Privacy Policy
Last updated 11 September 2026
This policy explains what information Smeltworks ("we", "us") collects when you use our website or our hosting service, and what we do with it. We keep it short because we collect little.
What we collect
- When you email us or order a VM: your name, email address, the details of what you order, and anything else you choose to tell us.
- Billing: the name and address you ask us to invoice, and payment records. We do not store card numbers; if you pay by card, the payment processor handles those.
- Service records: technical logs needed to run and secure the service, such as the IP addresses that connect to our network, resource usage of your VM (CPU, memory, disk, traffic volume), and monitoring and backup records. We do not inspect the contents of your VM or your traffic except as described in our Terms of Service.
- Website: our website sets no cookies and runs no analytics. Standard web server logs (IP address, page requested, browser type, time) are kept briefly for security.
What we use it for
- Providing, billing, and supporting the service you ordered.
- Keeping the service secure and investigating abuse or faults.
- Contacting you about your service, such as invoices, maintenance notices, or changes to terms. We do not send marketing email.
- Meeting legal obligations, such as tax record-keeping.
Who we share it with
We do not sell or rent your information. We share it only with:
- service providers we use to run the business, such as our email delivery and payment providers, and Cloudflare, whose network sits in front of our website and email;
- authorities, where the law requires us to and the request is valid.
How long we keep it
- Account and correspondence records: for as long as you are a customer and for up to 7 years afterwards where needed for tax and accounting.
- Your VM and its backups: deleted 14 days after your service ends, unless you ask us to delete them sooner.
- Web server and connection logs: typically 30 days.
Where and how it is stored
Your VM and our records are held on hardware we own in the United States; if you are outside the US, your data will be processed here. VM storage and backups are encrypted at rest, connections to our website and management systems are encrypted in transit, and administrative access is restricted to key-based authentication over a private network.
Your rights
You can ask us at any time what information we hold about you, ask us to correct it, or ask us to delete it (subject to records we must keep by law). Email [email protected] and we will respond within 30 days.
Changes
If we change this policy in a way that matters, we will email customers before the change takes effect and update the date at the top of this page.