Privacy Policy

Last Updated: May 19, 2026

1. Introduction

Sable Servers Inc. ("Sable Servers," "we," "us," or "our") operates this website and provides cloud hosting, virtual servers, game server hosting, and managed services. This Privacy Policy explains what information we collect, why we collect it, and how we handle it.

We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

2. Information We Collect

2.1 Information You Provide Directly

  • Account information: name, email address, billing address, phone number when you sign up for service
  • Payment information: processed by Stripe and not stored on our servers — we receive only a payment token and last four digits
  • Support communications: ticket contents, email correspondence, chat messages
  • Contact form submissions: any information you provide via our contact page

2.2 Information Collected Automatically

  • Technical data: IP address, browser type and version, operating system, referring URL, pages visited, and timestamps. Standard server access logs are kept for the retention windows in section 5.
  • Cookies and local storage: session identifiers, cookie-consent preferences, dismissed promotional banners, and a persistent first-party analytics visitor ID (see section 6)
  • Marketing analytics: on this public website we run our own first-party analytics — no Google Analytics, no Meta pixel, no third-party tracker. By default we store only a per-browser visitor ID, the page path you landed on, your approximate country (2-letter code), and how long you stayed on the page. Details and opt-out in section 6.
  • Service usage data: server metrics (CPU, RAM, network) for services you host with us — used for billing and abuse prevention

2.3 Network Tools Page

Our Network Tools page measures your latency by sending a small number of HTTPS requests to our own servers (unified.sableservers.com). No third-party tracking, geolocation, or DNS services are called from that page; everything stays inside Sable Servers' own infrastructure.

3. How We Use Your Information

  • Provide and operate services — provision servers, deliver email, process backups, run our control panel
  • Billing and payments — charge for services, send invoices and receipts, handle refunds
  • Customer support — respond to tickets, troubleshoot issues, communicate maintenance windows
  • Service improvement — understand which features are used, debug performance, plan capacity
  • Fraud prevention — verify identity, score risk on signups using MaxMind minFraud, prevent abuse
  • Legal compliance — comply with tax obligations, lawful requests from Canadian authorities, and our own Acceptable Use Policy

We do not sell your personal information to third parties.

4. Third-Party Service Providers

We rely on the following processors to deliver our services. Each is bound by their own privacy policy and processes only the data needed to perform their function.

  • Stripe — payment processing (PCI-DSS Level 1)
  • MaxMind — fraud risk scoring on new signups
  • Backblaze B2 — off-site backup storage
  • Let's Encrypt — SSL certificate issuance
  • Cloudflare — CDN and DDoS protection at the network edge
  • api.country.is — lightweight IP-to-country lookup used by our first-party marketing analytics. The service sees only the requesting IP at the moment of lookup; we store only the resulting 2-letter country code. Results are cached for 30 days inside our infrastructure to minimise repeat calls.

5. Data Storage and Retention

Customer data is stored on infrastructure operated by Sable Servers in Montreal, Quebec and Toronto, Ontario, Canada. Off-site encrypted backups are stored with Backblaze B2.

Retention windows:

  • Account records: for the duration of your account plus 7 years (tax requirement)
  • Support tickets: for the duration of your account plus 2 years
  • Server access logs: 90 days
  • Marketing site access logs: 30 days
  • Backups of customer services: per the backup tier of your plan (typically 7–30 days)

6. Cookies, Local Storage, and Analytics

We use a small number of cookies and similar storage mechanisms:

  • Essential cookies — session tokens for the billing portal, control panels, and webmail. These are required for those services to function.
  • Preference storage — your cookie-consent choice and dismissed promotional banners, stored in your browser's localStorage.
  • First-party marketing analytics — we operate our own analytics on this website, hosted on our infrastructure in Canada. No Google Analytics, no Meta pixel, no third-party tracker. By default ("minimal mode") we store only:
    • a persistent per-browser visitor ID kept in your browser's localStorage under the key sable_vid,
    • the path of the page you landed on,
    • your approximate country as a 2-letter code (see section 4 — api.country.is),
    • how long you stayed on the page, and
    • the timestamp of the visit.
    In this default mode we do not store your IP address, user-agent, referrer, or UTM campaign parameters alongside the visit row.
  • Do Not Track — if your browser sends the DNT: 1 header, our tracker exits before reading or writing any storage and before sending any beacon.
  • Opting out — clicking Decline on the cookie banner disables our marketing analytics in that browser. You can also clear the sable_vid value at any time by clearing site data in your browser settings.
  • Retention — marketing-analytics visit rows are deleted after 395 days (≈13 months) by a scheduled cleanup job. This retention window is configurable by our staff and may be shortened in the future.

7. Your Rights Under PIPEDA

You have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Withdraw consent for non-essential processing (note: this may require us to terminate your services if the data is required to operate them)
  • Request deletion of your account and associated data, subject to legal retention requirements (e.g. tax records)
  • Receive a copy of your data in a portable format
  • File a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, email privacy@sableservers.com or open a support ticket. We respond within 30 days.

8. Security

We protect customer information with:

  • TLS 1.2+ encryption for all data in transit
  • Encrypted backups at rest
  • Two-factor authentication available on all customer accounts
  • Strict access controls; only staff with a need-to-know can access customer infrastructure
  • Regular security review and patching of our infrastructure

No system is perfectly secure. If we ever experience a breach involving your personal information, we will notify you in accordance with PIPEDA breach-notification requirements.

9. Children's Privacy

Our services are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact privacy@sableservers.com and we will remove it.

10. International Transfers

Customer infrastructure stays in Canada. However, some of our third-party processors (Stripe, MaxMind, Cloudflare) operate globally and may process limited data outside Canada. We rely on standard contractual clauses or equivalent protections where applicable.

11. Changes to This Policy

We may update this Privacy Policy as our services or legal obligations change. Material changes will be announced via email to active customers and posted at the top of this page. The "Last Updated" date at the top reflects the most recent revision.

12. Contact Us

For privacy questions, data-access requests, or complaints:

Privacy Officer
Sable Servers Inc.
Nova Scotia, Canada
Email: privacy@sableservers.com
General contact: contact.html