Legal
What HostPlay GamePanel collects, why, and how it's used.
When you're given an account (admin, reseller, or client), we store your username and a securely hashed password — never the password itself. If you enable two-factor authentication, we store the TOTP secret needed to verify your codes. Your servers, their configuration (game, node, IP, port, install path), and any databases you create are linked to your account. When you take an action that changes something (creating or editing a server, a user, a node, etc.), we record which account did it and the IP address it came from.
This data is what makes the panel work: showing you your servers, enforcing reseller limits, and letting admins manage the platform. The activity log (who did what, from which IP) exists for accountability and security — to help diagnose issues or investigate abuse — not to track regular usage.
We use one type of cookie: a session cookie, created only when you log in. It's strictly functional — it keeps you signed in between pages — and is deleted when you log out or your session ends. We don't use tracking or advertising cookies, and we don't sell or share your data with third parties.
Account data, server configuration, and the activity log are kept for as long as your account is active, as part of normal platform operation. If your account is deleted, its activity log entries remain for security record-keeping, but are no longer linked to an active login.
You can see your own account details and servers at any time from the panel. If you have questions or want data removed, contact an admin.
Last updated: October 2026.