Privacy policy
Effective date:
Who handles your information
LTRDP is a brand operated by [legal name], based at [business address], Lithuania. Contact [email protected] about this policy or your personal information.
This policy explains how we handle information connected with our website, customer accounts, payments, support, and VPS services.
We do not require identity verification to register an account. We still process the information needed to operate that account and provide the services you purchase.
Information we process
We process:
- Your email address, account identifiers, password hash, and account timestamps.
- Session information used to keep you signed in.
- Invoices, payment amounts, cryptocurrency addresses and transaction references, account-credit movements, and refund records where applicable.
- Support messages and information you choose to send us.
- VPS configuration, assigned IP addresses, provider identifiers, service dates, and encrypted initial root or Administrator credentials.
- Operational and security events associated with the website and services.
Our application logs contain selected event and request metadata, such as an account identifier, route, response status, duration, and timestamp. They are separate from support messages, billing records, and infrastructure-provider logs.
Why we use it
We use account, payment, and service information to fulfil orders, provision and manage VPSs, administer credits and renewals, and answer support requests.
We use operational and security information to diagnose faults, prevent abuse, and protect accounts and infrastructure. These activities support our legitimate interests in operating a secure hosting service.
We also process information where necessary to meet legal obligations or handle legal claims. Where processing requires consent, that consent must be obtained separately; this policy is not blanket consent to unrelated uses.
Providers involved
Our hosting infrastructure is located in Lithuania. We use hosting infrastructure providers there to support the service.
Cloudflare proxies our website traffic. It processes information passing through its network, which can include visitor IP addresses, requests, and security-related traffic information. Cloudflare’s Privacy policy.
Namecheap Private Email hosts our support mailbox. Emails you send us, including their contents and attachments, are handled through that service. Namecheap’s Privacy policy.
Some pages load website assets from jsDelivr. Your browser connects to that provider when requesting those files.
We use external blockchain services to verify cryptocurrency payments. Depending on the currency, these checks can involve invoice addresses or transaction references. Our Monero scanner obtains blockchain data from remote nodes without sending them customers’ invoice subaddresses or private wallet keys.
We use your email address to create or link the account used to manage your VPS on our Virtualizor panel.
Some providers operate internationally. Hosting the VPS in Lithuania does not mean that every website request or support message is processed only in Lithuania or the European Economic Area. You can contact us for information about recipients and applicable transfer safeguards.
Cookies
The website uses a login cookie to maintain your session for up to 30 days. On HTTPS deployments, its name is __Host-ltrdp_id. Blocking it prevents normal account sign-in.
Cloudflare may use security cookies depending on the protections enabled. Cloudflare’s cookie documentation.
Backups and retention
We back up customer-account data. We do not back up customer VPS disks or the files and databases stored inside them. You must keep your own independent VPS backups.
Account closure or VPS expiry does not automatically erase invoices, audit records, support correspondence, or existing customer-data backups.
Our application logs are periodically cleaned up using a 30-day retention cutoff and a size limit. That cleanup does not apply to every category of customer information.
We retain account and service information to administer the account and its services. Records needed for outstanding payments, disputes, or legal recordkeeping may need to remain after a service ends. Deletion requests are reviewed against those purposes and obligations; we do not promise immediate removal from every backup.
Information recorded on a public blockchain cannot be erased by LTRDP. Our Zcash payments use transparent addresses, whose transaction history is public.
Your rights
Depending on the applicable law, you can request access to your information, correction, deletion, restriction of processing, or a portable copy. You may also have the right to object to processing based on legitimate interests or withdraw consent where consent is the basis.
Contact support to exercise these rights. We may need to confirm account ownership before releasing information or making changes.
We normally respond within one month. If a lawful extension is necessary, we will explain it within that period. EDPB guidance on individual rights.
You can complain to Lithuania’s State Data Protection Inspectorate or another competent supervisory authority.