Privacy Policy

Last updated: September 23, 2026

htmlhost.co (“htmlhost,” “we,” “us”) provides a service for publishing HTML files to short-lived public URLs. This policy explains what we collect, why, and what you can do about it.

What we collect

• Account info. If you sign in, we store your email, name, avatar URL, and the OAuth provider you used.
• Site content. The HTML, CSS, JavaScript, and media you upload. This content is published to a public URL — assume anything you upload may be viewed by anyone with the link.
• Free allowance and abuse prevention. Browser fingerprints, a hash of your normalized email address, and lifetime site creation counts help enforce free allowances across accounts and re-registration.
• Operational logs. IP address, user agent, referer, and timestamps of API calls and page views. Used to prevent abuse and debug issues.
• Form submissions.When a visitor sends a form on a site hosted with us, we store what they entered, the page it was sent from, their browser’s user agent, and a salted hash of their IP address (not the address itself), and email a copy to the site’s owner.
• Billing data. If you upgrade to Pro, our payment processor (Stripe) handles your card. We never see or store full card numbers.

How we use it

• To run the service: serve your sites, authenticate you, and enforce plan limits.
• To prevent abuse: detect spam, phishing, and malware uploads.
• To communicate with you about your account, billing, and security.
• To improve the product through aggregate usage analysis.

Forms on sites we host

Site owners can collect messages through forms on their sites. For those submissions the site owner decides what is collected and why, and we process it on their behalf: we store it, show it to them in their dashboard, and email it to them. Questions about a particular form, including requests to access or delete what you sent, should go to the owner of that site; we’ll help them fulfil the request. To stop the service being used for phishing, forms can’t collect passwords, card numbers or similar credentials, and such submissions are rejected without being stored.

What we don’t do

• We don’t sell your data.
• We don’t share your content or contact info with advertisers.
• We don’t train AI models on your private content.

Sub-processors

We rely on a small number of trusted vendors to operate the service. By using htmlhost.co, you agree to your data being processed by them as needed:

• Vercel — hosting and edge infrastructure.
• Stripe — payment processing.
• Anthropic / OpenAI — AI editing features (only when you actively use them).
• Email provider — transactional email (account, billing, security).

Retention

• Anonymous sites are deleted automatically when their TTL expires (max 7 days).
• Account sites are kept until you delete them or close your account.
• Allowance records retain the email hash, browser fingerprint, and creation count after site or account deletion to prevent repeated free allowances. They do not retain your site content. Contact hey@htmlhost.co to request review or correction.
• Form submissions are kept until the site owner deletes them or the site is deleted. Submissions flagged as spam are deleted automatically after 30 days.
• Logs are kept for up to 90 days, then deleted or aggregated.
• Billing records are retained as required by law (typically 7 years).

Your rights

You can export or delete your sites at any time from your dashboard. To delete your account or request a copy of your personal data, email hey@htmlhost.co. We’ll respond within 30 days. If you’re in the EU, UK, or California, you have additional rights under GDPR / CCPA (access, correction, deletion, portability, objection) — same email, same response time.

Cookies

We use essential cookies for authentication and session management. We don’t serve ads, and we don’t use advertising or third-party tracking cookies.

For more information, please see our Cookie Policy.

Children

htmlhost.co is not directed at children under 13 (or 16 in the EU). We don’t knowingly collect data from them.

Changes

We’ll update this page when our practices change and bump the “last updated” date above. Material changes will be announced by email to account holders.

Contact

Questions, concerns, or requests: hey@htmlhost.co.