Effective date: 1 January 2026. Nemea is committed to being transparent about data. This document explains everything plainly.
Nemea is a hosting platform operated from the Netherlands. When this policy refers to "Nemea", "we", "us", or "our", it means the Nemea operating entity responsible for your data.
For the purposes of EU/EEA residents, Nemea acts as the data controller in respect of the personal data described in this policy.
When you register, we collect your email address, a hashed version of your password, and optionally your name and a billing address.
Payments are processed by Stripe. We never see or store full card numbers. Stripe provides us with a tokenised reference and basic billing details (last 4 digits, expiry, cardholder name).
We collect resource usage metrics for your services (CPU, memory, bandwidth, disk) to power your dashboard and enforce plan limits. These metrics are aggregated and do not include the content of your applications.
Our infrastructure automatically generates logs including IP addresses, timestamps, HTTP status codes, and request paths. These are used solely for security monitoring, abuse prevention, and diagnosing platform issues.
When you contact us, we retain the content of your message, your email address, and the context of any conversation thread.
We set a session cookie to keep you logged in. We may use a self-hosted analytics tool to understand aggregate traffic patterns. We do not use third-party advertising trackers.
We do not sell your data, share it with advertisers, or use it to train machine-learning models.
For EU/EEA residents, our lawful bases are:
| Third party | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing | Billing details (no full card numbers) |
| Cloudflare | DDoS protection and CDN | IP addresses, request headers |
| Email provider | Transactional email | Your email address, message content |
We do not share data with any other third parties except where required by law or a valid court order, in which case we will notify you unless prohibited from doing so.
Under GDPR you have the right to:
To exercise any of these rights, email privacy@nemea.uk or contact us via Discord. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
| Cookie | Purpose | Duration |
|---|---|---|
nemea_session | Keeps you logged in to the control panel | Session / 30 days |
nemea_csrf | CSRF protection on forms | Session |
We do not set advertising cookies or cross-site tracking cookies. You can disable cookies in your browser but the control panel will not function without the session cookie.
Our primary infrastructure is located in the EU/EEA. Some sub-processors (notably Stripe and Cloudflare) may process data outside the EEA. Where this occurs, transfers are governed by Standard Contractual Clauses approved by the European Commission, or equivalent safeguards.
Nemea is not intended for users under 13 years of age. We do not knowingly collect personal data from children. If you believe a minor has created an account, contact us immediately and we will delete the data.
We will notify you by email at least 14 days before any material change takes effect. Minor clarifications may be made without notice. The date at the top of this page always reflects the current version.
Questions, requests, or concerns about this policy: