Privacy Policy

1. Information We Collect

HostDir collects the following types of information when you use our site:

Account Data

Name and display name
Email address
Password (stored as a secure bcrypt hash, never in plain text)
Profile information you choose to provide (avatar, bio)

Usage Data

IP address
Browser type and version
Pages visited and time spent on each page
Referring website or source
Device type and operating system

User Content

Reviews and ratings you submit for hosting providers
Comments and replies on reviews
Forum posts and replies
Messages sent through the platform

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the HostDir platform and its features
Process payments for listings, sponsored placements, and other paid products through PayPal
Send transactional notifications, such as order confirmations, account updates, and security alerts
Improve the site's performance, usability, and content based on usage patterns
Prevent abuse, fraud, and unauthorized access to the platform
Respond to your inquiries, support requests, and feedback
Enforce our Terms and Conditions and other policies

3. Information Sharing

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

Payment processing: When you make a purchase, we share necessary transaction details with PayPal to process your payment. PayPal's handling of your data is governed by their own privacy policy.
Legal requirements: We may disclose your information if required to do so by law, in response to a court order, subpoena, or similar legal process.
Protection of rights: We may share information when we believe disclosure is necessary to protect our rights, your safety, the safety of others, or to investigate fraud.

4. Data Retention

We retain your information according to the following guidelines:

Account data: Retained for as long as your account is active. If you request account deletion, we will remove your personal data within a reasonable timeframe.
User content: Reviews, forum posts, and comments may persist on the site in an anonymized form after account deletion, as they contribute to the community and the integrity of the directory.
Server logs: Access and error logs containing IP addresses and usage data are rotated and purged periodically, typically within 90 days.
Payment records: Transaction records are retained as required for accounting, tax, and legal compliance purposes.

5. Your Rights

You have the following rights regarding your personal information:

Access: You can view and download the personal data we hold about you through your account settings
Correction: You can update or correct your account information at any time through your profile settings
Deletion: You can request the deletion of your account and associated personal data by contacting us
Data portability: You can request a copy of your data in a commonly used format

To exercise any of these rights, please contact us through our Contact Page.

6. Security Measures

We take the security of your information seriously and implement appropriate technical and organizational measures, including:

All passwords are hashed using the bcrypt algorithm and are never stored in plain text
CSRF (cross-site request forgery) protection is implemented on all forms to prevent unauthorized actions
HTTPS encryption is used for all communications between your browser and our servers
Access to user data is restricted to authorized personnel only
Regular security reviews and updates are performed to address potential vulnerabilities

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

7. Children's Privacy

HostDir is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13 without parental consent, we will take steps to remove that information from our servers promptly. If you believe we may have collected information from a child under 13, please contact us immediately through our Contact Page.

8. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this page. For significant changes, we may also notify registered users via email. We encourage you to review this page periodically to stay informed about how we protect your information.

9. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please reach out to us through our Contact Page. We will do our best to respond within a reasonable timeframe.