How we keep your data safe
We keep as little of your information as we can, and the most sensitive parts stay with companies built to hold them. This page explains what we store, what we don't, and how we protect it.
How we protect you
Card and bank details stay with Stripe
You type your card into Stripe's secure field, so the number goes straight to Stripe, a PCI DSS Level 1 certified payment processor, and never reaches our servers. A US bank account you save for autopay is held by Stripe too. We keep only a reference.
Encrypted in transit and at rest
Every page loads over an encrypted connection, and browsers are told never to use an unencrypted one. Your account and orders are stored on Google Cloud, which encrypts the data it stores.
Your files are never public
Payment receipts, tax certificates and shipment photos are kept in private storage. They open only for the people handling your order or account, after signing in, and never through a public link.
Protected sign-in
We limit repeated sign-in attempts to stop password guessing. When you sign out, your session ends on our side too, not only in your browser.
Staff access is logged
Every price change, refund and cancellation made by our team is recorded in a permanent log.
Sanctions screening
Large orders are checked against the US sanctions lists before they ship, and we don't sell to countries under a US embargo.
What we keep, and what we don't
What we keep
- Your name, email, phone number and addresses
- Your orders, invoices and hosting plans
- Files you upload, such as payment receipts and tax certificates
- Your messages with our team
What we never keep
- Your full card number or security code
- The bank account you use for autopay
- Your password in readable form
- The passwords to your servers
Our privacy policy explains what we collect and why.
If we host your machines
You keep your logins
We don't need the passwords to your servers to host them, and we will never ask for them. If someone asks for one in our name, don't send it, and tell us.
Your data stays yours
We provide the space, power, cooling and network. We don't sign in to your servers or look at the data on them.
We tell you if something happens
If a security incident affects your information, we will tell you what happened and what to do.
We never change bank details by email
Before you send a wire or crypto payment, check the bank details or wallet address on your order page. If an email or message gives you different details, even one that looks like it comes from us, don't pay. Contact us first.
Found a security problem?
Email us at the address below. Tell us what you found and the steps to see it again. We reply within 3 business days.
sales@endlessmining.comNo email app on this device? Copy the address, or use our contact page.
While you look, please:
- Use only your own account and data. If you reach someone else's, stop and tell us.
- Don't slow the site down, send spam, or try to trick our team.
- Give us time to fix it before you tell anyone else.
Does your company need more?
If your security team has a questionnaire, or needs to review how we work before you buy or host with us, we'll answer it.