Privacy Policy
We collect what we need, nothing more. We never sell your data.
Data We Collect
TheOnionHost operates on a data-minimization principle. We collect what is necessary to provide, bill, support, and secure our Services:
- Email address — required for account communications, invoices, support notifications, and service updates. Disposable or temporary email domains are not accepted.
- Account and billing records — name fields, contact details, invoices, tickets, and service history as you provide them in our billing system (WHMCS), retained for service delivery, fraud prevention, and lawful requests under the host venue.
- Billing / payment references — used for processing payments. We do not store card details directly; these are handled by payment gateway providers. Crypto payments are reconciled on-chain as needed.
- Service and security metrics — infrastructure and abuse-prevention signals limited to operating a stable network (not sold as browsing history or marketing dossiers).
How We Use Your Data
Data collected is used solely for the following purposes:
- Provisioning and managing your hosting services
- Sending invoices, payment confirmations, and service notifications
- Responding to support tickets and service requests
- Detecting and preventing abuse, fraud, and AUP violations
- Complying with legally enforceable requests from the appropriate jurisdiction
We do not use your data for advertising, profiling, or any purpose unrelated to service delivery.
Cookies
Our website uses cookies to maintain user sessions, recognize returning users, and enhance the browsing experience. Cookies are used for:
- Session management and login state
- Remembering user preferences
- Basic analytics for website performance
You may manage or disable cookies via your browser settings at any time. Disabling cookies may affect some website functionality.
No Sharing Policy
- ✓Service fulfillment (e.g., domain registrars)
- ✓Payment processing (gateways only)
- ✓Legally enforceable orders from the applicable hosting jurisdiction
- ✗Sell your personal data
- ✗Rent your data to third parties
- ✗Share data for advertising
- ✗Respond to foreign legal instruments without local court order
Foreign legal instruments — including requests from law enforcement or courts outside the server's jurisdiction — are not automatically complied with. Such requests require a valid, enforceable order from the appropriate local court.
Account Security
You are fully responsible for all activity on your account, regardless of whether such activity was authorized by you. You must:
- Keep your account credentials (username and password) secure
- Not share your password with any third party
- Ensure that unauthorized parties do not gain access to your account
- Notify us immediately if you suspect unauthorized account access
TheOnionHost reserves the right to suspend or terminate accounts found to be involved in unauthorized access or malicious activities, without notice or refund.
Cryptocurrency Payments & No-KYC Policy
TheOnionHost accepts Bitcoin, Monero, Ethereum, USDT, Litecoin, and other cryptocurrencies. For standard catalog crypto payments, we do not require government-ID verification (KYC). A working email is required; temporary or disposable email addresses are refused.
Crypto transactions are processed on-chain and are final once confirmed. We do not store private key information or wallet addresses beyond what is necessary for transaction reconciliation.
We do not sell traffic content logs. Traffic or content inspection, when used, is limited to security, abuse enforcement, and network integrity. No-KYC billing and data minimization do not grant legal immunity; clients remain liable under local law for what they host or transmit. When lawfully compelled under the host venue, we produce retained account and billing records — we do not invent data we do not possess.
Note: Crypto refunds are not processed to external wallets. In eligible cases (7-day window for shared/VPS), refunds may be credited as account balance.
Data Retention
We retain account, billing, ticket, and service records in WHMCS for the duration of the service relationship and for a reasonable period thereafter as required for legal compliance, abuse investigation, and dispute resolution.
Upon account termination, personal data is deleted or anonymized within a reasonable period, except where retention is required by applicable law or needed to document AUP enforcement.
Server content and files are deleted from our infrastructure upon service termination and are not recoverable after deletion.
Policy Updates
TheOnionHost may revise this policy at any time. Any changes will be published on our website and will take effect immediately in accordance with our Terms of Service. It is the client's responsibility to review this policy periodically.
Contact
For privacy-related questions or data requests, contact us via our support ticket system: billing.theonionhost.com/submitticket.php
Related policies: Terms of Service · Refund Policy · Acceptable Use Policy