Last updated: June 28, 2026
HostCart (“we”, “us”, “our”) provides a QR commerce platform for short-term rental hosts. This Privacy Policy explains what personal data we collect, why we collect it, and the choices you have. By using HostCart, you agree to this policy.
1. Who this policy applies to
Hosts who create an account, connect Stripe, and manage stores through our dashboard.
Guests who scan a host’s QR code and check out without creating a HostCart account.
Website visitors who browse hostcart.com or related marketing pages.
2. Information we collect
Account data (hosts): name, email address, password hash, and shop settings.
Store data: product catalog, pricing, images you upload, and QR configuration.
Guest checkout data: items purchased, order totals, and payment status (card data is processed by Stripe; we do not store full card numbers).
Usage data: pages viewed, feature usage, browser type, and approximate location for language detection. We use PostHog for analytics.
Communications: transactional emails and support messages.
3. How we use information
To provide, secure, and improve HostCart; process orders and Stripe Connect payouts; authenticate hosts; prevent fraud; send transactional emails; analyze aggregated usage; and comply with legal obligations.
4. Legal bases (EEA/UK)
Where GDPR applies, we rely on contract, legitimate interests (security and product improvement), consent where required, and legal obligation.
5. How we share information
We do not sell personal data. We share data with service providers including Stripe (payments), Resend (email), PostHog (analytics), cloud hosting and database providers (Vercel, Neon), and file storage (Cloudflare R2), only as needed to operate the service.
6. Retention and your rights
We retain data while your account is active and as required by law. Depending on your location, you may access, correct, delete, or port your data by contacting privacy@host-cart.com.
7. Cookies, children, and changes
We use essential cookies for sign-in, security, and language preferences. Analytics cookies (PostHog) are optional—we ask for your consent before storing them. You can accept, reject, or change your choice anytime via Cookie settings in the site footer. If you reject analytics, PostHog runs without tracking cookies. HostCart is not directed to children under 16. We may update this policy and will post changes on this page.
8. Contact
Questions: privacy@host-cart.com. HostCart is operated by Vendeclip.