01 Who we are
“DohoHub”, “we”, “us” and “our” refer to the team that operates the DohoHub website at
dohohub.com — an independent monitor that tracks hosting and domain-registrar prices,
uptime and deals. This policy covers the public website, the developer API, and the accounts
and provider-cabinet areas that sit behind it.
If you only browse the site — reading provider pages, comparisons, deals or news — you can do so
without an account and without giving us any personal information. Everything below is about
the moments when data is actually created.
02 What we collect
Information you give us
- Newsletter signup. If you subscribe to price-drop alerts, we store your email address, the page you signed up from, and a unique unsubscribe token. That’s it — no name required.
- Contact form. When you write to us, we store the name, email, subject and message you enter (and email a copy to our team) so we can reply and keep a record of the conversation.
- Provider / registrar submissions. If you list a company, we store the business details you enter (company info, services, pricing pages, links) and any screenshots you upload. This is business data intended for publication, plus a contact so we can reach you about the listing.
- Accounts. If you register, we store your email and a securely hashed password (we never keep the password itself), plus anything you add to your profile or provider cabinet.
- Payments. If you buy a paid plan (for example API access or a promoted listing), your card / payment details are entered directly with our payment processor — we receive a confirmation and a record of the amount and status, not your card number.
- Reviews, ratings and price alerts. If you leave a review, cast a ▲/▼ vote, or set a price alert, we store that input (and, for alerts, the email you want the alert sent to).
Information collected automatically
- IP address. Your IP is used to rate-limit requests and prevent abuse. It is stored alongside a few actions that are prone to spam — a newsletter signup, a contact message, and a community vote — so we can moderate and de-duplicate them.
- Server & error logs. Like any web server, ours records requests and errors (including IP and browser user-agent) for security, debugging and keeping the service up.
- Anonymous vote de-duplication. When a signed-out visitor votes on a provider, we derive a one-way hash of your IP and browser so the same visitor can’t vote twice. The hash isn’t used to identify you or build a profile.
- Cookies & local storage. Only the essential ones — detailed in the next section.
03 Cookies & local storage
We use only what the site needs to function. There are no advertising, analytics or social-media tracking cookies on DohoHub.
| Name | Type | Purpose | Lifetime |
|---|
| session |
Essential |
Keeps you signed in to an account or the admin area and protects forms against cross-site request forgery (CSRF). Only set once you log in. |
Session, or 30 days if you tick “remember me”. HttpOnly, SameSite=Lax. |
| cur |
Essential |
Remembers your chosen display currency so prices render correctly the moment a page loads (no flash of the wrong currency). |
1 year. SameSite=Lax. No personal data. |
| localStorage: theme, currency |
Essential |
Your light/dark theme and currency choice, stored in your own browser so the site remembers your preference. Never sent to a server beyond the cur cookie above. |
Until you clear your browser storage. |
| localStorage: listing draft |
Essential |
If you use “Save as draft” on the add-a-provider form, your draft is kept only in your browser so you don’t lose it. It’s sent to us only when you submit, and cleared afterwards. |
Until you submit or clear it. |
Google’s bot-protection and web fonts (see “Who else receives data”) may set their own cookies when their scripts load; those are governed by Google’s policies, not ours.
04 How we use it
- Run the things you asked for — send the price-drop digest you subscribed to and the price alerts you set, operate your account and provider cabinet.
- Publish listings — review, moderate and publish the provider/registrar submissions and reviews people send us.
- Reply to you — answer contact messages and support requests.
- Take payment — process paid plans through our payment processor and keep a billing record.
- Keep the site safe and working — rate-limiting, bot protection, CSRF protection, and error logs for debugging.
- Show prices in your currency — remember your currency and theme so the site behaves the way you left it.
We do not use your data to build advertising profiles or to make automated decisions that have legal or similarly significant effects on you.
05 Legal bases
For visitors in the EU, UK and EEA, we rely on the following legal bases under the GDPR:
- Consent — for the newsletter (which you can withdraw at any time via the unsubscribe link).
- Performance of a contract — to run your account and to provide and bill any paid plan you buy.
- Legitimate interests — to operate, secure and improve the service, to prevent spam and abuse, and to remember your display preferences. We balance these against your rights.
- Legal obligation — where we must keep certain records (for example, of payments).
06 Who else receives data
We don’t sell or rent your personal data. A small number of processors and destinations receive data strictly to make a feature work:
- Payment processor — Stripe. When you pay, your payment details go directly to Stripe, which acts as an independent controller of that payment data under its own Privacy Policy. We store only the amount, currency and status.
- Google reCAPTCHA. Some forms (sign-up, sign-in, password reset, add-a-provider and contact) are protected by reCAPTCHA v3 when it’s enabled. Google’s script runs in your browser and we send your IP address to Google to score whether the request is automated. This is subject to Google’s Privacy Policy and Terms.
- Google Fonts. Our pages load web fonts from Google’s font servers, which may log your IP as part of serving those files.
- Domain availability search. When you check a domain name, that name is sent to our domain data provider and/or resolved against public DNS and WHOIS to check whether it’s available. Don’t put personal information into the domain search box.
- Outbound & affiliate links. When you click “Visit site”, you leave DohoHub for a provider or registrar — sometimes via an affiliate link that tells them the visit came from us. We don’t pass them your personal data; once you’re on their site, their own privacy policy applies.
- Email delivery. Digests, alerts and account emails are sent from our own mail server (or a configured mail relay).
We may also disclose information if we’re legally required to, or to protect the rights, safety and security of DohoHub, our users and the public.
07 What we never do
blockSell or rent your personal data.
blockRun advertising networks or ad trackers.
blockUse third-party analytics or social pixels.
blockTrack you across other websites.
blockStore your card numbers on our servers.
blockMake you register just to read the site.
08 How long we keep it
- Newsletter email — until you unsubscribe (there’s a one-click link on every email). After that we keep the unsubscribe record so we don’t email you again.
- Contact messages — while we handle your request and for a reasonable period afterwards for our records.
- Account & provider data — for as long as the account exists; delete it or ask us and we remove it (published, factual listing data may remain where it’s part of the public catalogue).
- Payment records — kept as long as needed for accounting and legal obligations.
- Logs & caches — server and error logs are kept short-term for security and debugging; technical caches (such as domain-check results) expire automatically.
09 Your rights
Depending on where you live, you can ask us to:
- Access the personal data we hold about you, or get a copy of it.
- Correct anything that’s wrong, or delete your data.
- Withdraw consent — unsubscribe from the newsletter (one click, on every email) or object to a particular use.
- Restrict or port your data where the law provides for it.
To exercise any of these, email contact@dohohub.com or use the contact form. We’ll respond within a reasonable time. EU/UK/EEA visitors also have the right to complain to their local data-protection authority.
10 Security
We protect data with measures appropriate to its sensitivity, including:
- Encrypted connections (HTTPS) across the site.
- Passwords stored only as bcrypt hashes, never in plain text; programmatic access uses revocable API keys instead of your password.
- CSRF tokens on forms and rate limiting against abuse.
- Uploaded images are stored with server-side code execution disabled in the upload directory, and the admin area sits behind authentication.
No system is perfectly secure, but we work to keep the attack surface small and to fix issues quickly. If you believe you’ve found a vulnerability, please tell us at contact@dohohub.com.
11 Children
DohoHub is a tool for buying and selling hosting and domains; it isn’t directed at children. We don’t knowingly collect personal data from anyone under 16. If you believe a child has given us data, contact us and we’ll delete it.
12 International visitors
DohoHub is operated for an international audience. Your data may be processed on our servers and by the processors named above, which can be located in countries other than your own. Where that involves a transfer of personal data, we rely on the processor’s own safeguards and applicable legal mechanisms.
13 Changes to this policy
We may update this policy as the site evolves or the law changes. When we do, we’ll revise the “last updated” date at the top; for material changes we’ll make the update more prominent. Continuing to use DohoHub after a change means you accept the updated policy.
