Skip to content

Privacy Policy

Effective date: September 21, 2026

This Privacy Policy explains how HostHob (“we,” “us,” or “our”) handles personal information across our website, client services, and products. HostHob is a sole proprietorship (eenmanzaak) based in Rotterdam, the Netherlands (Wolphaertsbocht 423a).

This is a company-wide policy. Product-specific details (for example, advertising in our mobile games) may be described in linked policies. Where a product listing requires a privacy URL, this page is the primary reference unless a product-specific policy is linked instead.

1. Who we are

Controller for hosthobcorp.com and for personal data we decide how to process (for example, website inquiries and our own business records): HostHob, Wolphaertsbocht 423a, Rotterdam, the Netherlands. Contact: eljalink@gmail.com.

2. Scope

This policy covers:

  • our website and contact forms;
  • agency / consulting engagements (WordPress, Laravel, APIs, and related engineering services);
  • cloud marketplace apps we publish (including Atlassian / Jira apps, and similarly structured apps such as Shopify apps); and
  • mobile games and other products we operate, with additional detail where linked below.

3. Roles: controller and processor

Depending on the context, HostHob may act as:

  • Controller — when we determine the purposes and means of processing (website visitors, sales inquiries, our own accounts and billing for HostHob).
  • Processor — when we process personal data on behalf of a customer in connection with a cloud marketplace app installed in their workspace or store (for example, a Jira Cloud site or a Shopify store). In that case, the customer (or their organization) is typically the controller, and we process data under their instructions and the platform’s terms.

Platform providers such as Atlassian and Shopify also process data under their own privacy policies when you use their products.

4. Information we collect

Website and contact forms. When you contact us we may collect your name, email address, company, phone, project details, and message contents. Server logs may include IP address, user agent, timestamps, and basic request metadata needed to operate and secure the site.

Client engagements. If you work with us as a client, we may process contract details, billing information, project communication, and credentials or access you provide for delivery — only as needed for the engagement.

Cloud marketplace apps (Atlassian / Jira first; Shopify and similar). When you install or use our apps on a third-party platform, we may process:

  • installer / admin account identifiers and contact details provided by the platform;
  • installation, license, and entitlement metadata;
  • configuration settings you store for the app;
  • workspace, project, issue, store, or order data that the app is authorized to access via the platform APIs, solely to provide the app’s features under the customer’s instructions;
  • diagnostic and operational logs (errors, performance, security events); and
  • support requests you send us about the app.

We do not use customer workspace or store content from marketplace apps to sell personal information or to build unrelated advertising profiles. Exact fields depend on the app’s scopes and your configuration; app listings describe permissions requested at install time.

Games. Our mobile game Forgebound has additional advertising-related practices described in the Privacy Policy for Forgebound.

5. Purposes and legal bases

We use personal information to:

  • respond to inquiries and provide services (legitimate interests / contract / steps prior to contract);
  • operate, secure, and improve our website and products (legitimate interests);
  • provide and support marketplace apps for customers who install them (contract / legitimate interests; processor obligations to the customer);
  • comply with legal obligations; and
  • send service or transactional messages related to your request or installation.

Where EU/EEA/UK GDPR applies and we rely on legitimate interests, we balance those interests against your rights. Where consent is required (for example, certain cookies or marketing), we will ask for it.

6. Sharing and sub-processors

We do not sell personal information. We may share information with:

  • hosting, email, and infrastructure providers that process data on our behalf;
  • platform providers required to run the product (for example Atlassian for Jira apps, Shopify for Shopify apps);
  • professional advisors (legal, accounting) under confidentiality; and
  • authorities when required by law.

Providers are limited to what is needed to deliver the service. Platform marketplaces remain governed by Atlassian’s, Shopify’s, or other platforms’ own terms and privacy notices.

7. International transfers

We are based in the Netherlands. Some providers or platforms may process data in other countries. Where required, transfers are protected using appropriate safeguards (such as Standard Contractual Clauses) or other lawful transfer mechanisms offered by those providers.

8. Retention

We retain personal information only as long as needed for the purposes above, including legal, accounting, and dispute-related needs.

  • Website inquiries: typically up to 24 months after the last meaningful contact, unless a longer period is needed for an active discussion or legal claim.
  • Client records: for the duration of the engagement and as required by Dutch retention rules for business records.
  • Marketplace app data: for as long as the app remains installed and for a reasonable period afterward for backups, audits, and support, or earlier if the customer instructs deletion where we control that data.

9. Security

We apply technical and organizational measures appropriate to the risk, including access controls, encrypted transport where available (HTTPS), and limiting staff access to what is needed. No method of transmission or storage is completely secure; please use strong credentials and report suspected issues promptly to eljalink@gmail.com.

10. Your rights

If applicable data-protection law applies to you (including GDPR), you may have the right to access, rectify, erase, restrict, or object to certain processing, and to data portability. You may also lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) or your local supervisory authority.

To exercise rights for data we control, contact eljalink@gmail.com. For data processed only inside a customer’s Atlassian or Shopify tenant as a processor, please contact that organization first; we will assist them as required.

11. Children

Our website, consulting services, and marketplace apps are directed at businesses and professionals, not at children. We do not knowingly collect personal information from children for these services. Game-specific practices are described in the linked Forgebound policy.

12. Product-specific notes

Atlassian / Jira apps. Our cloud apps for Jira (and related Atlassian products) are the primary marketplace product family covered by section 4. Permissions are requested at install time via Atlassian. End-user personal data in Jira remains under the customer’s control; we process it only to provide the app.

Shopify and similar apps. The same processor model and categories in section 4 apply when we publish apps on Shopify or comparable marketplaces, adapted to that platform’s APIs and permission model.

Forgebound. Advertising and device data for the mobile game are described in the Privacy Policy for Forgebound.

13. Changes and contact

We may update this Privacy Policy when our products, providers, or legal requirements change. We will publish the revised policy on this page and update the effective date.

Questions or requests: HostHob, Wolphaertsbocht 423a, Rotterdam, the Netherlands — eljalink@gmail.com.