Last Updated: March 19, 2026

Introduction

Welcome to Hiro.host ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our file hosting and website publishing platform (the "Service").

Information We Collect

Information You Provide to Us

  • Account Information: Name, email address, and password when you create an account
  • Payment Information: Billing address and payment details (processed securely through Stripe)
  • Content: Files, documents, images, and other content you upload to the Service
  • Project Settings: Subdomain choices, custom domain configurations, and password protection settings
  • Communications: Messages and support requests you send to us

Information We Collect Automatically

  • Usage Data: Information about how you interact with our Service, including projects created, files uploaded, and features used
  • Device Information: IP address, browser type, operating system, and device identifiers
  • Log Data: Server logs that record requests made to our Service
  • Cookies: Essential cookies for authentication and session management

Information from Third Parties

  • Authentication Services: Information from Google if you choose to sign in with Google
  • Payment Processor: Transaction confirmations from Stripe

How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our Service
  • Host and serve your uploaded content to visitors
  • Process payments and manage subscriptions
  • Create and manage your account
  • Communicate with you about your account and service updates
  • Respond to your support requests
  • Monitor for abuse, security threats, and terms violations
  • Comply with legal obligations
  • Generate aggregated, anonymized analytics to improve the Service
  • Display advertisements on free tier projects, which may involve sharing limited data (such as device information and IP address) with advertising partners

How We Share Your Information

Service Providers

We share information with third-party vendors who perform services on our behalf:

  • Cloudflare: CDN and DNS services
  • Stripe: Payment processing
  • Cloud hosting providers: Infrastructure and file storage

Public Content

When you publish content through our Service, that content is publicly accessible at your chosen subdomain or custom domain. If you enable password protection, access is restricted to those with the password.

Legal Requirements

We may disclose your information when required by law or to:

  • Comply with legal processes or government requests
  • Enforce our Terms of Service
  • Protect our rights, privacy, safety, or property
  • Protect against legal liability

Business Transfers

In connection with any merger, sale of company assets, or acquisition, your information may be transferred as part of that transaction.

We do not sell your personal information to third parties. However, free tier projects may display advertisements served by third-party advertising networks, which may collect data as described in their own privacy policies.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account:

  • Your account information is deleted within 30 days
  • Your uploaded content and projects are deleted immediately
  • Backup copies may persist for up to 90 days

We may retain certain information as required by law or for legitimate business purposes.

Data Security

We implement appropriate security measures to protect your data:

  • Encryption of data in transit (HTTPS/TLS)
  • Encryption of stored files
  • Secure authentication mechanisms
  • Regular security assessments
  • Access controls and monitoring

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Your Rights and Choices

Depending on your location, you may have the following rights:

Access and Portability

Request access to your personal data and download your uploaded content at any time through your account dashboard.

Correction

Update your account information through your account settings.

Deletion

Delete your account and all associated data through your account settings, or by contacting us.

Opt-Out

Opt out of marketing communications by following the unsubscribe link in our emails.

To exercise additional rights, please contact us at [email protected].

Cookies

We use essential cookies for:

  • Authentication and session management
  • Security and fraud prevention
  • Remembering your preferences

We do not use tracking cookies on paid plans. Free tier projects may include third-party advertising cookies if advertisements are displayed. You can remove advertising cookies by upgrading to a paid plan.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.

Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on our website
  • Sending you an email notification

Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

Contact Us

If you have questions, concerns, or requests regarding this privacy policy, please contact us:

Hiro.host Email: [email protected]

For EU residents, you have the right to lodge a complaint with a supervisory authority if you believe we have processed your personal data unlawfully.

Additional Information for Specific Regions

California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected and the right to request deletion.

EU/UK Residents (GDPR)

EU and UK residents have rights under the General Data Protection Regulation, including rights to access, rectification, erasure, restriction of processing, data portability, and objection. Our legal bases for processing include contract performance, legitimate interests, and consent.