Privacy and Cookie Notice
How Computerhulp Nick, trading as Scrap Host, uses and protects personal data.
Effective 24 July 2026
Privacy requests: privacy@scraphost.com. Postal address: Box C2049, Oder 20, 2491DC Den Haag, the Netherlands.
| Area | Data | Basis | Retention |
|---|---|---|---|
| Steam identity and account | SteamID64, verified email, settings, TOTP and recovery-code records | Contract; security legitimate interests | Account lifetime; dormant accounts warned at 23 months and deleted or anonymised after 24 months |
| Authentication storage | Session token, Steam OpenID nonce, sidebar and theme preference | Requested service and functional operation | 30 days; 10 minutes; 7 days; theme until you clear it |
| Billing | Mollie customer, mandate, subscription, payment, refund and invoice records | Contract and legal obligations | 7 years, or 10 years where EU VAT/OSS rules require |
| Hosted service | Configuration, saves, world databases, mods, access-list SteamIDs and player names | Contract; customer instructions for B2B processing | While active and 30 days after termination |
| Runtime information | Join intents, observations, game state, telemetry and recent logs | Contract; security and stability | Join intents 30 minutes; observations and logs 7 days |
| Security and support | IP addresses, proxy/security logs, audit history, tickets, complaints and abuse reports | Legitimate interests; legal obligations | Ordinary logs 30 days; audit history 24 months; closed support/abuse cases 2 years |
| Email delivery | Recipient, template, delivery status and provider message ID | Contract and legitimate interests | 12 months |
We use data to authenticate customers, provide and bill for hosting, preserve saves, connect authorised players, deliver service messages, secure the platform, prevent fraud and abuse, meet accounting and legal duties, answer requests, and defend legal claims. We do not sell personal data or use it for targeted advertising.
We use the providers described in our Provider and Subprocessor List. The primary control-plane database is on our Oracle Cloud compute instance in Amsterdam. Customer saves use Cloudflare R2 with EU jurisdiction. Transactional email uses Azure with European data location. Mollie handles payments and Valve handles Steam services. Where a provider may access data outside the EEA, we use an adequacy decision, Data Privacy Framework participation, Standard Contractual Clauses, or another lawful safeguard as applicable.
scrap_session: secure login session, 30 days.steam_openid_nonce: Steam login security, about 10 minutes.sidebar_state: dashboard layout preference, 7 days.scrap-host-themelocal storage: light or dark theme until you clear it.
Depending on the circumstances, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent where consent is used. We normally respond within one month and may verify identity through your signed-in Steam account or other proportionate means. You may complain to the Dutch Data Protection Authority or the authority in your EEA country.
Customers must be adults, although minors may join a customer-operated server. We process only the player information needed for hosting and do not advertise to minors. We do not make solely automated decisions with legal or similarly significant effects. We use access controls, encryption where appropriate, restricted administration, logging, backups, and incident procedures to protect data.
We publish the effective date and notify customers directly about material changes where appropriate. Provider-list updates are published separately. Contact the privacy address for a copy of applicable transfer safeguards.