Plain words about your information.

When you contact us or start a free website build, we collect what you give us: your name, email address, business name, town, and whatever you tell us about your business, including photos and documents you upload. That information exists for one purpose: researching, building, and managing your website.

When you sign in, we set a session cookie so you stay signed in. Private website previews use a second cookie that unlocks the preview you were sent. That's the whole cookie list. We run no advertising trackers and no third-party analytics.

Our servers count visits to the websites we host and to this one, so owners can see how their site is doing. To count a person once rather than twice we make a short code from their network address, the site, and today's date, mixed with a secret. We never store the address itself, and because the code changes at midnight it cannot be used to recognise anyone tomorrow or to follow them from one site to another.

We also record where a visit came from, as a name like "Google" or "Facebook" rather than the page you were on. That tells an owner their listing is working. It says nothing about you.

On this website only, and not on any website we build for a customer, we measure a little more so we can tell whether our own pages are any use: which pages you looked at and in what order, roughly how long each was on your screen, which links you pressed, and how far down you scrolled. That is kept for 30 days and then deleted. It tells us that people arrive at a page and leave without reading it, which is the only way we find out a page is failing.

For that we give your tab a random label that exists only until you close it. If you are visiting from the United States or Canada we also keep a random label on your device so that a second visit is not counted as a stranger; if you are visiting from the UK, the EU, or the rest of Europe we do not, because there it should be asked for first and we would rather not interrupt you to ask. You can clear it any time by clearing your browser storage for this site.

We never record anything you type. Not what you enter in a form, not keystrokes, not where your mouse moves, and we make no recording of your screen. Pressing the send button on the contact form is counted; nothing you wrote in it is.

We set no advertising cookies, run no third-party analytics, and sell nothing to anyone. If you would rather not be counted at all, most browsers can send a Do Not Track signal or block the page entirely, and you can write to us and we will exclude your network from counting.

To build and manage your website, to answer you when you write to us, and to send you the emails you'd expect: verification codes, notices that your site is ready, and billing receipts once billing exists. We don't send marketing blasts, and we never sell or rent your information to anyone.

Your website and ours are served through Cloudflare. Email runs on Microsoft 365. If you sign in with Microsoft or Google, they confirm your email address to us and we store that address; we never see your password. When payments launch, cards are handled by Stripe, and card numbers never touch our servers.

We use AI services from Anthropic and xAI to research businesses and build and manage websites. The business information you provide may be processed by those services for that work. We do not use your information to train anyone's models.

Your domain is registered in your name. Your website's content is about your business and belongs to you. If you cancel, you keep the domain and we hand off your site cleanly.

Want to see what we have about you, correct it, or have it deleted? Email [email protected] and a person will take care of it.

We are a Michigan company serving businesses in West Michigan, and everything we run sits on servers in the United States. If you visit from the UK, the EU, or anywhere else, your visit is counted the same way described above and the information reaches the United States.

We rely on a legitimate interest in knowing whether our own website works, and we have kept that interest as small as we can: no cookie, no stored address, a code that expires nightly, and no profile of anyone. If you would prefer we did not count your visits at all, write to [email protected] and we will exclude you.

You can ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Write to the same address and a person will answer. If you are a customer, most of it is visible to you already when you sign in.

Our services are for businesses and aren't directed at children. If this policy changes, the current version lives at this address with an updated date. Questions about any of it: [email protected].

Harborlight Web LLC · West Michigan · Effective July 27, 2026