Dear Host Studio

Privacy policy

Controller

Who this policy applies to

This website and the ebooks offered through our Etsy shop are directed at hosts and readers worldwide, including in the United States and in Europe. This policy applies wherever you visit from. For people in the European Economic Area, the United Kingdom, and Switzerland we process personal data under the GDPR (and the UK GDPR where it applies). If you are in the United States, you can write to us at the address above to ask what we hold about you, to correct it, or to have it deleted.

What this site collects

Server logs. When you visit this site, our hosting provider processes technical connection data (IP address, time of request, requested page, browser information) to deliver the site and protect it against abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). This data is not used to identify you and is retained only briefly.

Newsletter. If you subscribe to the newsletter, we store your email address, the time of subscription, and the time of your confirmation (double opt-in). Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every email; your address is then removed from the mailing list.

Questions. If you send a question through this site, we store your email address and your message so we can reply. Legal basis: taking steps at your request (Art. 6(1)(b) GDPR) or legitimate interest in answering inquiries (Art. 6(1)(f) GDPR).

Cookies and tracking

This website uses no advertising trackers. For visitor statistics we use Cloudflare Web Analytics, a privacy-first measurement tool: it sets no cookies, stores no identifiers on your device, and does not follow you across websites. It produces only aggregated statistics (pages viewed, referrer, country, browser type). Legal basis: legitimate interest in understanding overall site usage (Art. 6(1)(f) GDPR).

The newsletter and question forms are protected by Cloudflare Turnstile, an invisible check that stops automated spam. Turnstile may set a short-lived technical cookie solely for that check. We do not use it to advertise or follow you across sites. Legal basis: legitimate interest in protecting the forms against abuse (Art. 6(1)(f) GDPR).

Service providers we actually use

We work with the following service providers:

• Cloudflare, Inc.: Website hosting, content delivery, and API infrastructure (Cloudflare Pages and Workers). Cloudflare processes technical connection data (IP address, request metadata) to deliver this site and protect it from abuse.
• Cloudflare storage services: This site's backend uses a database (Cloudflare D1) that stores newsletter subscriptions and questions submitted through the contact form; a key-value store (Cloudflare KV) used for operational data of the shop tools; object storage (Cloudflare R2) used for operational backups. All of it runs on Cloudflare's infrastructure with a Western Europe location preference.
• Cloudflare Email Service: Transactional email delivery: newsletter confirmation emails (double opt-in) and internal notifications. Your email address is processed by Cloudflare solely to deliver these emails.
• Etsy, Inc.: Our digital products are sold through our Etsy shop to customers worldwide, including in the United States and in Europe. When you buy there, the purchase is handled entirely by Etsy under Etsy's own terms and privacy policy; this website does not receive your payment or order data.
• Cloudflare Turnstile: Invisible bot protection on the newsletter and question forms. Cloudflare checks whether a submission is likely human; it sets no advertising cookies and is used only to keep spam out of those forms.
• Cloudflare Web Analytics: Privacy-first visitor statistics. It sets no cookies, stores nothing on your device, and does not track you across websites; we only see aggregated numbers such as page views, referrers, countries, and browser types.

Where your data is processed

We are based in Italy. Some of our service providers (notably Cloudflare and Etsy) are companies in the United States, so data may be processed in the European Union and in the United States. Where personal data leaves the EEA, the transfer rests on the lawful tools those providers use (including standard contractual clauses and, where applicable, adequacy decisions). Data is used only for the purposes described in this policy.

Your rights

Under the GDPR you have the right to access, rectify, and erase your personal data, the right to restrict or object to processing, the right to data portability, and the right to withdraw consent at any time with effect for the future. Visitors in the United States may contact us for the same access, correction, and deletion requests. To exercise any of these rights, email hello@dearhost.studio. If you are in the EEA you may also lodge a complaint with a supervisory authority; in Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it), or the authority of the country where you live or work.

Purchases on Etsy

All purchases happen in our Etsy shop. Etsy is an independent controller for the data it processes there (account, payment, order, and download data). Please see Etsy's own privacy policy for details.