Privacy
Privacy statement.
What we collect, why, where it lives and what you can ask us. Written in plain language.
Version 29 October 2026
Who we are
Stellar Hosting, Stentorlaan 83, 7534 HT Enschede, Netherlands, Chamber of Commerce 83117644, runs this website and the Stellar Commerce platform. For anything in this statement, write to contact@stellarhosting.nl.
Two roles
For people who visit this website, request access, hold an account or pay for a subscription, we decide what is processed and why. We are the controller.
For the data inside your shop, such as your customers, their orders and your content, you decide. You are the controller and we process that data on your instructions, under the data processing terms in the terms of service. If you are a customer of a shop that runs on Stellar Commerce, that shop is your contact for privacy questions; we cannot act on its data without its instruction.
What we process, and why
Visiting the website
Our web servers keep technical logs: the IP address, the page requested, the time and the browser. We use them to keep the service secure and to find faults. They are kept for at most 30 days. There are no analytics and nothing is profiled.
Requesting access or signing up
You give us your name, a work email address, a Store name, a country, a currency and a language, and optionally a company name and a message. When you sign up, you also give your business’s legal name and address, for the invoices, and we record which version of the terms of service you accepted and which version of this statement you were shown. We use these details to assess the request and to set up the account and the first Store; that is a step towards a contract. Without a company name, the workspace gets your business’s legal name when you sign up, and is named after you otherwise. A request that does not lead to an account is removed after six months, unless a payment was made: then we keep the request with its invoice, for as long as the law requires us to keep invoices.
Your account
An account holds your email address, your password as a hash, your two-factor secret and recovery codes, your sign-in sessions, and the team members you invite with their roles. We process these to run the service you subscribed to. They are kept for as long as the account exists.
Billing
Payments are handled by Mollie. We store the subscription status, the period paid for, Mollie's customer and payment references, your billing country and the invoices. We never see card or bank details. Invoices are kept for seven years because Dutch tax law requires it.
Support and email
What you send us by email is kept for as long as we need it to help you, and for two years after the last message so we can look back at earlier questions.
Your shop
Products, customers, orders, content and settings are your data. We store and back them up for you, and we look at them only when you ask for help or when the platform needs it to work. They are deleted 30 days after the subscription ends.
Cookies and browser storage
| Name | Purpose | How long |
|---|---|---|
| Sign-in session | Keeps you signed in to your account, the Admin and the documentation. Set only when you sign in; functional, first-party, never read by anyone else. | Until you sign out or the session expires |
| Display preferences | Your theme and density choice, kept in your browser's local storage. Never sent to us. | Until you clear it |
There are no tracking cookies, no advertising cookies and no third-party analytics, which is why there is no cookie banner. Mollie's payment pages run under Mollie's own policy.
Where your data is
Everything runs on servers in the European Union, and so do the backups. Our processors keep the data in the European Union too; where a processor is a company from outside the European Economic Area, it works for us under a data processing agreement with the EU standard contractual clauses. These are the parties that process data for us:
| Processor | What for | Where |
|---|---|---|
| netcup GmbH | Servers, databases and backups for the platform | European Union |
| Hetzner Online GmbH | Servers, databases and backups for the platform | European Union |
| Mollie B.V. | Payment of the subscription; we never see card or bank details | Netherlands |
| Cloudflare, Inc. | Storage of uploaded files such as product images | European Union |
| Resend, Inc. | Sign-in, invitation and verification email | European Union (EU region) |
Who else sees it
Nobody. We do not sell data and we do not share it with advertisers. Beyond the processors above, we hand over data only when the law obliges us to, and we tell you when we are allowed to.
How we protect it
Connections are encrypted. Secrets and payment references are stored encrypted. Accounts use two-factor sign-in. Access to the platform is limited to the people who operate it and is logged. Backups are taken daily and kept in the European Union.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to limit what we do with it, to receive it in a portable form, and you can object to processing based on our legitimate interest. Write to contact@stellarhosting.nl; we answer within a month. If you are not satisfied, you can complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens.
Changes
We change this statement when the service changes. The version date at the top tells you when. Account holders are told by email about changes that matter to them.