Privacy Policy

Last updated: January 1, 2026

1. Data We Collect

We collect only the minimum data necessary to operate the Service:

• Account data: email address, username, hashed password
• Usage data: API request logs, bandwidth usage, storage metrics
• Payment data: processed by third-party providers (we never store card numbers)
• Viewer analytics: anonymous view counts, geographic region (country-level), device type

2. How We Use Your Data

• To provide and maintain the Service
• To authenticate your sessions and API requests
• To track bandwidth usage for billing purposes
• To detect and prevent abuse
• To send service-related communications (never marketing unless you opt in)

3. Cookies

ContentHosting uses a single session cookie (ch_session) for authentication. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Cloudflare may set essential cookies for CDN and security purposes.

4. Third-Party Services

• Cloudflare: CDN, DNS, and DDoS protection. Cloudflare Privacy Policy
• Backblaze B2: Object storage for BYOS and platform storage. Backblaze Privacy Policy

5. BYOS (Bring Your Own Storage)

When you use BYOS, your S3 credentials are encrypted at rest using AES-256-GCM. Your files remain in your own storage bucket. ContentHosting never accesses, copies, or reads your files except to stream them to viewers when requested.

6. Data Retention

Account data is retained as long as your account is active. Within 30 days of account deletion, all personal data is permanently removed. Anonymized analytics may be retained indefinitely.

7. GDPR Rights (EU Users)

If you are in the European Economic Area, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Object to processing
• Data portability

To exercise these rights, contact privacy@contenthosting.org

8. Data Security

We implement industry-standard security measures including TLS encryption for all data in transit, encrypted credential storage, and access controls. No system is 100% secure, but we take reasonable precautions.

9. Children's Privacy

ContentHosting is not intended for users under 13 years of age. We do not knowingly collect data from children. If we learn we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this policy at any time. Significant changes will be communicated via email. The latest version is always available at this URL.

11. Contact

Privacy questions? Contact us at privacy@contenthosting.org