I keep things simple. This policy explains what minimal information I need to run the service and keep the server stable. The operating principle is straightforward: if a piece of data isn't absolutely required to host your site, I don't collect it or hold onto it in the first place.
To provision and manage your account, I need a strictly limited set of information. Nothing more is asked for, and nothing extra is stored:
There are no Google Analytics pixels, no Facebook Pixel, no Plausible, no Fathom, no Hotjar. no third-party tracking scripts of any kind on the website, in the control panel, or on any hosted domain. I don't build behavioral profiles, I don't sell data, and I never inject advertising. The data I hold is exactly what's required to keep the server online. absolutely nothing beyond that.
Your account data and hosted files live on a server I own and operate directly. While I control the server instance and all of its contents, the physical hardware, network, and power are provided by an upstream datacenter. Because I don't control their hardware or business decisions, the service could theoretically be affected by catastrophic upstream failure or changes to their terms. I do not maintain off-site backups of your data or the account database. You are solely responsible for keeping your own local backups at all times.
I use your email strictly for account-related communication. nothing more. Server logs help me diagnose technical issues, mitigate abuse, and ensure the shared environment stays stable for everyone. I don't send marketing emails, and you won't hear from me unless there's a technical or account-specific reason to reach out.
Account creation is fully automated. To prevent abuse and keep the shared server clean and usable for everyone, I actively monitor all freshly created accounts. This includes automated and manual checks on initial file uploads, DNS configurations, and resource usage during the early stages of an account's life. This monitoring is strictly for security, abuse prevention, and ensuring compliance with the Acceptable Use Policy (AUP).
I keep your account information for as long as your account remains active. Across all services, content is handled differently from logs:
Web hosting and game hosting: When an account is terminated or removed, all hosted content (files, databases, server worlds) is immediately removed. There are no backups retained after termination.
Billing area (my.waytonat.com): When an account is closed, account information is removed. The same exception applies to logs as below.
Logs: Server access logs, error logs, and authentication logs are not immediately purged when an account is closed. They persist on the server and expire over a longer period. Logs are not kept forever, but they take longer to disappear naturally.
The only third parties with any level of access to the server environment are the upstream infrastructure provider and the developers of the KeyHelp control panel software. They can access the underlying server environment but don't interact with your account dashboard or your files directly. I never share your data with marketing firms, advertisers, or data brokers. not under any circumstances.
You have full control over your data at all times. You can export your files and databases at any time via the panel or phpMyAdmin. You can close your account and trigger immediate deletion from within the dashboard whenever you choose. If you need a copy of the specific data I hold on you, or if you want the account manually deleted, open a support ticket and I'll process the request.
This policy may be updated at any time without advance warning. It is your responsibility to check this page periodically for changes. I will try my best to notify you of major updates through the dashboard, but no guarantee of advance notice is made. Continuing to use the service after changes take effect means you accept the updated policy.