Privacy policy

This website and the services on it are run by Rogueberg, based in Bhubaneswar, Odisha, Bharat. We decide why and how your personal data is used. That makes us the "controller" under the EU and UK GDPR, and the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023.

For anything about your data, write to hello@rogueberg.com.

There is one exception. When we build or host something for you, the people whose data you put on it are your responsibility, and we act only on your instructions. See data on servers we host for you.

What you give us

• Quote requests and orders: the name, email, organization, country, project or hosting details and budget range you enter in the form.
• Accounts: if you create an account, your name, email, organization and a securely hashed version of your password. We never store the password itself.
• Invoices and payments: the invoices we send you, and the payment details you report: method, date and reference, such as a UPI transaction ID (UTR). Payments happen outside this website, so we never see your card number, UPI PIN or banking password.
• Messages: messages, files and voice messages you send from your dashboard, and when they were seen.
• Hosting customers: your verified name, address and contact details, the period of service, the IP addresses assigned to you and the purpose of the service, plus network and access logs from the servers we run for you.
• Our team: if you join Rogueberg as staff, your email, your role, a securely hashed password and the secret for your authenticator app.

What we record automatically

• Technical data: a one-way hash of your IP address and your browser's user agent, kept to stop spam and abuse. We can't turn the hash back into your IP address.
• Login sessions: when you logged in, when you were last active and your browser type, so you stay logged in and we can spot misuse.
• Activity log: a record of important actions, such as logins, invitations and changes made by our team.

What reaches our notifications

We get notifications on Discord when you send a quote request (everything in the form), sign up (your name, email and organization), send a message (your name and the start of the message), or report a payment (the invoice, the amount, your name and email, and the payment reference and note you entered).

We don't ask for sensitive details such as health or religion, and we ask you not to send them. We don't use advertising trackers, and we don't sell or rent personal data.

We only use your data for the reasons below. Each one has a legal basis, which is the rule that allows it.

Where we rely on consent, you can withdraw it at any time by writing to us. Doing so doesn't affect anything we did before, and you can't withdraw from what the law requires us to keep.

We don't send marketing emails to clients unless you ask for them. No decision that affects you is made purely by a computer: automatic limits only slow down spam and repeated login attempts, and a person handles everything else.

That's the full list. Neither these cookies nor anything else on this website is used for tracking, advertising or analytics, and we don't use your browser's local storage. That's also why you don't see a cookie banner here: these cookies are strictly needed for something you asked for.

You can block cookies in your browser, but you won't be able to stay logged in.

Each of them processes data only to provide its service to us. Inside Rogueberg, access depends on the person's role. Support staff can read and reply to chats, but they can't open deleted messages, invoices or quote requests.

If Rogueberg is ever sold or merged, your data would pass to the new owner under this policy, and we'd tell you first.

Website data is stored with Cloudflare and Turso, in India where available. Hosting services run in the country you choose, and our records about hosting customers are kept in India. Because Cloudflare, Mailtrap and Discord operate internationally, some data may be handled in other countries, including the United States.

Indian law allows these transfers unless the government restricts a particular country. For people in the EU, EEA and UK, we rely on standard contractual clauses or an equivalent safeguard where the provider offers one, and otherwise on the transfer being needed to provide what you asked for. You can write to us for more detail on these safeguards.

Deleted messages and chats are kept to protect both sides if there is ever a dispute, and only Rogueberg's admins can see them.

• All connections to this website are encrypted.
• Your browser turns your password into a key before sending it, and we store only a keyed hash of that key. Nobody at Rogueberg can see your password.
• Your IP address is stored only as a one-way hash.
• Staff must use two-step login with an authenticator app, and each person only gets the access their role needs.
• Bank and UPI details are shown only to logged-in clients.
• Repeated login attempts are limited, and removing someone from our team logs them out at once.

No system can be guaranteed to be completely secure. If a breach affects your personal data, we will tell you, the Data Protection Board of India and any other regulator the law requires, within the time the law sets.

If you have an account, you can download your data or delete your account yourself from Dashboard → Account. For anything else, email hello@rogueberg.com. It's free, we respond within 30 days, and we may ask you to confirm it's really you. Records the law requires us to keep, and the chats and deleted messages we keep for 6 months, are deleted when those periods end.

Our services are for adults and organizations. You must be at least 18 to create an account or place an order, and we don't knowingly collect data from anyone under 18. If you believe a child has sent us personal data, write to us and we will delete it.

When we build a platform for a school or college, the institution decides how its students' data is used and is responsible for any parental consent the law requires.

What you store on a VPS, game server or dedicated server belongs to you, and you decide how it is used. We don't look at it or use it except when you ask us to, when it's needed to keep the service running or secure, or when the law requires it. Servers run in the country you choose (India, Singapore, Finland, Germany, France or Canada), in data centres operated by our infrastructure providers, who handle data only to run the hardware and network.

If your website or server holds other people's personal data, you are responsible for telling them and for following the law that applies to you. We handle that data only as your service provider.

We share data with government authorities, such as CERT-In or the police, only when Indian law requires it, and we tell you when the law allows us to.

Grievance Officer, Rogueberg
hello@rogueberg.com
Bhubaneswar, Odisha, Bharat

We acknowledge every complaint within 48 hours and aim to resolve it within one month. If you're not satisfied, you can take it to the regulator for your country, listed under your rights.

If we change this policy, we will update the date at the top of this page. If a change significantly affects how we use your data, we will also email account holders before it applies.