htmlhost.co

Privacy Policy

Last updated: November 6, 2026

htmlhost.co (“htmlhost,” “we,” “us”) provides a platform for hosting, editing, and publishing HTML websites and static web projects. This policy explains what we collect, why, and what you can do about it.

What we collect

  • Account info. If you sign in, we store your email, name, avatar URL, and the OAuth provider you used.
  • Site content. The HTML, CSS, JavaScript, and media you upload. This content is published to a public URL — assume anything you upload may be viewed by anyone with the link.
  • Free allowance and abuse prevention. Browser fingerprints, a hash of your normalized email address, and lifetime site creation counts help enforce free allowances across accounts and re-registration.
  • Operational logs. IP address, user agent, referer, and timestamps of API calls and page views. Used to prevent abuse and debug issues.
  • Form submissions.When a visitor sends a form on a site hosted with us, we store what they entered, the page it was sent from, their browser’s user agent, and a salted hash of their IP address (not the address itself), and email a copy to the site’s owner.
  • Billing data. If you purchase Pro, a custom domain connection, or an AI edit pack, our payment processors (Stripe, Paystack, or Bachs) handle your payment details. We never see or store full card numbers.

How we use it

  • To run the service: serve your sites, authenticate you, and enforce plan limits.
  • To prevent abuse: detect spam, phishing, and malware uploads.
  • To communicate with you about your account, billing, and security.
  • To improve the product through aggregate usage analysis.

Forms on sites we host

Site owners can collect messages through forms on their sites. For those submissions the site owner decides what is collected and why, and we process it on their behalf: we store it, show it to them in their dashboard, and email it to them. Questions about a particular form, including requests to access or delete what you sent, should go to the owner of that site; we’ll help them fulfil the request. To stop the service being used for phishing, forms can’t collect passwords, card numbers or similar credentials, and such submissions are rejected without being stored.

Visitor statistics on sites we host

Sites we host count their page views by default, so their owners can see how their site is used. Owners can turn collection off or back on in the site’s Analytics or Settings tab. Turning it off stops new counts; existing reports follow the retention periods below. When collection is on and someone opens a page, the page reports its address, the page that linked to it and the device’s screen width; from that request we also use the visitor’s country and browser. We keep only daily totals for each site: views and visitors by page, source, country and type of device. To count a visitor once a day, we keep a one-way hash of the day, the site, the IP address and the browser until the day is over. The IP address itself is never stored, no cookies or other storage on the visitor’s device are used, and site owners can’t see who any visitor is.

What we don’t do

  • We don’t sell your data.
  • We don’t share your content or contact info with advertisers.
  • We don’t train AI models on your private content.

Sub-processors

We rely on a small number of trusted vendors to operate the service. By using htmlhost.co, you agree to your data being processed by them as needed:

  • Vercel — hosting and edge infrastructure.
  • Stripe, Paystack, and Bachs — payment processing.
  • Anthropic, OpenAI, Google, and DeepSeek — AI editing and generation features (only when you actively use them).
  • Email provider — transactional email (account, billing, security).

Retention

  • Unsaved browser drafts stay in your browser until you clear them or sign in and save or publish your project.
  • Account sites are kept until you delete them or close your account. If you choose an optional shorter lifetime (1, 7, or 30 days) for a site, its public URL goes offline when that lifetime ends while the project remains in your dashboard.
  • Allowance records retain the email hash, browser fingerprint, and creation count after site or account deletion to prevent repeated free allowances. They do not retain your site content. Contact hey@htmlhost.co to request review or correction.
  • Form submissions are kept until the site owner deletes them or the site is deleted. Submissions flagged as spam are deleted automatically after 30 days.
  • Visitor statistics: daily totals by page, source, country and device are kept for 90days, each day’s overall totals for 400 days, and the hashes used to count visitors are deleted after their day.
  • Logs are kept for up to 90 days, then deleted or aggregated.
  • Billing records are retained as required by law (typically 7 years).

Your rights

You can export or delete your sites at any time from your dashboard. To delete your account or request a copy of your personal data, email hey@htmlhost.co. We’ll respond within 30 days. If you’re in the EU, UK, or California, you have additional rights under GDPR / CCPA (access, correction, deletion, portability, objection) — same email, same response time.

Cookies

We use essential cookies for authentication and session management. With your permission, we use Google Analytics to measure visits and new-account sign-up and first-publication events on htmlhost’s own app. We exclude customer sites, editor previews, query strings, account IDs, email addresses and uploaded content from the events we send. We record account milestones internally to avoid counting repeat events. We do not use Google advertising signals or ad personalization.

For more information, please see our Cookie Policy.

Children

htmlhost.co is not directed at children under 13 (or 16 in the EU). We don’t knowingly collect data from them.

Changes

We’ll update this page when our practices change and bump the “last updated” date above. Material changes will be announced by email to account holders.

Contact

Questions, concerns, or requests: hey@htmlhost.co.