Last updated 5 October 2026
Privacy Policy
This Privacy Policy explains how BareSet processes personal data for the website, customer panel, dedicated hosting, billing, and support. The controller will be the entity named on the Imprint once that entity is confirmed. Contact: support@bareset.com.
1. What we process
Account and order data (email, password hash, billing name and country, plan, add-ons, paid-through dates). Connection logs (IP, time, URL, user agent) for delivery and abuse defence. Panel and IPMI metadata needed to run your machine. Ticket contents you send us.
2. Legal bases
- Art. 6(1)(b) GDPR: contract (account, order, hosting, refunds)
- Art. 6(1)(c) GDPR: legal obligations (tax and bookkeeping)
- Art. 6(1)(f) GDPR: legitimate interests (security, abuse prevention, stable hosting)
3. Cookies
The website uses a session cookie so checkout does not lose your plan selection. The panel uses a login cookie. We do not run advertising pixels on the panel.
4. Payments and mail
When checkout is live, card and wallet payments will be processed by a payment provider under their own terms. BareSet does not store full card numbers. Support mail is processed to answer your ticket.
5. Your servers
You are the operator of the services you run on the machine. Logs, customer data, and application databases on disk are your responsibility. We only see that data as the host, for providing the service and stopping abuse.
6. Retention
Access logs rotate on a short cycle (target: no later than 14 days) unless needed for a concrete incident. After you remove a machine, files remain downloadable for 14 days, then are deleted. Invoices stay for the period German tax and commercial law requires.
7. Your rights
If you are in the EU or EEA you can ask for access, rectification, erasure (where we are not required to keep invoices), restriction, portability, and objection to processing based on Art. 6(1)(f). Contact support@bareset.com. You can complain to your local data protection authority.
8. Changes
We may update this Privacy Policy. The Last updated date will change. Material changes will be announced on the website and/or by email where practicable.