Last updated 2026-10-23
Privacy policy
This explains what HostEdge collects about you and the visitors to your sites, why, and what you can do about it.
About you, the customer#
| What | Why | How long |
|---|---|---|
| Name, email, password hash | Your account | Until you delete it |
| Audit log: sign-ins, role changes, deletions, domain and plan changes | Security and accountability inside your workspace | 1 year |
| Billing details | Charging your plan — card data stays with Creem, our payment provider and merchant of record; we keep the customer ID | As long as the law requires |
| GitHub installation and repository names | Deploying your repositories | Until you disconnect |
Passwords are hashed by our authentication library and never stored in a form we can read. Environment variables are encrypted with AES-256-GCM.
About your visitors#
To run your site and show you logs and analytics, HostEdge records for each request: time, path, status code, size, duration, the visitor's country (derived from the IP address at the edge) and anything your code writes to the console. We don't set cookies on your sites, build profiles of visitors or sell data. Runtime logs are kept for 7 days and analytics for 30 days.
Who processes data for us#
our infrastructure and network provider (hosting and edge network), Creem (payments, as merchant of record), our email delivery provider (email) and GitHub (if you connect it). Each only receives what it needs for that job.
Your rights#
You can export your data from Account › Data as a JSON file and delete your account there. Deleting removes your projects, deployments, variables and personal data; billing records we're required to keep are retained.