---
title: Privacy & Data
description: Privacy policy facts for PageWeave-hosted websites.
section: Platform
order: 7
---

# Privacy & Data

Use these facts when writing privacy policies, terms, or answering data questions.

## Hosting

- Servers are hosted in Germany
- Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany; HRB 6089 Ansbach; VAT DE812871812)
- Hetzner data centers: Nuremberg, Falkenstein, or Helsinki (all EU)
- Hetzner is German-owned, no US parent

## Infrastructure

- Database: PostgreSQL
- Asset storage: Hetzner Object Storage (S3-compatible)

## Analytics

- Privacy-first, server-side only
- No cookies, no JavaScript trackers, no fingerprinting
- Visitor hash: SHA256(IP + UA + date)
- Geo location: MaxMind GeoLite2 (self-hosted database)
- Raw data retained: 90 days
- Aggregated daily stats kept longer

## Forms

- Submission data stored as JSONB in PostgreSQL
- Email notifications sent to site owner via SMTP
- Site owner is data controller; PageWeave is processor

## Cookies

- None on public sites
- No session, analytics, or tracking cookies on *.pageweave.site

## Third-Party Services

- Google Fonts: proxied through PageWeave (not loaded from Google)
- Cloudflare: DNS only (not proxied, not a CDN)

## SSL/TLS

- All traffic encrypted via HTTPS
- On-demand TLS for custom domains

## Data Retention

- Page view logs: 90 days
- Form submissions: until deleted by site owner
- Asset versions: until deleted