Privacy Policy

Effective date: October 20, 2026 · Last updated: October 20, 2026

This Privacy Policy explains how Beach n Spicy LLC, doing business as "Hosting Unfiltered" ("we," "us," "our"), collects, uses and shares personal information when you visit hostingunfiltered.com, sign up for our free downloads or emails, or buy and use our online course (together, the "Services").

At a glance

  • We collect only what we need to run the course: mainly your email address, your name, your plan and your course progress.
  • We do not sell your personal information.
  • Payments are handled by Stripe – your card number never reaches us.
  • No advertising cookies unless you click "Accept" in our cookie banner. Our website statistics are cookieless.
  • You can unsubscribe from marketing emails with one click and ask us anytime to see, correct or delete your data.

1. Who is responsible

Beach n Spicy LLC, 260 Calusa Blvd, Destin, FL 32541, USA. Email: [email protected].

2. Information we collect

Information you give us

  • Account and order information: your email address, first and last name, the plan you bought, and the billing country (and, where needed for sales tax, ZIP or postal code) you enter at checkout.
  • Consent records: the date and time you accepted our Terms and the checkout text, and the version of that text.
  • Free downloads and newsletter: your email address, which free download you asked for, and the date, time and IP address of your sign-up and of your confirmation click (double opt-in).
  • Messages: what you write to us by email, the contact form or the cancellation form (for example your name, email, plan and reason for cancelling).

Information created when you use the course

  • Course progress: which lessons you have opened or completed, your quiz answers and results, and the downloads you used.
  • Login and security data: the time of logins, the login codes and links we send, and technical data such as IP address, browser and device type, which we use to keep your account secure and to detect account sharing.

Information collected automatically on our website

  • Server and security logs: when you visit our website, our hosting provider Cloudflare processes technical data such as IP address, browser type, the page requested and the time of the request, to deliver the site and protect it from attacks.
  • Cookieless statistics: we use Cloudflare Web Analytics, which counts page views without cookies and without building profiles of individual visitors.
  • Video playback: when you watch a course video, our video provider Bunny Stream processes technical data (such as IP address, device and playback information) to stream the video.
  • Advertising measurement – only with your consent: if you click "Accept" in our cookie banner, Google Ads may set cookies to measure whether you came to us from a Google ad and then bought the course (see Section 5).

Information from third parties

  • Stripe tells us whether your payment succeeded and gives us limited payment details, such as card brand, last four digits, expiry date and billing country. We never receive your full card number or security code.
  • Google Ads gives us aggregated reports on how many purchases came from our ads. These reports don't identify you.

We don't ask for and don't want sensitive information such as Social Security numbers, financial account details, health information or precise location. Please don't send it to us.

3. How we use your information

We use personal information to:

  • create and manage your account and let you log in;
  • process your purchase and renewals, send receipts, renewal reminders and cancellation confirmations, and handle billing questions;
  • provide the course and save your progress and quiz results;
  • answer your questions and provide support;
  • send the free downloads you asked for and, if you subscribed or are a customer, our newsletter and information about our own related offers (you can unsubscribe anytime);
  • keep the Services secure, prevent fraud, account sharing and misuse, and enforce our Terms;
  • improve the course and website using aggregated, non-identifying statistics;
  • measure the success of our ads, only if you have accepted advertising cookies; and
  • comply with legal obligations (for example tax and accounting rules) and protect our legal rights.

We do not use your information for automated decisions that have legal or similarly significant effects on you.

4. Service providers we use

We share personal information with service providers that help us run the Services. They may use it only to provide their services to us, under contracts that require them to protect it.

  • Stripe, Inc. (USA) – payment processing, subscription billing, customer portal, sales tax calculation. Stripe Privacy Policy
  • Supabase, Inc. – database and login (one-time email codes and links). Our database is hosted on servers in Frankfurt, Germany (EU). Supabase Privacy Policy
  • Resend (USA) – sending emails such as login codes, order confirmations, reminders and newsletters. Resend Privacy Policy
  • Cloudflare, Inc. (USA, global network) – website hosting, content delivery, security, and cookieless Web Analytics. Cloudflare Privacy Policy
  • Bunny Stream (BunnyWay d.o.o., Slovenia, EU; global delivery network) – video hosting and streaming. bunny.net Privacy Policy
  • Google LLC (USA) – Google Ads conversion measurement, only if you accept advertising cookies. Google Privacy Policy
  • -->

We don't use the Meta (Facebook) pixel or similar social media tracking. If that changes, we will update this policy and ask for your consent first.

Other disclosures. We may also disclose information (a) if required by law, court order or a government request; (b) to protect our rights, property or safety, or that of our users or others, for example to prevent fraud; (c) to our professional advisors (such as attorneys and accountants) under confidentiality; (d) in connection with a merger, sale or transfer of our business, in which case this Privacy Policy will continue to apply to your information; or (e) with your consent.

5. Cookies and similar technologies

Essential – always on. These are needed for the Services to work and don't require your consent:

  • Your cookie choice (cookie "hu_consent", stored for 180 days) – remembers whether you clicked "Accept" or "Essential only."
  • Login session – when you log in, a session token is stored in your browser's local storage so you stay logged in.
  • Payment security – on the checkout page, Stripe may set cookies to prevent fraud and to process your payment securely.
  • Video playback – the video player may store technical settings in your browser. -->

Optional – only with your consent. If you click "Accept," we load Google Ads conversion tracking. Google may then set cookies (for example "_gcl_au") to tell us whether a visit or purchase came from a Google ad. Without your consent, nothing is loaded from Google. "Essential only" is always available and the website works exactly the same either way.

Changing your choice. Click "Cookie settings" at the bottom of any page. If you withdraw consent, we delete the Google Ads cookies we can access and stop loading Google.

Cookieless statistics. Cloudflare Web Analytics does not use cookies or similar storage and is not affected by your choice.

6. Emails

Service emails. We send emails needed to provide the course – login codes and links, order confirmations, receipts, renewal reminders, cancellation confirmations and important account or legal notices. You can't unsubscribe from these while you have an account or active plan, but they never contain advertising.

Newsletter and marketing emails. We send our newsletter and free downloads only after you confirm your sign-up by clicking the link in our confirmation email (double opt-in). As a customer, we may also email you about our own related products and offers. Every marketing email includes our postal address and an unsubscribe link. We honor unsubscribe requests promptly, and always within 10 business days. After you unsubscribe, we keep your email address on a suppression list so we don't email you again.

-->

7. We do not sell your personal information

We do not sell your personal information for money or other valuable consideration, and we have not done so in the past 12 months. We don't allow advertising networks on our website unless you click "Accept" in our cookie banner. If you do, Google receives information about your visit and purchase for ad measurement – some state privacy laws may treat this as "sharing" or "targeted advertising." You can opt out anytime by choosing "Essential only" under "Cookie settings" or by using a Global Privacy Control signal (see Section 12).

8. How long we keep your information

  • Account, progress and quiz data: as long as you have an account or an active plan, and up to 24 months after your plan ends or your last login, so you can come back and continue where you left off. After that we delete or anonymize it. You can ask for earlier deletion anytime.
  • Order, payment and tax records: as long as required for tax and accounting purposes (generally up to 7 years).
  • Records of your consent to automatic renewal: at least 3 years, or 1 year after your plan ends, whichever is longer.
  • Newsletter data: until you unsubscribe; your email address then stays on our suppression list. Records of your sign-up confirmation are kept as long as needed to prove your consent.
  • Support and cancellation messages: up to 3 years after the matter is closed.
  • Server and security logs: for short periods set by our providers, typically a few days to a few weeks.

9. How we protect your information

We use reasonable administrative, technical and physical safeguards, including encrypted connections (HTTPS/TLS), passwordless login by one-time email codes and links, access controls on our database so that each member can only access their own data, and payment processing by Stripe, a PCI DSS Level 1 certified provider. No system is perfectly secure, though. If a data breach affects your personal information, we will notify you as required by law.

10. Your choices and rights

Wherever you live in the U.S., you can ask us to:

  • access the personal information we hold about you, or get a copy of it;
  • correct inaccurate information;
  • delete your information (we may keep what we must keep by law, for example tax records); and
  • stop marketing emails (unsubscribe link in every marketing email).

To make a request, email [email protected] from the email address of your account. To protect you, we verify requests by confirming them through that email address. We respond within 45 days (we may extend this once by another 45 days if necessary and will tell you why). You may use an authorized agent; we may ask for proof of the agent's authority and verify your identity directly. We will not discriminate against you for exercising your privacy rights.

If we decline your request, you can appeal by replying to our decision with the subject "Appeal." We will respond to appeals within 60 days. If you are not satisfied, you may contact your state's attorney general.

11. Additional information for residents of certain U.S. states

Residents of California and several other states (such as Colorado, Connecticut, Oregon, Texas, Utah and Virginia) have specific rights under their state privacy laws, including the rights to know, access, correct and delete personal information, to receive a portable copy, and to opt out of the sale of personal information, of "sharing" for cross-context behavioral advertising, of targeted advertising and of profiling. We honor these rights for all U.S. users as described in Sections 7, 10 and 12, whether or not a particular law applies to us. -->

Notice at collection for California residents. In the past 12 months we have collected the following categories of personal information:

  • Identifiers – name, email address, IP address, account ID; online identifiers such as cookie IDs (Google Ads, only with consent). Source: you, your device, Stripe. Disclosed for business purposes to: Stripe, Supabase, Resend, Cloudflare, Bunny Stream; Google (only with consent).
  • Customer records (Cal. Civ. Code § 1798.80(e)) – name, email address, limited payment card information (card brand, last four digits). Source: you, Stripe. Disclosed to: Stripe, Supabase, Resend.
  • Commercial information – plans purchased, payment and subscription history. Source: you, Stripe. Disclosed to: Stripe, Supabase, Resend; Google (purchase event, only with consent).
  • Internet or other electronic network activity – course progress, quiz results, login events, pages viewed, video playback data. Source: your use of the Services. Disclosed to: Supabase, Cloudflare, Bunny Stream; Google (only with consent).
  • Approximate geolocation – billing country and ZIP code; country or region derived from IP address. Source: you, your device. Disclosed to: Stripe, Cloudflare.

We do not collect sensitive personal information as defined by California law, and we do not use or disclose personal information for purposes for which California law gives you a right to limit it. We do not sell personal information. The only possible "sharing" is the Google Ads measurement described in Section 7, which happens only after you click "Accept" and which you can turn off anytime. We do not knowingly sell or share personal information of consumers under 16. We use and keep personal information for the purposes in Section 3 and for the periods in Section 8.

Free downloads (notice of financial incentive). We offer free materials – for example our checklist, our free e-book and a free book chapter – when you sign up for our email list. In exchange, you give us your email address and agree to receive our newsletter. We believe the value of your email address to us is reasonably related to the value of these free materials, which we estimate based on the cost of producing them. You can unsubscribe anytime and keep the materials. -->

California "Shine the Light." We do not disclose personal information to third parties for their own direct marketing purposes.

12. Do Not Track and Global Privacy Control

Browsers' "Do Not Track" signals have no common standard, so we don't respond to them. Instead, we don't load any advertising technology unless you actively click "Accept." If your browser sends a Global Privacy Control (GPC) signal, we treat it as a choice of "Essential only" and do not load Google Ads, and we treat it as a request to opt out of the sale or sharing of your personal information. -->

13. Children

The Services are intended for adults. You must be at least 18 years old to buy the course or create an account. We do not knowingly collect personal information from children under 13 (or under 16, where state law sets a higher age). If you believe a child has given us personal information, please contact us and we will delete it.

14. Where your information is processed

We are based in the United States. Our course database is hosted in the European Union (Frankfurt, Germany), our video provider is based in the EU, and our other service providers process information in the United States and other countries where they operate. Wherever your information is processed, we protect it as described in this policy.

Our Services are currently intended for users in the United States. -->

15. Links to other websites

Our website and course link to other websites and services (for example Airbnb, Hospitable or Hosthub). Their privacy practices are governed by their own policies, not this one.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the new version on this page with a new "Last updated" date. If we make material changes, we will notify you by email or with a notice on our website before they take effect.

17. Contact

If you have questions about this Privacy Policy or want to exercise your rights, contact us:

Beach n Spicy LLC · Hosting Unfiltered
260 Calusa Blvd, Destin, FL 32541, USA
Email: [email protected]