Privacy Policy

1. Who we are

MakeMySiteLive provides static-website hosting: you upload your site and we publish it on a subdomain or your custom domain. For your account data we act as a data controller. For content you publish and data collected from your site’s visitors (for example, contact-form submissions), you are the controller and we act as your processor — see section 9.

2. Information we collect

• Account information — your name, email address, and a securely hashed password (or, if you sign in with Google, your basic Google profile and email). We never store your Google password.
• Content you upload — the files that make up your website and any settings you configure (custom domains, password protection, forms).
• Form submissions — data that your site’s visitors submit through contact forms we host on your behalf.
• Billing information — handled by our payments provider (see section 6). We do not see or store your full card number; we keep only a record of what you purchased and your subscription status.
• Technical & usage data — IP address, approximate country (used to show correct pricing and to prevent abuse), bandwidth usage, request metadata, and security logs.
• Cookies — strictly necessary only (see section 4).

3. How we use your information

• To provide, operate, and maintain the Service and your sites.
• To authenticate you and keep your account secure.
• To process payments, manage subscriptions, and show region-appropriate pricing.
• To detect, prevent, and respond to fraud, abuse, malware, and security incidents (including scanning uploads).
• To communicate with you about your account, security, billing, and important changes.
• To comply with legal obligations and enforce our Terms of Service.

We rely on the legal bases of contract (to deliver the Service), legitimate interests (security and improving the Service), consent (where required, e.g. optional communications), and legal obligation.

4. Cookies

We use only strictly necessary cookies. We do not use advertising, marketing, or third-party tracking cookies.

Because these cookies are essential to deliver a service you have requested, they do not require consent under most privacy laws. You can block cookies in your browser, but parts of the Service may then not work.

For traffic measurement we use Cloudflare Web Analytics, a privacy-friendly, cookieless analytics service. It does not set cookies, does not track you across sites, and does not collect personal data — which is why you won't see a cookie banner.

5. How we share information & our sub-processors

We do not sell your personal information. We share data only with service providers who help us run the Service, under appropriate agreements:

• Dodo Payments — our Merchant of Record; processes payments and handles tax/invoicing.
• Cloudflare — content delivery, TLS/SSL termination, custom-domain hostnames, and privacy-friendly, cookieless web analytics.
• Cloudflare R2 — object storage for your uploaded site files.
• ipinfo.io — maps an IP address to an approximate country for pricing and fraud prevention.
• Email delivery provider — sends transactional email (verification, password reset, notices).
• Google — only if you choose “Sign in with Google”.

We may also disclose information if required by law, to protect our rights or users’ safety, or in connection with a merger or acquisition.

6. Payments

Purchases are processed by Dodo Payments as Merchant of Record. Dodo collects and processes your payment details under its own privacy policy and is responsible for tax collection and invoicing. We receive confirmation of your purchase and subscription status but not your full payment card details.

7. International transfers

Our providers may process data in countries other than yours. Where personal data is transferred internationally, we rely on appropriate safeguards (such as standard contractual clauses) as required by applicable law.

8. Data retention & security

We keep personal data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete a site or your account, we delete or anonymise the associated data within a reasonable period, except where we must retain certain records (e.g. for tax or legal reasons).

We protect data with encryption in transit (HTTPS), password hashing, malware scanning of uploads, and access controls. No method of transmission or storage is 100% secure, but we work to protect your information.

9. Sites you publish and your visitors

When visitors interact with a site you host (e.g. submit a contact form), you are the controller of that data and we process it on your behalf. You are responsible for having a lawful basis to collect it and for providing your own privacy notice to your visitors where required. We store form submissions so you can access them and act on your documented instructions.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict processing of your personal data, to object to certain processing, and to withdraw consent. Residents of the EU/UK (GDPR), California (CCPA/CPRA), and India (DPDP Act) have specific rights under those laws. To exercise any right, contact us at [email protected]. You also have the right to complain to your local data protection authority.

11. Children

The Service is not directed to children under 16 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

12. Third-party sites

Sites hosted on our platform and any third-party links are operated by others and are governed by their own privacy practices. We are not responsible for the content or privacy practices of those sites.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version here with an updated date and, where appropriate, notify you. Continued use of the Service after changes take effect means you accept the updated policy.

14. Contact us

Questions about privacy? Email [email protected].