Privacy policy
Last updated 8 November 2026. This explains what CheapRDP collects when you use this website and our servers, and what we do with it.
What we collect
- Account details: your email address, your name if you give one, and your password, which is stored only as a one-way hash. If you sign in with Google, we receive your email address and name from Google.
- Billing details: your invoices, balance, and the billing address you enter. Card details go straight to Stripe and never reach us.
- Server details: your servers' addresses, sizes and status, and the Administrator password, which is stored encrypted so you can view it in the dashboard.
- Support messages you send us.
- Security logs: the IP addresses of failed sign-ins and web requests, used to stop abuse and account takeovers.
We don't look at the files or programs on your server. We only access a server when you ask us to, or to investigate a specific abuse report.
Cookies
We use one cookie to keep you signed in, and your browser stores your light or dark theme choice. There are no advertising or analytics trackers on this site.
Who we share it with
- Stripe, to take payments.
- Hetzner in Germany, which provides the data centre where our servers and this website run.
- Cloudflare, which delivers this website and protects it from attacks.
- Authorities, only when the law requires it.
We never sell your data.
How long we keep it
Account and billing records are kept while your account is open, and invoices for as long as tax law requires. Failed sign-ins are forgotten after a day, and web server logs are deleted after 90 days. A deleted server's disk is wiped straight away.
Your rights
You can see and change your details in account settings. To get a copy of your data or have your account deleted, contact us. Depending on where you live, you may also have the right to complain to your data protection authority.