{"url":"https://nexovirt.com/privacy","title":"Privacy Policy · NexoVirt","description":"NexoVirt privacy policy: what data we process, cookies and your rights.","markdown_url":"https://nexovirt.com/privacy.md","sections":[{"heading":"Privacy Policy for nexovirt.com","content":"Last updated: July 2026\n\nProtecting your data matters to us. This policy explains which personal data we process when you visit and use NexoVirt. We only collect what is needed to run the site, to register an account and, if you use a paid plan, to process payments. We use only **cookieless analytics** (self-hosted Plausible) that stores no personal data: no advertising cookies, no cross-site tracking and no profiling."},{"heading":"1. Controller","content":"The controller responsible for data processing on this website is:\n**Bjarne Arik Fomferra** – NexoVirt\nc/o SourceArt\nFritz-Thiele-Straße 3\n28279 Bremen, Germany\nEmail: <hello@nexovirt.com>\nNexoVirt is a product of [Nucez Software](https://nucez.com/)."},{"heading":"2. Hosting & server logs","content":"The website and customer portal run on a virtual private server hosted by **IONOS SE** (Elgendorfer Str. 57, 56410 Montabaur, Germany) in an EU data centre, managed with the Plesk control panel. Traffic is routed through **Cloudflare** (Cloudflare, Inc., USA) as a content-delivery network and reverse proxy for delivery, attack protection and reliability. When you open the site, technical access data is processed in server log files:\n\n- shortened / anonymised IP address\n- date and time of the request\n- requested resource / page\n- HTTP status code and amount of data transferred\n- referrer URL and browser type/version (user agent)\n\nThe legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure, stable website). Log files are deleted after a short time unless needed to investigate faults or abuse. Data-processing agreements (Art. 28 GDPR) are in place with IONOS (EU) and with Cloudflare; transfers to the USA via Cloudflare are covered by the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework."},{"heading":"3. Cookies","content":"We set only strictly necessary cookies (Art. 6(1)(f) GDPR). We do not use any **tracking cookies**: no analytics, statistics or marketing cookies. Only the following necessary cookies are used:\n\n| Cookie | Purpose | Category | Lifetime |\n|---|---|---|---|\n| `ci_session` | Session / technical operation (incl. login) | Necessary | 2 hours |\n| `csrf_cookie_name` | Protection against cross-site request forgery | Necessary | 2 hours |\n| `nx_consent` | Stores your cookie consent choice | Necessary | 180 days |\n| `nx_theme` | Light/dark mode | Necessary | 1 year |\n| `__cf_bm` | Cloudflare bot-management / security (set by Cloudflare, not by us) | Necessary | ~30 minutes |\n\nThe `__cf_bm` cookie is set automatically by our reverse proxy Cloudflare to distinguish humans from bots and protect the site; it does not track you across other websites. For web analytics we run our own **self-hosted, cookieless** Plausible instance: it collects only aggregated, anonymized statistics (page views, referrers, country derived from a truncated IP address), stores no personal data or cross-site identifiers, and is processed on the basis of our legitimate interest in understanding site usage (Art. 6(1)(f) GDPR)."},{"heading":"4. Registration & account","content":"When you create an account, we process the data you provide, in particular your **email address, name/username and a password** (the password is only ever stored as a cryptographic hash, never in clear text). We use this data to provide your account, authenticate you, grant access to the service and send the emails required for the service (e.g. confirmation, login and service messages).\n\nThe legal basis is Art. 6(1)(b) GDPR (pre-contractual measures and performance of the usage relationship). Account data is stored for as long as your account exists and removed afterwards unless statutory retention obligations apply.\n\nWhen you use the **customer portal**, we additionally process the data required to provision and manage the servers you create, for example any SSH public keys you add and the metadata of your VMs/containers (name, resources, status, IP). This is processed to deliver the service (Art. 6(1)(b) GDPR) and is deleted when you remove the resource or your account."},{"heading":"5. Payments via Stripe","content":"If you use a paid plan, payments are handled by the payment provider **Stripe** (Stripe Payments Europe, Ltd., Ireland; where applicable Stripe, Inc., USA). The data required for payment (e.g. name, email address, billing data and payment/card details) is collected and processed directly by Stripe; we do not store full card data. The legal basis is Art. 6(1)(b) GDPR (performance of contract).\n\nStripe processes data partly in the USA; transfers are covered by the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework. See Stripe’s privacy policy for details: [stripe.com/privacy](https://stripe.com/privacy)."},{"heading":"6. Email","content":"Transactional and service emails (e.g. registration confirmation, security notices) are sent via an SMTP service, processing your email address and the message content. The legal basis is Art. 6(1)(b) or Art. 6(1)(f) GDPR (reliable delivery). We do not send marketing newsletters without separate consent."},{"heading":"7. Sharing with third parties","content":"Your data is only shared with the service providers named here (hosting/Cloudflare, Stripe, email delivery), acting as processors or independent controllers solely to deliver the respective service, or where we are legally required to. We do not sell data."},{"heading":"8. Your rights","content":"You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR). You can withdraw any consent at any time with future effect. Contact us at <hello@nexovirt.com>. You also have the right to lodge a complaint with a data-protection supervisory authority.\n\nThis policy describes the current processing for the service and will be updated when things change.\n\n[Back to home](https://nexovirt.com/)"}],"faq":[]}