Privacy policy

1. Controller

The controller for data processing on the websites and panels listed below within the meaning of the GDPR is:

2. Scope

This privacy policy applies to:

KaisenVPN has its own privacy policy at kaisenvpn.com/rechtliches.html.

3. Summary

• Cookies: Our websites do not set any cookies. The customer panel and the game panel use only technically necessary cookies for signing in.
• Tracking: No analytics, tracking or advertising services – neither on the websites nor in the panels.
• Fonts & third-party content: No external fonts, scripts, images or videos are loaded; all files come from our own server. This also applies to the photos, videos and logos from Unsplash, Pexels and Wikimedia Commons – they are stored with us and are not loaded from those services.
• Service providers: The websites are delivered through the Cloudflare network (section 5). Backups from the customer panel are stored by our colocation partner IP-Projects (section 8).
• Forms: The request forms only open your email program – nothing is stored or transmitted by the websites in the process.

4. Hosting & server log files

The websites run on our own server. Whenever a page is requested, the web server automatically stores information in so-called server log files: date and time of access, the page or file requested, the referrer URL (previously visited page), browser and operating system used, HTTP status code, amount of data transferred and the IP address of the requesting computer. Because the websites are delivered via Cloudflare (section 5), this is usually the IP address of a Cloudflare server rather than your own.

This processing serves to provide the websites technically and to ensure their stability and security (e.g. to fend off attacks and to analyse errors). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in operating the websites securely and without errors. The log files are rotated daily and automatically deleted after 14 days. They are not combined with other data sources.

5. Content delivery network & protection by Cloudflare

We use the Cloudflare service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare operates a global network through which our websites are delivered and protected against attacks (e.g. DDoS attacks). For this purpose, all requests to the websites pass through Cloudflare servers. In doing so, Cloudflare processes in particular your IP address, technical information about your browser and device, the addresses requested and the time and volume of access.

Cloudflare may also instruct your browser to send technical error reports about the network connection ("Network Error Logging") to Cloudflare, for example if a page could not be loaded. These reports are used solely to detect and fix connection problems.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in providing the websites quickly, reliably and securely. Cloudflare processes the data on our behalf under a data processing agreement (Art. 28 GDPR). Data may be transferred to the USA; Cloudflare is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection (Art. 45 GDPR). More information: cloudflare.com/privacypolicy.

The customer panel and the game panel are not delivered via Cloudflare.

6. Browser storage (no cookies)

We remember some settings in your browser's local storage ("localStorage"). The entries remain on your device, are not transmitted to us and do not contain any personal data:

The legal basis is § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), as the storage is strictly necessary for the service you have explicitly requested. You can delete the entries at any time in your browser settings.

7. Contact & enquiries

If you send us an email – including via the request forms on kernhosting.com (e.g. a test account in the closed beta) and kaisenplay.com (game server request, performance calculator), which merely open a prepared message in your email program – we process the information you provide (e.g. email address, name, Discord name or company, chosen game and group size, content of the message) solely to handle your enquiry. The performance calculator on kaisenplay.com runs entirely in your browser; its result only becomes part of your message if you pass it on to the request form.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or steps prior to entering into one, and otherwise Art. 6(1)(f) GDPR (legitimate interest in responding). The data is deleted once the enquiry has been dealt with, unless statutory retention obligations apply.

8. Customer panel (panel.kernhosting.com)

We provide customers and testers with a customer panel for managing vServers and web hosting. The data is processed on our own servers (backups are stored externally with our colocation partner, see below); unlike our websites, the panel is not delivered via Cloudflare. We process:

• Account data: name, username, email address (with confirmation), password (not stored in plain text) and, if you choose to add them, two-factor methods (e.g. authenticator app, passkeys), SSH keys and API tokens.
• Sign-ins & security: active sessions and sign-ins with time and information about device and browser, so that you can detect and end unauthorised access.
• Product and usage data: your vServers and web hosting packages including their configuration (e.g. domains, firewall rules, monitoring checks, startup scripts), performance data such as CPU, memory and network usage, and an activity log of actions carried out in the panel.
• Communication: emails sent by the panel (e.g. confirmations, password resets, monitoring alerts, maintenance notices) and support tickets.

This processing is necessary to provide the services; the legal basis is Art. 6(1)(b) GDPR. Logging sign-ins and actions additionally serves security purposes (Art. 6(1)(f) GDPR).

Cookies and local storage in the panel: The panel uses only technically necessary cookies for signing in and your browser's local storage for language, colour scheme and view (§ 25(2) no. 2 TDDDG). There is no tracking and there are no third-party services.

Web hosting statistics and logs: For your web hosting packages, the panel creates visitor statistics without storing IP addresses – visitors are counted using an anonymised value that is discarded after two days. Access and error logs of your websites are kept for 7 days. As the customer, you are responsible for any personal data you process yourself on your vServers or web hosting packages. We provide a data processing agreement pursuant to Art. 28 GDPR on request.

Backups: Web hosting content is backed up with encryption every night and kept as daily, weekly or monthly versions; older versions are deleted automatically. vServer backups are created according to the schedule you choose in the panel.

Where backups are stored: We do not store backups on the servers your services run on, but externally with our colocation partner, IP-Projects GmbH & Co. KG, Am Vogelherd 14, 97295 Waldbrunn, Germany. IP-Projects processes the data solely on our behalf under a data processing agreement (Art. 28 GDPR). The legal basis for the backups is Art. 6(1)(b) GDPR, as they are part of the agreed service, and our legitimate interest in keeping our services resilient (Art. 6(1)(f) GDPR).

Retention period: We store account data for as long as your account exists. You can delete your account yourself in the panel at any time; this deletes your account, sign-in data, SSH keys, two-factor methods and shares. Activity log entries that cannot be linked to you are retained. Statutory retention obligations (e.g. for invoices) remain unaffected.

Billing: During the closed beta, no payments are processed via our websites or the panel. As soon as paid orders become possible, we will add the necessary information to this privacy policy.

9. Game panel (panel.kaisenplay.com)

For KaisenPlay game servers, we provide a separate panel at panel.kaisenplay.com. Like the customer panel, it is not delivered via Cloudflare and does not load any fonts, scripts or other content from third parties. There we process the account, sign-in and security data listed in section 8 as well as your game servers including their configuration, files, console output, performance data and logs. The game panel uses only technically necessary cookies and your browser's local storage for signing in and settings (§ 25(2) no. 2 TDDDG). The legal bases, retention periods and your rights are the same as for the customer panel in section 8.

10. Discord, Trustpilot and external links

Our websites and panels contain links to our Discord server. Discord is not embedded; no data is transmitted to Discord as long as you only visit our websites. Only when you click such a link do you leave our website, and the privacy policy of the provider Discord Inc., 444 De Haro Street, Suite 200, San Francisco, CA 94107, USA applies (discord.com/privacy).

On kernhosting.com and kaisen.group we also link to our review profile on Trustpilot. Trustpilot is not embedded either: no reviews, stars or scripts are loaded from Trustpilot, and no data is transmitted to Trustpilot when you visit our websites. Only when you click the link do you go to Trustpilot, where the privacy policy of Trustpilot A/S, Pilestræde 58, 5th floor, 1112 Copenhagen K, Denmark applies (trustpilot.com – privacy).

Links between our websites and to kaisenvpn.com are ordinary links; once you switch, the privacy policy of the website you are visiting applies.

11. SSL/TLS encryption

For security reasons, the websites and panels use SSL/TLS encryption. You can recognise an encrypted connection by "https://" in your browser's address bar.

12. Your rights

You have the right at any time to:

• access the data stored about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)

You can exercise many of these rights yourself directly in the customer panel: under "Account" you can download all data stored about you as a file (access and data portability), change your details and delete your account. Otherwise, simply contact us by email.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: