Privacy Policy
Last updated October 18, 2026
This policy explains how StaticHero handles personal data about account holders (people who sign up) and visitors to statichero.com. For data about visitors to sites hosted on StaticHero, see section 5.
1. Data we collect
Account data: name, email address, profile image (if you sign in with Google), password hash, and account settings.
Billing data: plan, subscription status and billing history. Card details are handled by our payment provider, Dodo Payments; we never see or store full card numbers.
Content: the files you upload and the form submissions your sites receive.
Usage and technical data: log data such as IP address, browser and timestamps, used for security, abuse prevention and debugging.
Communications: messages you send us, including through the support chat on statichero.com and the dashboard.
Website analytics: when you visit statichero.com or use the dashboard, Google Analytics collects information such as pages viewed, referring site, approximate location, device and browser, and events like signing up, logging in, creating a site or buying a plan (including the plan and price). It uses cookies described in our Cookie Policy. We don’t send your name or email address to Google Analytics.
2. Why we use it
- To provide the Service (legal basis: contract).
- To bill you (contract, legal obligation).
- To secure the Service and prevent abuse such as phishing (legitimate interests).
- To send service emails: verification, receipts, form notifications and, if enabled, weekly reports (contract; you can turn off reports).
- To improve the product using aggregated, non-identifying statistics (legitimate interests).
- To measure how statichero.com and the dashboard are used and how well our marketing works, with Google Analytics (legitimate interests, or consent where the law requires it).
- To answer support requests, including through the support chat (contract, legitimate interests).
We do not sell personal data and do not use it for advertising.
3. Sub-processors
We use a small number of providers to run the Service, including our cloud infrastructure provider, Resend (email delivery), Dodo Payments (payments), Google (optional sign-in and Google Analytics for statichero.com) and Svellyo (support chat). A current list is available on request.
4. Retention
Account data is kept while your account exists and deleted within 30 days of account deletion, except billing records we must keep for tax purposes. Server logs are kept for up to 30 days. Form submissions are kept until you delete them or your site. Spam submissions are deleted after 30 days.
5. Visitors to hosted sites
When someone visits a site hosted on StaticHero, we process technical data (IP address, user-agent, requested URL) to deliver the page and protect the Service. If the site owner uses StaticHero Analytics, visits are counted without cookies: we compute a hash from a daily-rotating secret, the site, the IP address and user-agent, and never store raw IP addresses. Form data submitted to a hosted site is processed on behalf of that site’s owner, who is the controller.
6. Cookies
statichero.com uses only essential cookies for signing in and security. See our Cookie Policy.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your data, object to or restrict processing, and complain to a supervisory authority. Most data can be exported or deleted directly in the dashboard; for anything else email privacy@statichero.com.
8. International transfers
Our providers may process data outside your country. Where required we rely on appropriate safeguards such as Standard Contractual Clauses.
9. Changes
We will post updates here and notify account holders of material changes by email.