Who we are
This website, webhostflow.eu, is operated by WebHostFlow ("we"). For any privacy question, write to privacy@webhostflow.eu. This policy covers the website; how we handle customer data while delivering hosting is described in our data processing policy, and cookies are listed in our cookie policy.
What reaches our server
Our server logs each request: your IP address, date and time, the page requested, the referring page, your browser's user agent and the response status. We use these logs for security, abuse investigation and fixing errors, keep them for up to 90 days and do not combine them with other data. If you email us, we use your message only to answer you.
What stays in your browser
The whf_lang cookie remembers your language for 12 months. It is first set from a guess based on your time zone and browser language, with no IP lookup, and the language menu overwrites it; crawlers get no cookie. Browser storage keeps your banner choice, your cart and, until you close the tab, your last checkout. None of this is sent to us.
The customer area
Your account, profile, password hash and orders are stored only in this browser and never sent to us. We cannot see, recover or move them, and clearing this site's data deletes them. It is not real authentication, so do not store anything sensitive there.
Analytics, only with your consent
Only if you accept Analytics in the banner does the site load Yandex.Metrika, which records page views, clicks and anonymised Webvisor session replays and sets its own _ym_ cookies, some kept for up to a year. Without consent it is never loaded. To change your choice, clear this site's cookies and storage in your browser and the banner will appear again.
Services that receive your IP address
Every page loads fonts from Google Fonts, so your browser sends your IP address to Google. A domain search looks up the name over DNS-over-HTTPS at Cloudflare and Google Public DNS. Payment happens on a Stripe page: card and billing details go to Stripe, never to us, and Stripe tells us only whether the payment succeeded.
Data we do not collect
The site uses no advertising trackers or marketing pixels. We do not sell your data, do not profile you for advertising and never see your card details. The site is aimed at businesses and adults and does not knowingly collect data about children.
Transfers outside the EU
Our infrastructure is in the EU. With your analytics consent, Yandex processes Metrika data, including outside the EU. Google, Cloudflare and Stripe may also process data outside the EU under their own safeguards.
Legal basis
Logs, fonts and the domain check rely on our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Analytics runs only on your consent (Art. 6(1)(a)). Order and payment data is processed to perform our contract (Art. 6(1)(b)) and meet tax and accounting obligations (Art. 6(1)(c)).
Your rights
You may access, correct or erase your data, restrict or object to its processing, receive it in a portable form and withdraw consent at any time. Write to privacy@webhostflow.eu and we will answer within one month. Data kept only in your browser you delete yourself by clearing this site's data. You may also complain to your country's data protection authority.
Changes to this policy
When what the site collects changes, we update this page and its date. Any new tool, such as a marketing one, is added here before use and runs only with your consent.