Privacy Policy

Last Updated: September 29, 2026

vaaq.dev ("we," "us," or "our") operates the nysr.host website (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

1. Information We Collect

We collect information that is necessary to provide and improve our Service to you.

• Account Information: When you register for an account, we collect your username and email address. Your password is encrypted using a strong, one-way hashing algorithm and is never stored in plaintext.
• User Content: We store the files, code, and other data you upload to your sites ("User Content") on our servers in order to provide the hosting service.
• Authentication Tokens: Login sessions and authentication tokens are stored entirely in your browser's Local Storage. We do not use server-side sessions. This means your session data never leaves your device and is fully under your control.

2. How We Use Your Information

nysr.host uses the collected data for the following purposes:

• To operate, maintain, and provide the features of the Service.
• To manage your account, including user authentication and customer support.
• To monitor and analyze usage to improve service performance and security.
• To prevent, detect, and address technical issues or violations of our Terms of Service.

We will never sell your personal data or User Content to third parties.

3. Traffic Logs and Abuse Prevention

We collect minimal traffic logs (such as IP addresses and request patterns) strictly for the following purposes:

• Abuse Prevention: Detecting and mitigating DDoS attacks, brute-force attempts, and other malicious activity targeting our infrastructure or our users' sites.
• User Protection: Identifying unauthorized access attempts and protecting your accounts and hosted content from security threats.
• Service Integrity: Ensuring fair resource usage and preventing exploitation of our platform.

These logs are not used for advertising, profiling, or sold to third parties. They are retained for a limited period and are only accessed when necessary for security investigations.

4. Data Storage, Security, and Infrastructure

We take the security of your data seriously. Our infrastructure runs on Oracle Cloud servers located in Virginia (Ashburn), USA, which provide enterprise-grade physical and network security. Account information is stored in a private, access-controlled database with IP-based filtering that restricts connections to authorized infrastructure only. All public traffic is routed through Cloudflare, which provides DDoS protection and an additional layer of security. Your browser-side data (authentication tokens, preferences) is stored using Local Storage, meaning it stays on your device and is not transmitted to our servers unless you actively perform an action. While we implement industry-standard security measures, no method of transmission or storage is 100% secure, and we cannot guarantee its absolute security.

5. Data Portability

You own your data. We believe in full portability and make it easy to export and move your content at any time:

• File Access: You can download any file from your hosted sites at any time through our file manager or via SFTP.
• Backup Downloads: Automated backups of your sites can be downloaded as .tar.gz archives from your dashboard.
• SFTP Access: Full SFTP access is available for every project, allowing you to transfer files using any standard FTP client.
• No Lock-In: There are no restrictions on exporting your data. You are free to migrate your content to any other hosting provider at any time.

6. Data Deletion

You have the right to delete your account at any time. Upon request, we will permanently delete your user account, all associated sites, and all uploaded files from our active systems in a timely manner. Please note that data in off-site backups may persist for up to 30 days before being automatically overwritten. Please contact us to request data deletion.

7. Children Under 13

nysr.host is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If a parent or guardian believes a child under 13 created an account, please contact us so we can review and delete the account if appropriate.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at contact@vaaq.dev or through our Discord.