Skip to content
Little Cloud Mechanic:
Live status
Host Little logoHost Little

Privacy Notice

Effective: July 16, 2026

This notice explains how Host Little handles personal information when you visit our site, contact us, create an account, or use our hosting services. It covers Host Little's own account and business records. When we host personal data in a customer's application, the customer normally decides why and how that data is used; see our Data Processing Addendum.

Information we collect

  • Contact and account information, such as name, email address, team role, and support communications.
  • Billing information, such as billing name, address, subscription status, invoices, and payment-processor identifiers. Card numbers are handled by our payment processor, not stored by Host Little.
  • Service and technical information, such as project domains, deployment and configuration metadata, DNS records, usage data, IP address, browser details, security events, and support records.
  • Abuse reports, including the category, reported hostname, narrative, optional reporter email, a one-way keyed network identifier, and links to the resulting incident, account, or project. The abuse-report record does not store the reporter's raw IP address or browser details.
  • Customer content that you choose to host, including data in your applications, sites, and backups.

Why we use it

We use this information to provide and secure the service; create and administer accounts; process payments; answer support requests; prevent fraud, abuse, and security incidents; meet legal obligations; and communicate important service, billing, and policy notices. We do not sell personal information or use it for cross-context behavioral advertising.

Where GDPR or similar law applies, our legal bases are performance of a contract, legitimate interests in operating and protecting the service, compliance with legal obligations, and consent where we specifically ask for it. You may withdraw consent at any time, without affecting processing already completed.

How we share information

We share information only as needed to operate the service: payment processing, email delivery, application infrastructure, DNS and TLS services, support tooling, and professional advisers. These providers process information under their own terms or contractual obligations. We may also disclose information when required by law or to protect people, the service, or our rights.

We do not publish a generic vendor list that could become inaccurate. Customers who need the current subprocessor list or a DPA can request it at any time.

Retention and deletion

We keep information for as long as needed for the purposes above. Account and hosted data are retained while service is active. Confirmed App Cloud project deletion can remove its runtime and PostgreSQL database data immediately. Before deletion, the account owner can reveal a TLS connection and run pg_dump. App Cloud PostgreSQL also creates automatic daily encrypted backups using the retention period shown in the portal (seven days on current Developer and Pro plans). Restore copies are separate databases that expire after 72 hours. After account cancellation, remaining production data is normally kept for up to 30 days where the product supports export or restoration, then removed from production systems. Backups expire on their applicable rotation. We may retain limited billing, security, or legal records longer when required or reasonably necessary.

Abuse reports and their case links are kept as long as reasonably needed to investigate misuse, protect people and the service, meet legal obligations, preserve evidence, and handle disputes. We do not promise an automatic deletion date for those records. The privacy rights and contact methods below also apply to reporters, subject to lawful security, evidence-preservation, and legal exceptions.

Your privacy choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or objection. California residents may have rights to know, correct, delete, and not be discriminated against for exercising privacy rights. Host Little does not sell or share personal information as those terms are commonly used in California privacy law.

Signed-in customers can submit a verified request on the Privacy and data page in the portal. You can also email [email protected] from the email associated with your account and describe the request. We may ask for information needed to verify it. You may also complain to the data-protection authority where you live or work.

Cookies

We use essential cookies and similar storage needed for sign-in, security, and service operation. We do not run advertising cookies or first-party analytics cookies on this site. Details are in our Cookie Notice.

Changes and contact

We will post updates here and change the effective date when this notice changes. For privacy questions or the current subprocessor list, email [email protected].