Privacy Policy

KOVA is operated from California, USA. This notice follows your information through each stage of dealing with us: visiting kova.host, using ourcustomer panel, running a hosted Arma Reforger server, and connecting our Discord integrations. For privacy requests, emailprivacy@kova.host or message a staff member on Discord. For hosting support, usesupport@kova.host.

KOVA does not sell your personal information, does not share it for targeted advertising, and collects only what running the service requires.The recipients listed below receive information for operational reasons only. In the 12 months before this notice we have not sold or shared personal information, in the sense the CCPA/CPRA gives those terms, and that includes information about consumers under 16.

Visiting the site and applying for a server

When you visit, our systems record the request, your browser's user-agent string, a coarse country location, and Cloudflare Turnstile tokens. These automatic records let us filter spam, block attacks, and keep the site up. Cloudflare Web Analytics counts page views in aggregate, without cookies, fingerprinting, or tracking you across other sites.

When you apply, you give us your email address, your Discord handle or ID, your community's name, the tier you want, your expected player count, and your preferred region. Setting up an account adds a panel username. Staff use these details to confirm capacity, provision your server, give you access, and reply to you. Applications are stored in Cloudflare Workers KV, and a copy is posted to a private staff channel on Discord for follow-up.

kova.host sets no tracking cookies and shows no cookie banner, because none is needed. The panel sets only the essential cookies that keep you signed in and protect requests against forgery. Cloudflare may set a security cookie to tell people from bots. There are no advertising cookies and no third-party analytics cookies. Because we track nobody across other sites, every visitor is treated as if Do Not Track or Global Privacy Control were switched on.

Paying for hosting and hearing from us

Payment details go straight to Stripe. What KOVA receives is your billing identity and history: the name on the card, the billing address, the card brand and last four digits, your Stripe customer ID, and your invoices and subscription records. These come from what you enter at checkout and from Stripe's transaction data.KOVA never holds a full card number. Stripe, Inc. is an independent controller of the card data it collects, under itsown privacy notice.

We use billing records to charge renewals, retry failed payments, issue refunds, prevent fraud, and keep accounting and tax records. Your email address and the content of each message pass through our email delivery provider so that transactional email reaches you. Account email covers outages, planned maintenance, and changes to prices or terms; marketing email goes out only if you opt in. Emails, tickets, and Discord messages you send us are kept as support records.

Running your server and connecting your community

Using the panel creates an audit trail: each action, such as starting or stopping a server, changing a mod, or assigning a role, is recorded with its timestamp, the request's IP address, and the user-agent. We collect this automatically so that you can see what your team did, so that we can investigate faults, and so that we can prevent abuse. Rate limiting, Turnstile, and IP-based blocking of attacks rely on the same technical records.

A running game server produces its configuration, mod list, saved worlds, backups, and console logs. Those logs contain the in-game names and Bohemia or Steam identifiers of players who join, their connection times, and the chat or console lines the game engine writes. The panel reads them to show you a roster and diagnostics; KOVA processes them to run, back up, restore, and support your server and the player tools you configure.

As the operator of your server, you decide who joins and what your installed mods record. For these player records, KOVA acts as your service provider. It is your responsibility to give your players whatever notice your community or the applicable law requires. Server logs and diagnostics are kept for the server-data period listed below and are deleted with the server.

When you connect our Discord bot, Discord gives us your guild and channel IDs, the Discord IDs of people who use bot commands, and the messages the bot posts on your behalf. These make status updates, alerts, and commands work in your community's channels.

Across all of this, aggregate and de-identified usage data helps us improve hosting, and we may use records to meet legal obligations and to enforce thehosting agreement. We never use personal information for automated decision-making or for profiling that has legal effects.

Who else handles your information, and where it lives

Each provider below receives only what its job requires and acts on our instructions; Stripe's independent role is described above. Besides Stripe and our email delivery provider:

• Cloudflare, Inc. handles request metadata, Turnstile tokens, stored applications, and analytics, providing website hosting, content delivery, DDoS protection, and application storage on its United States and global network.
• Discord Inc. handles user, guild, and channel identifiers and bot messages for the integration, plus the application copies in our private staff channel.
• Data-centre and bare-metal providers physically house the hardware we rent or colocate, and with it your server's data at rest. They have no login to your server or your panel account.

Game servers, the panel database, and backups live on hardware in theUnited States, with a redundant copy of the panel database on a standby host. Stripe processes payments in the US. If you are outside the United States, your information is processed there.

Separately from those operational providers: professional advisers may see records for accounting or legal work; a successor would receive them if KOVA were sold or merged, and we would notify you; and courts or law enforcement may receive them under a subpoena or other valid legal process, or to protect someone from harm.

How long each record lasts

• Applications that never become an account: deleted 12 months after submission.
• Account and billing records: the life of the account, plus seven years for invoices and tax records. Stripe keeps its own records.
• Server data: worlds, saves, configuration, backups, and server logs are kept while hosting is active and deleted 72 hours after it ends. Individual backups also age out on the schedule shown in your panel.
• Panel audit logs and request logs: 12 months, for security, then deleted or reduced to aggregates.
• Support conversations: 24 months.
• Privacy request records: 24 months.
• Analytics: aggregates only.

The law or an unresolved dispute can require us to keep something longer.

How we protect it, and what we never collect

The panel is reachable over HTTPS only. Passwords are stored as hashes. Two-factor authentication is available to every customer and required for staff. Each tenant's server is isolated at the operating-system level, staff access is limited and logged, and backups are encrypted at rest. No system is perfectly secure; if a breach affects your unencrypted personal information, we will notify you as California Civil Code §1798.82 requires.

We do not collect precise geolocation, government identification, health information, biometric data, financial account numbers, or “sensitive personal information” as the CPRA defines it; card details stay with Stripe. KOVA is not aimed at children under 13 and does not knowingly collect their information. If you believe a child has given us information, emailprivacy@kova.host and we will remove it. Panel accounts require you to be at least 18, or the age of majority where you live.

Seeing, correcting, or deleting your records

California residents have the following rights under the California Consumer Privacy Act as amended by the CPRA (Civil Code §1798.100 and following). KOVA extends the same rights to everyone else on request.

• Know: ask what categories and specific pieces of personal information we hold about you, where they came from, why we use them, and which categories of recipients received them. This notice is our notice at collection; a verified request gets you your own records.
• Correct or delete: have inaccurate information fixed, or have your information deleted, subject to legal exceptions such as invoices kept for tax law and audit logs kept for security.
• Take it with you: receive your account information in a portable format. Your server files can be exported from the panel at any time while the service is active.
• No penalty: we will not refuse service, charge a different price, or lower quality because you exercised a right.
• Opt out of sale or sharing, and limit sensitive information:there is nothing to opt out of, because KOVA does neither and collects no sensitive personal information.

To make a request, email privacy@kova.hostfrom the address on your account, or message a staff member onDiscord. We acknowledge within 10 business days and respond within 45 days, extendable once by a further 45 days with notice. Requests are free unless manifestly excessive.

We verify you by matching the request to the email or Discord identity on your account; deletion requests get a confirmation link; we never ask for your password. An authorised agent may act for you with your signed permission or a power of attorney, provided we can still verify your identity. We keep a record of each request for 24 months.

Shine the Light (Civil Code §1798.83): KOVA discloses no personal information to other businesses for their own direct marketing. If you are in the EU or UK, our lawful bases are performance of the hosting contract, our legitimate interests in security and support, and legal obligations such as tax; the rights above cover your GDPR rights, and you may complain to your local supervisory authority.

When this notice changes

Every revision is posted here with a new date. For a material change we email account holders or notify you in the panel at least 14 days before it takes effect; using KOVA after that date means you accept it. Earlier versions are available on request.

Contact

KOVA, California, USA ·privacy@kova.host ·support@kova.host ·Discord