Access by invitation only

Terms of Use

Version: 1.0

Effective from: January 1, 2026

This document outlines the core principles of the xHOSTING closed community system. Anyone who joins the system (by invitation) automatically accepts this policy.

1. Definitions

1.1 – Technical Operator

The Technical Operator is the natural person or business entity responsible for ensuring the technical operation of the xHOSTING community system, maintaining the community infrastructure, issuing official invoices for contributions, and enforcing compliance with the rules and policies.

The current Technical Operator is:

Name: László Madarász, sole proprietor

Registered office: H-2040 Budaörs, Hajnal utca 4., Hungary

Tax number: 65489426-1-51

EU VAT number: HU65489426

Business registration number: 15934478

Phone: +36-70-720-4884

Email: info@xhosting.hu

1.2 – Operators

The administrators and moderators of the xHOSTING community system who, on behalf of the Technical Operator, supervise the operation, security, and community order of the system.

1.3 – Policy

This document, which defines the fundamental principles of operation of the closed, invitation-only xHOSTING community system, the conditions of use, and the rules governing invitations and contributions.

1.4 – Termination of Membership

The state in which a user no longer has an active account or permissions within the xHOSTING system, in particular due to a violation of the rules, exclusion, or voluntary departure.

1.5 – Anonymization

A data processing operation applied after the termination of a user account, during which personal data associated with the account are irreversibly deleted or anonymized, except where retention is required by law.

1.6 – WARN

A warning representing the documented recording of a rule violation. The purpose of a WARN is to maintain community order and prevent further violations.

1.7 – Inviter

A Member who, upon fulfilling the conditions defined in this Policy, is entitled to provide another person with the opportunity to register in the xHOSTING system via invitation.

1.8 – Invitee

A person who accepts an invitation sent by an Inviter and registers in the xHOSTING system by providing the required information.

1.9 – Member

A user registered in the xHOSTING system with a valid invitation and holding an active account.

1.10 – Community

The totality of Members registered in the xHOSTING system, including the Operators.

1.11 – Resources

The totality of hardware and software capacities of the servers and infrastructure providing xHOSTING services, including in particular processor, memory, storage, and bandwidth capacity.

1.12 – SLA (Service Level Agreement)

A service level agreement representing a guaranteed level of operation provided by commercial service providers. The xHOSTING community system does not provide an SLA.

1.13 – Priority

The order of allocation of resources and operator attention, which in the case of xHOSTING is determined exclusively by technical and community considerations and administrative decisions.

1.14 – Uptime

The availability of the system or a specific service within a defined period. In the case of xHOSTING, uptime is not guaranteed.

1.15 – Contribution

A voluntary contribution provided by a Member in an amount determined by the Member, intended to support the operation and development of the xHOSTING community system. A contribution does not constitute a service fee or consideration.

1.16 – Paid Service

A Paid Service is any service used by a Member through xHOSTING under a separate legal relationship, in return for consideration.

The initiation of a Paid Service (such as placing a new order or initiating a new domain registration) is conditional upon registration in the xHOSTING system, i.e. Membership.

The continued use of existing Paid Services (such as maintaining an existing domain, access, and administration) remains available for the duration of the service even after Membership has terminated, subject to settlement of the applicable fees, potentially via a limited access channel (e.g. support ticket or email).

At present, Paid Services include in particular domain registration and domain-related administration.

1.17 – Free Service

A Free Service is any service provided by xHOSTING to Members on a community basis, without consideration, and whose use is conditional upon active community Membership.

At present, Free Services include in particular web hosting services and the associated technical resources.

1.18 – xHOSTING User Interface

The xHOSTING User Interface is the closed online system through which Members manage xHOSTING services, in particular registration, the use of Paid and Free Services, viewing service status, and accessing information related to community status.

1.19 – xHOSTING

xHOSTING is a closed, invitation-based community system that provides technical resources and related services to its Members on a non-commercial basis. The operation of xHOSTING is based on community contributions and is separate from Paid Services provided under a separate legal relationship for consideration.

1.20 – Minimal Activity

Minimal activity is considered fulfilled if the Member:

• has logged in to the xHOSTING user portal at least once within the last 30 calendar days,

OR

• has responded to any official notification or communication sent by xHOSTING within the last 30 calendar days.

The purpose of minimal activity is to ensure the continuity of community membership and maintain effective communication between the parties.

2. Fundamental Principles

2.1 – xHOSTING is not a public service but an invitation-only, closed community system that provides technical resources to its Members.

2.2 – The system does not operate for commercial purposes. Its operation is based on voluntary community contributions.

2.3 – The resources provided by xHOSTING (including hosting environments, communication and technical tools, and servers) are not commercial services, but technical capabilities supporting the operation of the community.

2.4 – xHOSTING does not provide commercial, fee-based hosting services in any form. The operation of the system is based on voluntary, non-compensatory community contributions. Hosting usage is free of charge; the costs of domain registration and maintenance are borne by the Member.

3. Membership and Invitations

3.1 – Membership in the community is possible only with a valid invitation.

3.2 – A new Member may be invited exclusively by a Member who:

• does not have an active WARN;

• has obtained xHOSTING Supporting Member status;

• and has an available invitation.

3.3 – The inviter assumes responsibility for the community conduct of the invitee.

If the Invitee violates this Policy:

• the inviter may receive a warning (WARN);

• the inviter’s invitation privileges may be suspended or revoked;

• in serious or repeated cases, the inviter’s membership may also be terminated.

The availability of invitations is limited based on community resources:

• onboarding may be temporarily suspended depending on current capacity;

• the objective is to maintain resource balance and community quality, not unrestricted growth.

3.4 – When approving invitations, the Operators take into account current server load, available resources, and the long-term sustainability of the system.

3.5 – Each invitation may be used only up to the extent of available free capacity.

Note: xHOSTING’s community principles consciously avoid excessive allocation of resources (overselling). All Members receive access based on the same sustainable principles.

4. Contributions and Sustainability

4.1 – The monthly operation of the xHOSTING community system is tied to a recommended minimum contribution amount, which is regularly reviewed by the Operators based on current costs and development objectives and published to the Community via the xHOSTING user interface.

4.2 – The purpose of contributions is to cover costs incurred in operating and developing xHOSTING systems, including in particular server maintenance, domain costs, internet connectivity, infrastructure, and hardware acquisition.

4.3 – If the target contribution amount defined for a given period is not reached, the operation of xHOSTING may be partially or fully suspended. The suspension may affect all services, except for interfaces required for making contributions, registration, login, or user account management.

Note: The objective of xHOSTING is sustainable, community-based operation. Suspension does not constitute permanent shutdown; system operation is automatically restored once the required contribution amount becomes available.

4.4 – A contribution is not a purchase, not a subscription, and does not entitle the contributor to automatic access to any service.

4.5 – xHOSTING is not a commercial service and therefore does not provide an SLA or guaranteed availability.

4.6 – xHOSTING does not provide customer service prioritization. The allocation of resources and operator attention is based exclusively on technical and community considerations.

4.7 – xHOSTING operates on a voluntary basis and does not guarantee uptime. Temporary outages, updates, and maintenance may occur, including without prior notice.

4.8 – The system operates on a community-based and voluntary basis.

4.9 – A recommended minimum contribution amount may be defined periodically for the operation of xHOSTING, serving the community-based coverage of necessary maintenance costs. Contributions are voluntary, do not constitute a legal relationship or service condition, and do not represent legal consideration.

4.10 – Methods of Making Contributions

4.10.1 Contributions to support the operation of the xHOSTING community system may be made using the following methods:

• via PayPal

• via Stripe card payment (with secure 3D Secure verification)

4.10.2 Following payment, the system records the contribution, and the Technical Operator issues an invoice in accordance with applicable laws, containing the following:

• Item description: “Contribution – for the operation of the xHOSTING community system”

• Net amount: the contributed amount

• Gross amount: the contributed amount

• VAT: exempt (“AA”)

• Note: “Non-compensatory contribution. The invoice is valid without signature or stamp.”

4.11 – Refund of Contributions

4.11.1 Contributions made to xHOSTING are voluntary and non-refundable. Contributions do not constitute a purchase or service relationship and therefore cannot be refunded, even if the Member later ceases to use the system or their membership terminates.

4.11.2 Contributions are not considered subscriptions, fees, or consideration; therefore, consumer withdrawal rights (e.g. 14-day withdrawal) do not apply.

4.12 – Legal Nature of Contributions

A contribution is a voluntary contribution and does not constitute a fee, subscription, consideration, or service relationship.

Making a contribution does not create any entitlement to services, resources, access, availability, or priority.

Contributions may be taken into account as a community factor (e.g. rank, invitation privileges, resource allocation) but cannot be interpreted as an obligation or guarantee on the part of xHOSTING.

xHOSTING does not provide an SLA, guaranteed uptime, or defined service levels in exchange for contributions.

4.13 – Handling of Inactive Membership

If the Member persistently fails to meet the minimal activity requirements defined in Section 1.20, xHOSTING reserves the right to:

• temporarily limit the free services,

• or terminate the community access.

he termination of inactive membership does not constitute a sanction or penalty, but an operational measure necessary to ensure the sustainability of the community-based infrastructure.

5. Code of Conduct

5.1 – All Members shall participate in the xHOSTING community system with respectful, trust-based conduct.

5.2 – Prohibited conduct:

• violation of any xHOSTING policy;

• harassment, humiliation, or defamation of any Member of the Community;

• damaging or discrediting the reputation of xHOSTING or the Community on any public or private channel;

• misuse of resources, unjustified or excessive load;

• deliberate disruption related to contributions or community operation.

5.3 – Consequences:

• In the event of any documented rule violation, the Operators may issue a warning (WARN).

• In the case of repeated or serious violations, the Member’s invitation privileges may be suspended or permanently revoked.

• If a Member continues to violate this Policy despite warnings, their membership in the xHOSTING community system may be terminated.

• A Member who repeatedly invites a person who is proven to have been previously excluded due to rule violations may also lose their own membership.

• Upon termination of membership, the user account shall be anonymized in accordance with this Policy.

• xHOSTING services fall into two clearly separated categories: Free Services and Paid Services.

• If a Member loses their membership in the xHOSTING community system, their entitlement to use Free Services shall terminate immediately.

• Termination of membership does not affect access to and administration of Paid Services, which shall remain available for the duration of the service.

5.4 – Nature of decisions, consultation

Moderation and membership-related decisions within the xHOSTING community system are made in the context of community operation. The Operators may provide an opportunity for consultation; however, community membership decisions do not constitute official or authority decisions.

This section applies exclusively to membership and moderation decisions related to community-based (Free) Services and does not affect consumer rights related to Paid Services, complaint handling, or the exercise of data protection (GDPR) rights.

6. Supporting Member Status and Invitation Rights

6.1 – Supporting Member status

The xHOSTING community system does not operate a rank-based hierarchy. Community participation and invitation rights are tied exclusively to a single status: xHOSTING Supporting Member status.

6.2 – Obtaining Supporting Member status

A Member obtains xHOSTING Supporting Member status if:

• they have supported xHOSTING with at least the minimum contribution amount defined at the time on five consecutive occasions;

• no more than 30 days have elapsed between individual contributions;

• they do not have an active WARN.

6.3 – Invitation rights

An xHOSTING Supporting Member is entitled to send a total of one (1) invitation.

The invitation right:

• may be used exclusively for the registration of a single Invitee;

• is not cumulative and does not renew;

• is non-transferable;

• is permanently exhausted once the invitation has been used.

6.4 – Loss of invitation rights

Invitation rights may be lost if:

• the Member has used the invitation;

• the Member has an active WARN;

• the Member or the Invitee commits a serious rule violation.

6.5 – Operator roles

Chief administrators, administrators, and moderators participating in the operation of xHOSTING do not hold ranks, but operational roles.

The assignment, revocation, and scope of these roles are determined exclusively by the Operators and are not automatically linked to contributions or invitation rights.

7. Data Processing and Transparency

7.1 – xHOSTING does not collect data for business or marketing purposes.

7.2 – Principle of data sharing and data transfer

xHOSTING does not use user data for marketing or commercial data sales and does not transfer such data to third parties for these purposes.

However, to the extent necessary for the operation and performance of services, xHOSTING may engage data processors and partners (e.g. infrastructure providers, payment services, domain registration). Only the minimum data necessary for service performance are transferred to such partners, in accordance with applicable laws and contractual obligations.

xHOSTING may be required to provide data in compliance with legal obligations or official authority requests.

7.3 – Publication of contribution information and cost summaries

The status of contributions, summaries of operating costs, and the fulfillment of contribution objectives are published monthly in anonymized, aggregated form via the xHOSTING user interface, exclusively for the Community.

The summaries referred to in this section are not public and do not form part of the Terms and Conditions. The Policy (Terms and Conditions) itself remains a public document.

8. Data Processing (Based on GDPR)

8.1 – When processing Members’ data, the xHOSTING community system acts in accordance with Regulation (EU) 2016/679 (GDPR) and the Hungarian Information Act (Act CXII of 2011).

8.2 – The details of data processing related to the system are also set out separately in the Privacy Notice and the Cookie Policy, which are published as separate documents as well.

8.3 – Categories of data processed:

• Full name (provided voluntarily)

• Telegram ID / username

• Email address

• IP address (for logging purposes)

• Device identifiers and browsing information (via cookies)

• Timestamps of consents (e.g. acceptance of an invitation)

8.4 – Purposes of data processing:

• Operating the closed xHOSTING community system

• Recording invitations and permissions

• Providing access to technical resources

• System security and investigation of abuse

• Mandatory accounting records related to contributions

8.5 – Legal bases of data processing:

• GDPR Article 6(1)(a) – the data subject’s voluntary consent

• GDPR Article 6(1)(f) – legitimate interest (e.g. system security, abuse prevention)

• Where invoicing applies: GDPR Article 6(1)(c) – compliance with a legal obligation

8.6 – Data transfers:

8.6.1 xHOSTING does not transfer data to third parties under any circumstances, except:

• where required by law in response to a request by a competent authority;

• the minimum data necessary for bookkeeping or invoicing to the Technical Operator.

8.7 – Duration of data processing:

• In case of deletion / anonymization of a user account, the data are permanently deleted.

• Within 12 months following the termination of the relationship, all stored data are automatically deleted.

• Invoicing/accounting data must be retained for 8 years in accordance with applicable law (Accounting Act).

Note: shorter retention periods set out in Chapter 15 apply to the retention and export of service (hosting) content.

8.8 – Rights of data subjects:

• Access to personal data

• Request correction or deletion

• Restriction of processing

• Data portability

• Lodging a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

Contact: https://naih.hu

8.9 – Data Controller:

Name: Madarász László, sole proprietor

Registered office: 2040 Budaörs, Hajnal utca 4.

Tax number: 65489426-1-51

EU VAT number: HU65489426

Registration number: 15934478

Phone: +36-70-720-4884

Email: info@xhosting.hu

8.10 – Parties involved in data processing

8.10.1 Data processing related to bookkeeping

Processor name: Empire Numbers Kft.

Address: 3580 Tiszaújváros, Árkád sor 3 1/3

Tax number: 32454570-1-05

Phone: +36-20-286-0497

Email: zsanrietta1231@gmail.com

Website: https://empirenumbers.hu

Bookkeeping data are processed exclusively in accordance with the Hungarian Accounting Act and only for the retention period prescribed therein.

8.10.2 Partners providing the technical background of services

Meta Platforms Ireland Limited (formerly Facebook Ireland Limited)

Registered office: Merrion Road, Dublin 4, D04 X2K5, Ireland

Tax number (VAT ID): IE9692928F

Website: facebook.com

Privacy policy: facebook.com/privacy/policy

TikTok Technology Limited

Registered office: 10 Earlsfort Terrace, Dublin 2, D02 T380, Ireland — company registration number 635755

Tax number (VAT ID): IE3729252KH; under GDPR they assume a joint controller role.

Website: tiktok.com

Privacy policy: tiktok.com/legal/privacy-policy

Rumble Inc.

Registered office: 444 Gulf of Mexico Drive, Longboat Key, Florida 34228, USA

Tax number (VAT): N/A (non-EU company)

Website: rumble.com

Privacy policy: rumble.com/privacy-policy

YouTube LLC (Google Ireland Limited)

Registered office: 901 Cherry Avenue, San Bruno, CA 94066, USA

Tax number (VAT): IE6388047V

Website: youtube.com

Privacy policy: policies.google.com/privacy

X Corp. (formerly Twitter)

Registered office: 1355 Market Street, Suite 900, San Francisco, CA 94103, USA

Tax number (VAT): not published

Website: x.com

Privacy policy: x.com/privacy

Hetzner Online GmbH

Registered office: Industriestraße 25, 91710 Gunzenhausen, Germany

Tax number (VAT ID): DE812871812

Website: hetzner.com

Privacy policy: hetzner.com/legal/privacy-policy

PayPal (Europe) S.à r.l. et Cie, S.C.A.

Registered office: 22–24 Boulevard Royal, L-2449 Luxembourg

Tax number (VAT): LU22046007

Website: paypal.com

Privacy policy: paypal.com/hu/webapps/mpp/ua/privacy-full

Stripe Payments Europe, Limited

Registered office: The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland

Tax number (VAT): IE3206488LH

Website: stripe.com

Privacy policy: stripe.com/privacy

Erste Bank Hungary Zrt.

Registered office: 1138 Budapest, Népfürdő utca 24–26, Hungary

Tax number: 10197879-4-44 (group tax number: 17781042-5-44)

Company registration number: 01-10-041054

Website: erstebank.hu

Privacy notice: erstebank.hu/hu/adatkezelesi

8.10.3 Data processing related to domain registration

In the provision of domain registration services, xHOSTING is in a reseller relationship with the domain registrar Netim SAS.

Processor / controller name: NETIM SAS

Registered office: 264 Avenue Arthur Notebart, 59160 Lille, France

Legal form: Société par Actions Simplifiée (SAS)

Website: https://www.netim.com

Legal notices: https://www.netim.com/en/legal-notices

Data processing policy: https://www.netim.com/contracts/personal-data-processing-policy.pdf

During domain registration, the transfer of personal data (e.g. name, address, email address, phone number) to Netim SAS is based on a legal obligation, in particular pursuant to ICANN rules and the requirements of the relevant TLD registry.

Netim SAS processes the data under its own data processing policy as an independent data controller. In connection with domain registration, xHOSTING transfers data only to the extent necessary to perform the service.

8.10.4 External platforms (providers accessible via links)

xHOSTING interfaces may contain links to external platforms (e.g. social media or video sharing sites). These providers are independent data controllers separate from xHOSTING, and after opening a link they act in accordance with their own data protection and cookie rules.

8.11 – Purpose of the privacy policy

This data processing policy was created to present the data processing activities performed by the Data Controller in a transparent manner and to ensure that Data Subjects are aware of their rights.

8.12 – Rights of data subjects

Data subjects have the following rights in relation to the processing of their personal data:

8.12.1 Right of access: the data subject is entitled to request information as to whether the Data Controller processes their personal data and, if so, to access information relating to such processing (e.g. the purposes of processing, the categories of personal data concerned).

8.12.2 Right to rectification: the data subject is entitled to request that the Data Controller correct inaccurate personal data or complete incomplete personal data.

8.12.3 Right to erasure (“right to be forgotten”): the data subject may request the deletion of their personal data if processing is no longer necessary, the data subject withdraws consent, or processing was unlawful.

8.12.4 Right to restriction of processing: the data subject is entitled to request restriction of processing if they contest the accuracy of the personal data or raise objections regarding the lawfulness of processing.

8.12.5 Right to data portability: the data subject is entitled to request that the Data Controller provide the data processed by the Data Controller in a structured, commonly used, machine-readable format and/or transmit it to another controller.

8.12.6 Right to object: the data subject is entitled to object to processing where the legal basis is legitimate interest or public interest.

8.13 – Exercising data subject rights

8.13.1 To exercise their rights, data subjects may contact the Data Controller via the following contact details:

• Mailing address: Madarász László, sole proprietor, 2040 Budaörs, Hajnal utca 4. Email: info@xhosting.hu Phone: +36-70-720-4884

• The Data Controller will respond to all requests as soon as possible, but no later than within 25 days.

8.14 – Data security

The Data Controller protects personal data against unauthorized access, data loss, and data security incidents through technical and organizational measures. The Data Controller stores data exclusively on servers owned by Madarász László as a sole proprietor or with contracted service providers located within the European Union.

8.15 – Handling data protection incidents

8.15.1 In the event of a data protection incident, the Data Controller:

• keeps a record of incidents.

• notifies the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) within 72 hours.

• informs data subjects if the incident involves high risk.

8.16 – Transfer of data to third parties

8.16.1 The Data Controller transfers data to third parties only in the following cases:

8.16.2 Where the data subject has given explicit consent.

8.16.3 For the purpose of fulfilling obligations prescribed by law (e.g. requests by authorities).

8.17 – Data storage and retention period

8.17.1 The Data Controller stores personal data for the following periods:

8.17.2 Data collected in the performance of a contract: 5 years from termination of the contract.

8.17.3 Invoicing-related data: at least 8 years as required by the Hungarian Accounting Act.

8.17.4 Data in a newsletter database: until the data subject withdraws their consent.

8.18 – Handling data protection incidents

8.18.1 The Data Controller is obliged to keep records of all data protection incidents and, without undue delay, inform data subjects if the incident is likely to adversely affect their rights or freedoms.

8.18.2 Notification obligation

8.18.3 Informing data subjects:

• If the incident poses a high risk to the rights of data subjects, the Data Controller informs them directly.

• NAIH notification: the incident must be reported to NAIH no later than within 72 hours.

8.18.4 Rights of data subjects in the event of a data protection incident

Data subjects are entitled to:

• request information about the nature of the incident and the categories of data affected by the incident.

• lodge a complaint with NAIH or initiate court proceedings.

8.19 – Complaints and remedies

8.19.1 The data subject may file a complaint with the Data Controller or with NAIH. In the event of disputes related to data processing, court proceedings may also be initiated. More detailed information about submitting complaints is provided in Section 8.20.

Address: 1024 Budapest, Szilágyi Erzsébet fasor 22/C.

Phone: +36 (1) 391-1400

Email: ugyfelszolgalat@naih.hu

Website: https://naih.hu

8.20 – Legal remedies related to data processing

The data subject may use the following legal remedies in relation to data processing:

8.20.1 Submitting a complaint to the Data Controller:

• The data subject may submit a complaint to the Data Controller via the following contact details:

Address: Madarász László, sole proprietor, as Technical Operator, 2040 Budaörs, Hajnal utca 4. Email: info@xhosting.hu

• Submitting a complaint to NAIH: the data subject may submit a complaint to NAIH if they consider the data processing practice to be inadequate. The Authority’s detailed contact details are provided in Section 8.19.1.

• Initiating court proceedings: the data subject is entitled to initiate court proceedings against the Data Controller if they believe that their rights have been violated in the course of data processing. In such cases, the competent court is, at the data subject’s choice, the court of the data subject’s place of residence or the court of the Data Controller’s registered office.

9. Cookie Policy

9.1 – Use of Cookies

9.1.1 The xHOSTING website uses a minimal number of cookies necessary for the operation of the site. Cookies are used exclusively for the following purposes:

• maintaining login sessions;

• remembering language preferences (e.g. Hungarian / English);

• visitor statistics (anonymous, without IP addresses, aggregated only).

9.1.2 xHOSTING does not use:

• tracking cookies (tracker, remarketing, advertising purposes);

• third-party cookies for marketing or tracking purposes (e.g. Google, Meta);

• cookies suitable for personalized profiling.

9.1.3 Legal basis for cookies:

Cookies necessary for operation are used on the basis of legitimate interest (GDPR Article 6(1)(f)). Users may disable or delete these cookies at any time in their browser settings.

9.1.4 Managing cookie settings

Users may modify cookie usage at any time in their browser settings. Detailed guides for managing cookies are available at the following links:

• Mozilla Firefox: https://support.mozilla.org/hu/kb/S%C3%BCtik%20kezel%C3%A9se

• Google Chrome: https://support.google.com/chrome/answer/95582?hl=hu&ref_topic=3421433

• Internet Explorer: http://windows.microsoft.com/hu-hu/internet-explorer/ie-security-privacy-settings#ie=ie-9

• Opera: https://www.opera.com/terms

• Safari: http://support.apple.com/kb/PH5042

9.1.5 Embedded content

xHOSTING does not place third-party marketing cookies on its own interfaces by default. However, when opening links to external services or any embedded external content (e.g. videos), the external service provider may use cookies in accordance with its own policies. Responsibility for such cookies lies with the respective external provider.

2.1.6 – Consent logging and verifiability

xHOSTING records user consents related to cookie management in a technical log in order to be able to demonstrate the existence of such consent in the event of a legal or supervisory authority request.

During the logging process, the following data may be recorded:

• the time of consent;

• the status of the consent (necessary / analytics / marketing categories);

• the consent version identifier;

• technical metadata (domain, page path, browser type);

A cryptographic checksum (SHA-256 hash) is generated from the logged data, ensuring that the consent data package cannot be altered retroactively and that its integrity can be verified.

The consent logs do not contain user account identifiers, names, email addresses, or any other directly identifying personal data, and are used exclusively for legal compliance and audit purposes.

xHOSTING retains consent logs for a maximum period of 180 days, after which they are automatically and irreversibly deleted.

The handling and logging of consents are carried out in accordance with Articles 5, 6, and 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

10. Reservation of Rights and Amendments

10.1 – This Policy may be amended without prior notice. All changes are documented and publicly logged.

10.2 – The Operators shall not be liable if, for any reason, the xHOSTING system is unable to operate.

10.3 – By joining, each Member accepts and agrees to comply with the current version of this Policy.

10.4 – Legal Notice

The operator and legal details of xHOSTING are published under the Legal Notice (Imprint) section.

11. Disclaimer of Liability

11.1 – xHOSTING is a closed, community-based initiative and does not constitute a commercial service.

11.2 – Use of the system is voluntary; each Member joins by their own decision, via invitation.

11.3 – The Operators and the Technical Operator assume no liability for any data loss, service interruption, system outage, technical malfunction, or unavailability.

11.4 – The Operators and the Technical Operator do not guarantee any specific operating time, priority, support level, or functionality.

11.5 – Contributions do not constitute consideration and do not entitle the Member to any warranty or guarantee regarding the system or any of its components.

11.6 – The system may be suspended or permanently discontinued at any time without prior notice if justified by technical, financial, or community-related reasons.

11.7 – Use of the community system does not entitle Members to engage in commercial activities, and all Members are required to comply with the fundamental principles, in particular the principle of trust-based operation.

12. Acceptable Use and Prohibited Content (AUP)

12.1 – Purpose of the AUP

The Acceptable Use Policy (AUP) protects the secure and sustainable operation of services available through xHOSTING. Members are required to use both Free and Paid Services lawfully, with respect for the rights of third parties, and without abuse of community resources.

12.2 – Compliance with laws and respect for third-party rights

• Any content or activity that violates applicable laws is prohibited.

• Violation of personal rights, copyrights, trademark rights, or other rights of third parties is prohibited.

• Members may only publish or make available content for which they hold the appropriate rights and authorizations.

12.3 – Prohibited content and activities

In particular, the following content and activities are prohibited on xHOSTING:

• malicious code (malware), viruses, trojans, spyware, ransomware, botnet components;

• phishing, fraud, deceptive content, forged identities, or fake websites;

• activities aimed at unauthorized access (attack attempts, exploits, brute-force attacks, port scanning);

• sending spam, distributing unsolicited bulk messages, or facilitating such activities;

• warez, cracked software, license-infringing content, or illegal download repositories;

• content that is clearly unlawful or subject to removal based on official or rights-holder notice;

• cryptocurrency mining or computational workloads that result in disproportionate use of community resources;

• disruption, overloading, or intentional stress of services belonging to other Members, third parties, or the xHOSTING infrastructure.

12.4 – Proper use of resources

xHOSTING Free Services are based on shared community resources; therefore, Members are required to use them in accordance with their intended purpose.

• Any use that causes persistent or repeated disproportionate load (in particular CPU, memory, storage, I/O, or network traffic) is prohibited.

• In order to ensure sustainability, the Operators are entitled to restrict processes, services, or access that generate abnormal load.

12.5 – Security and account protection

• Members must keep their access credentials confidential and take all reasonable measures to protect their accounts.

• Use of another person’s account or unauthorized sharing of access credentials is prohibited.

• If a Member becomes aware that their account or service has been compromised, they must notify the Operators without delay.

12.6 – Measures in case of violations or abuse

In the event of an AUP violation, suspected abuse, or any incident endangering the security of xHOSTING, the Operators are entitled—for the purpose of preventing damage and protecting the system—to take the following measures:

• issue a warning (WARN);

• temporarily restrict or suspend the affected service or access;

• in urgent cases, apply immediate temporary suspension without prior notice;

• terminate membership in the case of serious or repeated violations.

Where possible, the Operators will make reasonable efforts to inform the affected Member of the reason for the measure and the potential next steps.

12.7 – Separation of Paid Services

Violation of the AUP or termination of membership may result in restriction or termination of access to xHOSTING community-based (Free) Services. This does not automatically affect the existence of Paid Services provided under a separate legal relationship; however, administration and access to Paid Services shall follow the procedures defined by xHOSTING.

12.8 – Rights Holder Notice (Notice & Takedown)

If xHOSTING becomes aware that content placed or made available by a Member infringes the rights of a third party—particularly copyright, related rights, trademark rights, or other intellectual property rights—the Operators are entitled to remove such content or restrict access to it.

Based on a rights holder notice, the Operators may temporarily or permanently remove the affected content and/or suspend the related service.

A rights holder notice must include the following information:

• clear identification of the infringed work or content;

• the exact location of the disputed content (URL or other identifier);

• the name and contact details of the rights holder or their authorized representative;

• a statement that the notifier is acting in good faith and is entitled to enforce the relevant rights.

In cases of repeated or manifestly serious infringement, the Operators are entitled to terminate the Member’s membership in accordance with the measures set out in Section 12.6.

xHOSTING does not perform prior content monitoring; however, upon obtaining knowledge of unlawful content, it shall act without undue delay in accordance with applicable laws.

13. Specific Terms for Domain Services

13.1 – Nature of the domain service

Domain registration and domain-related administration are Paid Services available through xHOSTING. The domain service is separate from xHOSTING’s community-based (Free) services.

When providing the domain service, xHOSTING acts through its reseller relationship with the domain registrar, as well as the registry of the relevant TLD and the applicable ruleset associated with that TLD.

13.2 – Contracting and access

To use the domain service, placing an order and handling administration is performed via the xHOSTING user interface, or via an administration channel provided by the Operators that enables identification.

xHOSTING reserves the right to process domain-service related requests only after identification, for security reasons, in cases of suspected abuse, or in order to comply with legal obligations.

13.3 – Domain-related data and mandatory data transfer

Domain registration and maintenance require the Member to provide the necessary registration data completely and truthfully. The Member is responsible for the accuracy of the data provided.

The transfer of personal data required for domain registration to the registrar and the relevant TLD registry is necessary to perform the domain service and to comply with applicable rules. In certain cases, based on legal requirements or registry rules, additional data may need to be provided, updated, or verified.

13.4 – Registration, renewal, and expiry

Domain registration, renewal, and maintenance operate in periodic (typically annual) cycles. The conditions of expiry, renewal, and potential deletion of the domain are determined by the rules of the relevant TLD, as well as the requirements of the registrar and the registry.

The Member acknowledges that renewals must be arranged in due time to avoid domain expiry. If the required fees are not paid, or the necessary data/verification is not available, the domain may expire, be suspended, or be deleted in accordance with registry rules.

13.5 – Cancellation, refunds, and restoration

The Member acknowledges that domain registration and renewal typically involve immediate or near-immediate performance within the registrar’s and registry’s systems, which may generate costs. Accordingly, fees related to domain registration and renewal are generally non-refundable.

After expiry, the domain may, in certain cases, be restorable (restore) under the registry’s rules, which may be subject to an additional fee and deadline. The availability and cost of restoration depend on the TLD.

The Member acknowledges that the domain service is performed in third-party systems (registrar/registry), therefore, once performance has started, a refund is generally not possible.

13.6 – Transfer, Auth code, and registrant control

Control over the domain is interpreted according to the rights of the registrant (domain user/owner), based on the applicable registry and registrar rules.

The Member may be entitled to transfer the domain to another registrar (transfer) and request the necessary identifiers (e.g., Auth code), if permitted by the relevant TLD rules and if there is no legal or registry-related impediment (e.g., dispute status, lock, time-based restriction).

xHOSTING handles transfer-related administration in accordance with the registrar’s and registry’s rules, following identification, within a reasonable timeframe.

13.7 – Relationship between the domain and xHOSTING community membership

The Member acknowledges that access to xHOSTING community-based (Free) services is tied to membership, while the Paid domain service exists under a separate legal relationship.

If the Member loses their membership in the xHOSTING community system but continues to use the domain service, access and administration related to the domain shall remain available for the duration of the service. In such case, administration may take place via an identification-capable channel defined by the Operators.

Termination of membership does not automatically affect domain maintenance; however, the Member remains obliged to fulfill payment and data-provision obligations related to the domain.

13.8 – Suspension, disputes, and official requests

The domain status may be modified by the registrar or the registry based on law, registry rules, official requests, or disputes (e.g., suspension, lock, deletion). In such cases, xHOSTING acts in accordance with the procedural rules of the registrar and the registry.

If a dispute arises in connection with the domain (e.g., name-use dispute, trademark claim, rights-holder complaint), xHOSTING is entitled to provide the necessary cooperation and data in accordance with applicable rules.

13.9 – Limitation of liability regarding the domain service

When performing the domain service, xHOSTING relies on the systems and rules of the registrar and the registry; therefore, it assumes no liability for outages, delays, or errors arising within the systems of the registrar, the registry, or any third party.

xHOSTING assumes no liability for damages arising from domain expiry, suspension, or deletion where such outcomes are attributable to late payment by the Member, incomplete or inaccurate data provision, or automated procedures triggered under registry rules.

13.10 – Exclusion of the right of withdrawal for domain services

The Member acknowledges that domain registration and domain renewal are Paid Services that are performed immediately or within a short time after the order is placed, and that performance takes place in the systems of third parties (registrar, registry).

By ordering the domain service, the Member expressly requests immediate commencement of performance and acknowledges that, upon commencement of performance, they lose the 14-day right of withdrawal under Hungarian Government Decree 45/2014 (II. 26.).

Accordingly, fees related to domain registration, renewal, or restoration are non-refundable, subject to the applicable registry rules.

13.11 – Reseller role and precedence of registry rules

In providing the domain service, xHOSTING acts as a reseller. Final decisions regarding domain registration, maintenance, suspension, deletion, or restoration are made by the relevant TLD registry and/or the registrar.

The Member acknowledges that the rules, technical limitations, or official obligations applied by the registry or the registrar take precedence over xHOSTING’s internal procedures.

xHOSTING assumes no liability for decisions or measures resulting from the mandatory application of registry or registrar rules.

14. Governing law, dispute resolution, and legal status

14.1 – Governing law

This Policy and any legal relationships arising from the operation of xHOSTING shall be governed by Hungarian law.

14.2 – Legal status of the Member

The legal status of the Member (consumer or non-consumer) shall be assessed based on the legal relationship related to the specific Paid Service used.

14.3 – Consultation and dispute resolution

xHOSTING and the Member shall seek to resolve any disputes primarily through consultation and amicable settlement.

If such consultation does not lead to a resolution, the dispute shall be decided—depending on jurisdiction—by the Hungarian court having jurisdiction over the registered seat of the Data Controller.

14.4 – Consumer dispute resolution (Paid Services)

If the Member qualifies as a consumer when using a Paid Service, they are entitled to initiate proceedings before a conciliation body. The purpose of the conciliation body is to resolve consumer disputes out of court.

xHOSTING hereby informs consumer Members that it is open to participating in conciliation proceedings; however, it has not made a general declaration of submission accepting the conciliation body’s decision as binding.

14.5 – Contact details of the conciliation body

If the Member qualifies as a consumer when using a Paid Service, they may initiate proceedings before the conciliation body competent for their place of residence or for the registered seat of xHOSTING.

The conciliation body competent for the registered seat of xHOSTING:

Pest County Conciliation Board

Registered seat: 1055 Budapest, Balassi Bálint utca 25., 4th floor

Phone: +36 (1) 792-7881

Email: pmbekelteto@pmkik.hu

Website: https://www.pmkik.hu/bekelteto-testulet

The contact details of all Hungarian conciliation bodies are available at:

https://bekeltetes.hu

15. Post-termination data handling and data export

15.1 – Termination of membership and service closure

If a Member’s xHOSTING community membership terminates for any reason, access to Free Services (in particular web hosting, technical resources, and community functions) shall cease.

15.2 – Data retention after termination

Following termination of membership, xHOSTING may retain data placed by the Member within the Free Services (in particular files, databases, and configurations) for a limited period for technical purposes.

The maximum data retention period is 14 calendar days, after which the data shall be permanently deleted.

15.3 – Data export option

The Member is entitled to request a one-time data export of their data stored within the Free Services during the period specified in Section 15.2.

Data export shall be provided within reasonable technical limits and in a reasonable format (e.g. compressed archive, database dump).

15.4 – Backups and liability

The Member acknowledges that xHOSTING does not provide guaranteed backups and assumes no liability for the completeness or restorability of any backups.

Regular backup of personal data is the sole responsibility of the Member.

15.5 – Separation of Paid Services

This chapter applies exclusively to xHOSTING’s community-based (Free) services. Data retention and access related to Paid Services (in particular domain services) are governed by separate rules.

16. Payment terms for Paid Services

16.1 – Payment methods

The consideration for Paid Services available through xHOSTING shall be paid via the xHOSTING user interface using one of the payment methods available there.

Currently available payment methods include in particular:

• PayPal

• Stripe card payment (with 3D Secure authentication)

xHOSTING reserves the right to modify the supported payment methods from time to time.

16.2 – Performance and invoicing

Payment for Paid Services is made in advance. Upon receipt of the payment, xHOSTING shall commence the administration or performance of the service.

The Technical Operator shall issue an invoice in accordance with applicable laws.

16.3 – General refund rules

The availability, method, and conditions of refunds for Paid Services may vary depending on the specific service.

Detailed refund rules are set out in the dedicated section applicable to the relevant Paid Service.

17. Exclusion of service qualification

The Free Services provided within the xHOSTING community system shall not be considered business-provided hosting services, electronic communications services, or commercial hosting services.

xHOSTING does not provide a public, generally accessible service; its operation takes place within a closed, invitation-only community system.

18. Complaints handling

18.1 – Submission of complaints

The Member may submit complaints related to the operation of xHOSTING, the performance of Paid Services, invoicing, or administration in written form.

Submitting a complaint does not affect the Member’s other legal remedies.

18.2 – Methods of submitting complaints

Complaints may be submitted in writing via one of the following channels:

• by email: info@xhosting.hu
• through the xHOSTING user interface, if technically available
• by post: Madarász László, sole proprietor, 2040 Budaörs, Hajnal utca 4.

When submitting a complaint, the Member is requested to provide the information necessary for identification and a clear, concise description of the complaint.

18.3 – Investigation and response to complaints

xHOSTING shall record and investigate complaints and provide a substantive response within a reasonable time, but no later than 30 calendar days.

If additional information or identification is required to investigate the complaint, xHOSTING shall inform the Member accordingly.

The method of response shall correspond to the method of submission, unless the Member requests otherwise.

18.4 – Limits of complaints handling

Moderation, membership, or community operation decisions made within the xHOSTING community system shall not be considered official or administrative decisions, and the complaints handling procedure does not constitute an appeal forum for changing such decisions.

The purpose of complaints handling is to ensure transparency of operation, not the mandatory review of community decisions.

18.5 – Consumer dispute resolution (Paid Services)

If a complaint relates to a Paid Service and the Member qualifies as a consumer, the Member is entitled to use the dispute resolution options set out in Chapter 14 of this Policy, including conciliation proceedings.

This chapter does not limit the possibility of judicial enforcement.

18.6 – Data protection complaints

In the case of complaints related to data processing, the Member may contact the Data Controller using the contact details provided in Chapter 8 and is also entitled to lodge a complaint with the Hungarian Data Protection Authority (NAIH).