Effective date: August 22, 2026. This version supersedes all earlier Privacy Policies. We'll post the updated date here if that changes.
On this website
The four sections below describe what happens when you simply visit artisanhosting.net, before you're a client of anything.
Analytics
We run Plausible on our own servers. It records page views, referrers and rough country, plus which links to other sites get clicked, including the preview cards for our templates, portfolio and link pages. No cookies, no cross-site identifiers, and nothing that identifies you personally. That's why you aren't being asked to accept anything.
The contact form
When you submit the form we receive what you typed: your name, email, and whatever else you chose to fill in. It's emailed to us and to you. We use it to reply to you. We don't sell it, and we don't add you to a mailing list you didn't ask for.
The form is protected by Cap, a proof-of-work captcha, so we don't have to hand your visit to a third-party bot detector.
Server logs
Our web server keeps standard request logs, IP address, path, timestamp, user agent, for operational and security purposes. They're not joined to anything else and they're not used for marketing.
Third parties on this site
- Plausible, self-hosted by us, on our infrastructure.
- Cap, the captcha widget script, loaded from jsDelivr, pinned to a specific version.
- Cal.com, the booking calendar on the contact page. It only loads if you click to open it, so it sees nothing unless you ask for it.
That's the whole list. Fonts are served from our own server rather than a font CDN.
As a client of our services
The sections below explain how we collect, use, and share information in connection with our services, including Domain & Email Hosting. They apply to our clients and, where relevant, to the end users of mailboxes a client provisions on our platform.
1. Information We Collect
Account & billing information. Name, business name, email address, billing address, and payment details (processed by our payment processor, we do not store full card numbers ourselves), collected when you sign up or update your account.
Domain & DNS information. Domain registration (WHOIS) details, DNS records, and configuration data needed to register and operate your domain.
Mailbox & email metadata. We do not read the content of your email. Mail content is stored and processed by MXroute as our mailbox-hosting subprocessor. We do collect operational metadata needed to run the service: mailbox count, storage usage, delivery/bounce logs, and basic sending statistics used for monitoring, storage alerts, and abuse prevention under our Acceptable Use Policy.
Technical & support data. Support requests, account activity logs, and technical information (such as IP addresses in server/mail logs) used for security, troubleshooting, and service delivery.
2. How We Use Information
We use the information above to:
- Provide, maintain, and monitor the Email Service (including the 80%-storage alerts and tier-upgrade process described in our Domain & Email Hosting Terms of Service)
- Bill for services and handle payment disputes
- Provide customer support and respond to your requests
- Detect, investigate, and prevent abuse, security incidents, or violations of our Acceptable Use Policy
- Comply with legal obligations (e.g., responding to lawful requests, domain registry requirements, tax records)
We do not sell personal information, and we do not use mailbox content or metadata to build advertising profiles.
3. Service Providers (Subprocessors)
We rely on a small number of third parties to deliver the Email Service. Each processes data only as needed to perform its function for us:
- MXroute, mailbox hosting and mail delivery infrastructure. Mail content and mailbox data reside on MXroute's systems.
- Cloudflare, DNS management and, for registered domains, registrar services.
- Wave, invoicing and billing. Wave processes the billing information needed to generate and deliver your invoices.
- Bluebird, banking and payment handling. Bluebird processes payment information in connection with receiving and reconciling client payments.
Each of these providers has its own privacy practices governing the data it processes on our behalf. We select providers we believe handle data responsibly, but we do not control their independent processing and are not responsible for their independent acts.
4. Data Retention
Account, billing, and domain/DNS records are retained for as long as your account is active, plus a period after cancellation to satisfy tax, accounting, and legal recordkeeping obligations.
Mailbox content and metadata are retained for as long as the mailbox is active. Following offboarding (see Section 5 of the Domain & Email Hosting Terms of Service), mailbox data is exported or made available for migration, then deleted from active systems within a reasonable period.
Server, delivery, and support logs are retained only as long as needed for security, troubleshooting, and abuse investigation, and are periodically purged.
5. Data Security
We use reasonable administrative and technical safeguards appropriate to a small hosting provider, including access controls on our Cloudflare and MXroute reseller accounts and staged, monitored suspension procedures rather than abrupt data loss on non-payment. No method of storage or transmission is fully secure, and we cannot guarantee absolute security.
If we host something for you, we can technically see it, that's what running a server means. We access client systems to operate them, not to look through them. Access is least-privilege and reviewed periodically, and it's covered explicitly in the boundaries we agree at the start of an engagement.
6. Your Rights & Choices
Consistent with our no-lock-in approach, you may at any time:
- Request a copy/export of your DNS zone file and mailbox data
- Request correction of inaccurate account information
- Request deletion of your account data, subject to legal retention obligations described in Section 4
- Transfer your domain to a registrar of your choosing (see our offboarding process)
To exercise any of these, use our contact form. Depending on your location, you may have additional rights under applicable law (for example, state privacy laws in the U.S. or the GDPR if you are in the EU/UK); we will honor valid requests to the extent required.
7. Children's Privacy
Our services are intended for businesses and individuals who are at least 18 years old. We do not knowingly collect personal information from children.
8. International Data
Our infrastructure and service providers (including MXroute and Cloudflare) may process data in the United States. By using our services, you consent to this processing.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email to your account contact at least 14 days before taking effect.
Questions, or a deletion request
Use the contact form below and a person will handle it directly.