Who we are
QGS Hosting is a brand of AS Solutions SLLC, a company registered in Bulgaria. We are the controller of your personal data under Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.
This policy covers qgshosting.com, www.qgs.bg and their subdomains (including my.qgshosting.com, console.qgshosting.com and partners.qgshosting.com), the QGS mobile app and our Discord community.
- Company
- AS Solutions SLLC
- Owner
- Vasil Valkov
- Company #
- 207448378
- VAT #
- BG207448378
- Address
- Plovdiv 4002, Lebed St. No. 2, fl. 1, office 104
- [email protected]
For any question about your personal data, write to us by e-mail or open a support ticket.
What data we collect
We collect only the data we need to provide and bill our services, keep them secure and - with your consent - improve the website.
Account and billing
- Name, e-mail address, phone number and postal address
- Company name and VAT number, if you order as a business
- Orders, invoices, payments, credit balance and promo codes used
- Login history, IP addresses and two-factor authentication settings
Services you use
- The game servers and VPS you order, their location, settings and resource usage
- Files, mods, worlds, databases and backups you upload or create on your servers
- Console and server logs, which can contain nicknames and IP addresses of players who join your server
For the data of the players on your servers we act as a processor on your behalf - you decide what your server collects and you are responsible for it towards your players.
Support and communication
- Support tickets, e-mails and chat messages, including any attachments
- Your Discord user ID and messages, when you use our Discord server, bot or ticket system
Website and usage data
- IP address, browser and device type, language, pages visited, referring site and time of visit
- How you move through the configurator and the order steps - only with analytics consent
- The ping from your browser to our locations - kept only in your browser, to show the closest location
Partners Program and forms
- Payout details (bank account or PayPal), tax data and the statistics of your promo codes, if you join the Partners Program
- E-mail, video link and note, if you send us a clip or fill in another form
We never receive or store your full payment card number - card details go straight to the payment provider. We do not collect special categories of data (such as health or beliefs).
Why we use your data
Every use of your data has a legal basis under Art. 6(1) GDPR:
| Purpose | Legal basis |
|---|---|
| Creating your account and delivering, running and renewing your services | Performance of a contract - Art. 6(1)(b) GDPR |
| Customer support and service notices (renewals, maintenance, outages) | Performance of a contract - Art. 6(1)(b) GDPR |
| Invoices, accounting and tax records | Legal obligation - Art. 6(1)(c) GDPR |
| Security, fraud and abuse prevention, DDoS protection and backups | Legitimate interest - Art. 6(1)(f) GDPR |
| Offers and news about services similar to the ones you already use (you can opt out at any time) | Legitimate interest - Art. 6(1)(f) GDPR |
| Website analytics and improving the order process | Consent - Art. 6(1)(a) GDPR |
| Measuring the results of our advertising | Consent - Art. 6(1)(a) GDPR |
| Establishing, exercising or defending legal claims | Legitimate interest - Art. 6(1)(f) GDPR |
Without the data needed for the contract we cannot provide the service. Orders may be checked automatically for fraud; if an order is refused, you can always ask for a review by a person.
Cookies
Cookies are small text files stored in your browser. We group them in three categories and ask on your first visit which ones you allow. Necessary cookies are always on, because without them the site, cart and checkout do not work.
You can change your choice at any time from the Cookie settings link in the footer. The choice made on qgshosting.com also applies to my.qgshosting.com; on www.qgs.bg it is stored separately. Until you allow analytics, Google Analytics runs in consent mode - it sets no cookies and receives only anonymous signals without identifiers.
| Cookie | Provider | Purpose | Category | Expires |
|---|---|---|---|---|
qgs_consent | QGS | Remembers your cookie choice | Necessary | 1 year |
qgs_lang | QGS | Remembers the language you chose | Necessary | 1 year |
WHMCS… | QGS (my.qgshosting.com) | Keeps you logged in and remembers your cart | Necessary | Session |
__cf_bm | Cloudflare | Protects the site from bots and attacks | Necessary | 30 minutes |
_ga, _ga_0QX5X9Q73Q | Google Analytics | Counts visits and shows which pages and order steps are used | Analytics | 2 years |
_clck, _clsk, CLID | Microsoft Clarity | Heatmaps and session recordings that show where the site is hard to use (typed text is masked) | Analytics | 1 day - 1 year |
_gcl_au | Measures which ads lead to orders | Marketing | 3 months | |
MUID | Microsoft | Links Clarity data with Microsoft advertising | Marketing | 1 year |
A few values are also kept in your browser's local storage (the ping to our locations and the list of popular games) and never leave your device. Embedded YouTube videos and the Trustpilot widget may set their provider's own cookies when you load or play them.
Who we share data with
We do not sell your personal data. We share it only with providers that help us run the services, under data processing agreements and only as much as they need:
| Recipient | Why |
|---|---|
| Data centres and server providers in Bulgaria, Romania, Germany and the USA | Hosting your services and our systems - your server is stored in the location you choose |
| Cloudflare | Website hosting, DNS, CDN and DDoS protection |
| Payment providers (listed below) | Processing your payments |
| inv.bg | Issuing invoices and credit notes |
| E-mail delivery provider | Sending service and billing e-mails |
| Google (Analytics) | Website analytics - only with your consent |
| Microsoft (Clarity) | Heatmaps and session recordings - only with your consent |
| Discord | Our community server and support bot, if you use them |
| Encrypted backup storage in the EU | Off-site backups of our systems |
We may also disclose data when the law requires it - for example to a court, the police or another authority with a valid request - or when needed to protect our rights, our customers or the public. If the company is merged or sold, your data may pass to the new owner and we will inform you in advance.
Payment providers
Payments are handled by these providers under their own privacy policies. They follow the PCI-DSS card security standard, and we never see your full card details:
- PayPal paypal.com/webapps/mpp/ua/privacy-full
- Revolut revolut.com/privacy-policy
- ePay.bg epay.bg/v3main/front/declaration
- EasyPay easypay.bg/site/?p=common-documents
- Paysera paysera.bg/v2/en-BG/legal/privacy-policy
Transfers outside the EU
We store and process your data mainly in the European Union. If you choose our New York location, your server and its data are hosted in the USA.
Some providers (for example Google, Microsoft, Cloudflare, PayPal and Discord) may process data in the USA. These transfers are based on the EU-US Data Privacy Framework or on the Standard Contractual Clauses of the European Commission.
How long we keep data
| Data | Kept for |
|---|---|
| Account and contact data | While you have an account, and up to 2 years after your last service ends |
| Invoices and accounting records | 10 years, as required by the Bulgarian Accountancy Act |
| Server files and backups | Deleted after the service is terminated; remaining backup copies are overwritten in the normal backup cycle |
| Support tickets and messages | While you have an account, and up to 2 years after that |
| Security and access logs | Up to 12 months |
| Analytics data (Google Analytics, Clarity) | Up to 14 months |
| Partners Program data | While you are a partner; payout records for 10 years |
| Clips and other form submissions | Up to 12 months |
When the period ends we delete or anonymise the data, unless we need it longer to resolve a dispute or a legal claim.
How we protect data
- Encrypted connections (HTTPS/TLS) on all our sites and panels
- Two-factor authentication available for the client area and the game panel
- Access to personal data only for staff who need it for their work
- Encrypted backups and DDoS protection on our network
No system is 100% secure. If a breach puts your data at risk, we will notify the Commission for Personal Data Protection within 72 hours and inform you without undue delay where the law requires it.
Your rights
Under the GDPR you have the right to:
- Access - get a copy of the data we hold about you
- Rectification - correct inaccurate or incomplete data (most of it you can edit yourself in the client area)
- Erasure - ask us to delete your data, unless we must keep it by law (e.g. invoices)
- Restriction - ask us to limit how we use your data
- Portability - receive your data in a commonly used electronic format
- Objection - object to processing based on legitimate interest, and to direct marketing at any time
- Withdraw consent - at any time, without affecting what was done before
To use any of these rights, open a support ticket or write to [email protected]. It is free of charge. We answer within one month (up to two more months for complex requests) and may first ask you to confirm your identity.
If you believe we process your data unlawfully, you can file a complaint with the Bulgarian Commission for Personal Data Protection (2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, www.cpdp.bg) or with the data protection authority in your EU country.
E-mails and marketing
Service e-mails (orders, invoices, renewals, maintenance) are part of the service, so we always send them. Offers and news are optional: every such e-mail has an unsubscribe link, and you can also switch them off in the client area or by contacting us.
Children
Our services are intended for people aged 18 and over, and we do not knowingly collect data from minors. If you are a parent or guardian and believe your child has given us personal data, contact us and we will delete it.
Links to other sites
Our sites link to other websites, such as game platforms, social networks and TheHostCare.com. We are not responsible for their content or privacy practices - please read their own policies.
Changes to this policy
We may update this policy when our services or the law change. The date at the top shows when the current version took effect. We will announce important changes by e-mail or with a notice on the site before they apply.