Legal
Privacy Notice
Effective: July 16, 2026
This notice explains how Host Little handles personal information when you visit our site, contact us, create an account, or use our hosting services. It covers Host Little's own account and business records. When we host personal data in a customer's application, the customer normally decides why and how that data is used; see our Data Processing Addendum.
Information we collect
- Contact and account information, such as name, email address, team role, and support communications.
- Billing information, such as billing name, address, subscription status, invoices, and payment-processor identifiers. Card numbers are handled by our payment processor, not stored by Host Little.
- Service and technical information, such as project domains, deployment and configuration metadata, DNS records, usage data, IP address, browser details, security events, and support records.
- Customer content that you choose to host, including data in your applications, sites, mailboxes, and backups.
Why we use it
We use this information to provide and secure the service; create and administer accounts; process payments; answer support requests; prevent fraud, abuse, and security incidents; meet legal obligations; and communicate important service, billing, and policy notices. We do not sell personal information or use it for cross-context behavioral advertising.
Where GDPR or similar law applies, our legal bases are performance of a contract, legitimate interests in operating and protecting the service, compliance with legal obligations, and consent where we specifically ask for it. You may withdraw consent at any time, without affecting processing already completed.
How we share information
We share information only as needed to operate the service: payment processing, email delivery, application infrastructure, DNS/CDN/SSL and DDoS protection, support tooling, and professional advisers. These providers process information under their own terms or contractual obligations. We may also disclose information when required by law or to protect people, the service, or our rights.
We do not publish a generic vendor list that could become inaccurate. Customers who need the current subprocessor list or a DPA can request it at any time.
Retention and deletion
We keep information for as long as needed for the purposes above. Account and hosted data are retained while service is active. After cancellation, production data is normally kept for up to 30 days to support export or restoration, then removed from production systems; backups expire on their applicable rotation. We may retain limited billing, security, or legal records longer when required or reasonably necessary.
Your privacy choices and rights
Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or objection. California residents may have rights to know, correct, delete, and not be discriminated against for exercising privacy rights. Host Little does not sell or share personal information as those terms are commonly used in California privacy law.
Signed-in customers can submit a verified request in Portal Settings. You can also email [email protected] from the email associated with your account and describe the request. We may ask for information needed to verify it. You may also complain to the data-protection authority where you live or work.
Cookies
We use essential cookies and similar storage needed for sign-in, security, and service operation. We do not run advertising cookies or first-party analytics cookies on this site. Details are in our Cookie Notice.
Changes and contact
We will post updates here and change the effective date when this notice changes. For privacy questions or the current subprocessor list, email [email protected].