect, investigate, and prevent fraudulent transactions, automated bots, and DDoS abuse.
3. Data Sharing & Third-Party Processors
We do not sell, rent, or trade your personal data. We share data only with trusted, PCI-DSS and GDPR compliant infrastructure partners strictly necessary to operate our service:
- Waffo Pancake: PCI-DSS certified payment processor and Merchant of Record handling credit card payments.
- GMpay / Blockchain: For processing cryptocurrency transactions.
- Self-Hosted Mailcow: For delivering system security alerts, authentication emails, and support correspondence.
4. Data Retention
Active account information is maintained for as long as your account remains active. Following account deletion or cancellation, server backups and temporary logs are retained for 90 days for disaster recovery and fraud audit purposes, after which they are permanently and securely deleted.
5. Your Privacy Rights
Under applicable privacy laws, you possess the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request the erasure of your personal data ("Right to be Forgotten").
- Object to or restrict the processing of your data.
- Request data portability.
To exercise any of these rights, please email our data protection officer at support@leonw.dev. We respond to all requests within 30 days.
6. Customer Support & Contact
If you have any questions or concerns regarding this Privacy Policy, please contact us: