Privacy Notice

• Account and contact data: name, email, team role, authentication records, and support communications.
• Billing data: billing name and address, subscription status, invoices, refunds, and payment-processor identifiers. Stripe handles complete card numbers; Host Little does not store them.
• Service data: project domains, repositories you connect, configurations, DNS records, deployments, build and runtime logs, resource usage, support records, and security events.
• Device and network data: IP address, browser details, request headers, and security signals needed to operate and protect the service.
• Customer content: source bundles, container images, application data, database data, object files, and backups that you choose to place in the service.
• Abuse reports: category, reported hostname, description, optional reply email, a one-way keyed network identifier, and resulting case links. The report record does not keep the reporter's raw IP address or browser details.

We receive data from you, your team, your browser or application, connected services such as GitHub and Stripe, our infrastructure providers, and people who contact support or report abuse.

We use information to provide, meter, bill, support, and improve the service; authenticate accounts; deliver deployments; communicate service and policy notices; prevent fraud and abuse; investigate incidents; and comply with law.

Where GDPR or similar law applies, the legal basis is performance of a contract, compliance with legal obligations, our legitimate interests in operating and protecting the service, or consent when we ask for it. You may withdraw consent without affecting processing already completed.

We do not sell personal information or use it for cross-context behavioral advertising. We do not use customer content to train general-purpose AI models.

The providers below may process personal data when their service is used. Not every provider applies to every project. We also disclose information when required by law, to protect people or the service, in a business transaction with appropriate safeguards, or with your direction.

Account, billing, control-plane, support, and security data is primarily processed in the United States. Cloudflare processes edge traffic through a globally distributed network. Current v3 App Hosting is based in AWS us-east-1, and current database infrastructure is based in DigitalOcean NYC3. Legacy projects may still use the United States or European Union infrastructure shown for that project while migration is completed.

A project's displayed or selected region describes its workload placement, not an exclusive residency promise for account data, edge delivery, logs, support, or every subprocessor. If a law requires a specific residency or transfer arrangement, contact us before placing that data in the service. Where required, we use contractual transfer safeguards or offer an appropriate transfer addendum for the services purchased.

Backup rotation, legal holds, disputes, and provider deletion schedules can make final removal take longer. We keep only what is reasonably needed for the stated purpose.

We use technical and organizational measures appropriate to an early-stage hosting service, including encrypted transport, restricted access, tenant boundaries, logging, backups where stated, and incident response. No online service can promise absolute security. See our security overview.

Host Little is a business service and is not directed to children under 13. People under 18 may not create an account. If you believe a child provided personal information to Host Little, email us so we can investigate and delete it where required.

Depending on where you live, you may request access, correction, deletion, portability, restriction, or objection. California residents may also have rights to know, correct, delete, limit certain uses of sensitive information, opt out of sale or sharing, and receive equal service when exercising a right. Because Host Little does not sell or share personal information for cross-context advertising, there is no sale or sharing opt-out needed for our current practices.

Signed-in customers can use the Privacy and data page. You can also email us from your account address. We may verify your identity and may retain a record of the request. You may appeal a denied request by replying to our decision, and may complain to the privacy regulator where you live or work.

We will post changes here and update the effective date. Material changes will also be announced by email or in the portal when appropriate.

Privacy questions and requests: [email protected]. Host Little is based in Chicago, Illinois, United States.

Our Cookie Notice explains browser storage used by the site.