This policy outlines how we use your data, what data we collect and store, how we protect that data, our data retention policy, and the procedures for exercising your rights. It also outlines our procedures for handling cases under the General Data Protection Regulation in the European Union, as well as our further commitment to supporting industry best security practices and protecting the safety of children while they use our platform.
This policy was last reviewed and approved for publication on January 1, 2026, and is scheduled for re-review on March 31, 2026.
This policy shall remain in effect for the remainder of the customers’ use of our services, with an additional term of five (5) years.
By utilizing any service or part of our platform owned or controlled by us, you accept that you agree with all clauses within this policy.
We may collect and store children’s information because our services are directly targeted towards children, as they are the primary focus and target audience of the product. We will ensure that parent consent has been obtained from the parents of children under 16 who are registered on our site.
i. We collect a child’s information when they:
Create an account to be utilized on our platform
Purchase any product or service we offer
Interact with any of our customer service platforms
Interact with our platform or services
We will never sell your child’s data to any third party and will only share what is necessary with trusted third parties who enable us to operate our business on a day-to-day basis.
We ask children to share certain information with us for notification, transaction, and security purposes. We strongly recommend that the guardian(s) of children utilize their details instead of permitting their children to use any of their information on any section of our platform.
By using any part of our platform or services, the child and parent expressly consent that they have read, understood, and agreed to all the clauses within this policy.
i. We cannot be held liable for any interaction your child has with our multiplayer game products, as these services are privately owned and not managed or controlled by us.
ii. We recommend that guardians/parents regularly review their children’s activities online to ensure they remain safe.
Per our commitment to the European Union’s GDPR (“General Data Protection Regulations”), we will only retain data for as long as necessary. By purchasing, using, or subsequently accessing any services we own or control, you acknowledge that we may retain your data for up to 5 years after we deem it no longer necessary to maintain. We keep this data for future taxation purposes and to fulfill our financial obligations to the United States.
Site access logs and requests are retained indefinitely to ensure security. This includes cookie-based data, which will naturally expire when the end user deletes the cookie.
Service files, hereby defined as ‘information uploaded to a service provided by Sparked Host LLC DBA RocketNode,’ will be retained only as long as necessary, even past the termination of business between the end user and Sparked Host LLC DBA RocketNode
Data erasure will be carried out upon a client’s request to erase their data. In most cases, you must provide proof of the name and address associated with the billing account before we can process or access your data and proceed with any erasure request.
This policy does not serve as a waiver of rights.
The following outlines our policy regarding data erasure:
i. The formal process begins with the client’s request to proceed with an erasure request; this must be received at the designated location (hereby, via email to [email protected]).
ii. Within 24-48 hours (dependent on office hours and public holidays), Sparked Host LLC DBA RocketNode may request proof of identification, including photographic state/government-issued identification and/or a letter to the client’s name and address.
iii. The client will then have 7 days to submit documents.
iv. Sparked Host LLC DBA RocketNode will confirm the document and provide the next steps.
v. Sparked Host LLC DBA RocketNode will then provide a written response to the request, either accepting the erasure request or, in cases where there is a reason why we cannot proceed with a request, providing feedback relating to this and offering the opportunity to resolve the reasoning behind our rejection (e.g., identification is not sufficient).
vi. If an erasure request is lost at any point, Sparked Host LLC DBA RocketNode cannot be held responsible for damages. This is an express waiver of responsibility concerning any erasure requests that are filed incorrectly or lost in transmission.
vii. The parent can request the erasure of data attained by someone under 13 or the child’s legal guardian. The guardian may be required to provide transaction-based identification before we can process an erasure request.
If you believe we erred in our judgment of your erasure request, you can follow the appeal steps in the final written response from Sparked Host LLC DBA RocketNode
To be able to appeal, you accept that you must appeal within 28 days of receiving the response confirming the steps to appeal. If you do not appeal the decision within 28 days, you waive your right to appeal.
We collect and store a series of data, such as (but not exhaustive):
i. Personally-identifiable information (“PII”)
ii. Cookies
iii. Log-based data
iv. Third-party services may additionally collect data. These respective services have their own data protection and privacy policies, which the end user is expected to review.
v. Some, not all, of the third-party services we use include:
Crisp Chat
Google Advertising
FontAwesome
WHMCS
Trustpilot
Cookie declaration services
Cloudflare
CosmicGuard
Discord
Brevo (and other marketing platforms) will never share your details without first requesting your permission.
Amazon
OptinMonster
vi. Because of any data shared with third-party services, we may be unable to regulate erasure requests with the listed companies/services above, and you may be required to submit erasure requests to the specific company as listed above.
A valid court order, subpoena, or equivalent legal document must support requests for access to customer data by law enforcement agencies. Such requests, along with all relevant documentation, should be directed to [email protected] for a 24-hour response.
Access to specific recorded customer data is granted to authorized employees strictly for operational purposes. This access is governed by confidentiality and nondisclosure agreements, ensuring the protection and proper handling of all data in compliance with applicable privacy laws and company policies.
You retain the right to access the data we hold concerning you.
You can request one (1) data record export within 30 days.
A maximum of six (6) data record exports may be requested within a calendar year. Additional requests may be processed subject to an administrative fee of $80.
All requests must be submitted via email to [email protected].
We reserve up to one (1) month to respond to any Subject Access Request (“SAR”). If processing a SAR requires significant production effort, an administrative fee may be assessed. Customers will be notified of any such fee before it is processed.
Upon submitting a Subject Access Request, you must provide proof of identification to ensure security and compliance with data protection regulations. The identification process will adhere to strict verification standards, after which a comprehensive record of all data held about you will be provided.
In the unlikely event of a data breach, we will take the following actions in compliance with applicable data protection regulations:
i. Affected parties will be notified within forty-eight (48) hours of us becoming aware of the breach.
ii. We will disclose, to the extent known at the time, the nature of the breach, the categories of information believed to have been compromised, and the timeline of discovery.
iii. Where applicable, we will notify relevant data controllers to facilitate a thorough investigation and ensure appropriate measures are taken in response to the breach.
iv. Any services identified as compromised will be subject to immediate suspension to prevent further unauthorized access. Such services will remain suspended until the source of the breach has been thoroughly investigated and mitigated.
Our data protection officer will inform you and provide the next steps in accordance with the above protocol.
We welcome any questions, comments, or concerns regarding this Privacy Policy. If you believe that we have failed to adhere to the provisions outlined in this policy, please contact our Data Protection Officer (DPO) using the following contact information:
i. Direct Email: [email protected]
ii. DPO Inquiries: [email protected]
Date of the last effective update: January 1, 2026.