π Why This Matters
Why You Must Read the ToS
A hosting provider's Terms of Service (ToS), Acceptable Use Policy (AUP), and Service Level Agreement (SLA) are legally binding contracts. When you click "I Agree," you're signing a contract that governs what happens to your data, when they can delete your site, what you're actually paying, and what recourse you have when things go wrong.
We've reviewed the Terms of Service from 15 major hosting providers. Here's what we found hidden in the fine print, and what you need to watch for before choosing a host.
π The Three Documents You Need to Read
The master agreement. Covers billing, refunds, account termination, liability, data ownership, and your legal relationship with the provider. This is the most important document.
Defines what you can and cannot do on their servers. Resource limits, prohibited content, 'fair use' definitions, and the hidden caps behind 'unlimited' plans live here.
The uptime guarantee and what happens when they fail to meet it. Specifies compensation (usually service credits, rarely refunds), exclusions, and how to file a claim.
10 Red Flags in Hosting Terms of Service
1. Vague or overly broad content rights
"You grant us a non-exclusive, worldwide, royalty-free, perpetual license to use, reproduce, modify, and distribute your content."
Why it matters: This language is standard for service delivery, but watch the scope. 'Perpetual' means even after you cancel. 'Modify and distribute' could theoretically let them use your content. A good ToS limits the license to 'solely for the purpose of providing the hosting service.'
2. "Unlimited" with hidden fair use caps
"Unlimited resources are subject to our Fair Use Policy. Accounts using excessive resources may be throttled or suspended."
Why it matters: They never define 'excessive.' In practice, if your site uses more than ~25% of shared server CPU or has more than 250K files (inodes), they'll throttle or suspend. You'll only discover the limit after you've violated it.
3. Auto-renewal at dramatically higher prices
"Services renew automatically at the then-current renewal rate unless cancelled 15 days before the renewal date."
Why it matters: The 'then-current rate' can be 200-500% higher than your introductory price. Combined with a narrow cancellation window (15-30 days), many customers get charged the full price before they can cancel.
4. Data deletion with minimal notice
"Upon termination, your data may be deleted immediately. We are not obligated to retain or provide access to your data."
Why it matters: Good providers give 30 days to retrieve data after cancellation. Bad ones delete on the spot, even if you were suspended for a billing error. Always check the post-termination data retention period.
5. Zero liability for downtime or data loss
"Our total liability shall not exceed the fees paid by you in the one (1) month preceding the event."
Why it matters: Even with a 99.9% uptime SLA, the provider's maximum liability is typically one month's hosting fee ($3-30). If downtime costs your business $10,000, you'll get a $12 credit. Some providers limit liability to 'service credits' (not cash) that expire in 30 days.
6. Right to modify ToS without meaningful notice
"We reserve the right to modify these terms at any time. Continued use of the service constitutes acceptance of modified terms."
Why it matters: They can change the price, limits, policies (anything) and your continued use means you 'agreed.' Best providers email you 30 days before changes. Worst case: they post changes on their website and that counts as 'notice.'
7. Restrictive migration and data export
"You may not use automated tools to extract, download, or migrate content from our servers without written permission."
Why it matters: Some providers make it deliberately difficult to leave. They may block SSH access, limit cPanel backup sizes, charge 'migration fees,' or restrict automated export tools. If getting your data out requires 'written permission,' that's vendor lock-in by design.
8. Mandatory arbitration with venue restrictions
"Disputes shall be resolved through binding arbitration in [Provider's city], and you waive your right to participate in class action lawsuits."
Why it matters: You can't sue them in court or join a class action. Arbitration must happen in their city (often Utah, Florida, or Bulgaria). The cost of traveling to arbitrate over a $50 dispute makes it impossible to seek recourse.
9. Overbroad suspension rights
"We may suspend or terminate your account at our sole discretion, with or without cause, with or without notice."
Why it matters: This gives the provider complete power to delete your site for any reason (or no reason) without telling you first. Look for providers that require: (1) specific violation, (2) notification, (3) grace period to fix the issue.
10. Refund exclusions that swallow the guarantee
"30-day money-back guarantee applies to hosting fees only. Setup fees, domain fees, SSL fees, and add-on services are non-refundable."
Why it matters: By the time you subtract domain registration ($12), SSL ($0-50), setup fees ($5-15), email setup ($5-10), and any add-ons, your '30-day money-back guarantee' might refund $2.99 on a $50 purchase. Some providers also exclude accounts that used 'excessive resources.'
Data Ownership Traps
Your website content, databases, emails, and files are your intellectual property. But the ToS defines how the provider can use that content while it's on their servers, and sometimes after you leave.
Good Data Clause
- β’ "You retain all ownership rights to your content"
- β’ License limited to "providing the service"
- β’ License terminates when you cancel
- β’ 30-day data retrieval window post-cancellation
- β’ No right to create derivative works
- β’ Clear statement: "We will not sell your data"
Bad Data Clause
- β’ "Perpetual, irrevocable license" to your content
- β’ Right to "modify, adapt, create derivative works"
- β’ License survives termination
- β’ No guaranteed data retrieval period
- β’ "We may use anonymized data for any purpose"
- β’ No clear ownership statement
The "Unlimited" Myth
"Unlimited bandwidth," "unlimited storage," "unlimited websites." Every major shared hosting provider advertises these, and none of them are truly unlimited. Here's what the fine print actually says:
| Provider | Advertised | Actual Limit (from ToS/AUP) |
|---|---|---|
| Hostinger | Unlimited bandwidth | Fair use; CPU limited to 2-4 cores; 2-8GB RAM; 200-600K inodes depending on plan |
| Bluehost | Unmetered bandwidth | "Not subject to a specific limit" but must comply with AUP; CPU throttled if 'excessive'; ~500K inodes |
| SiteGround | Unmetered traffic | 10K-400K monthly visits (soft cap); CPU seconds limited; storage defined per plan (10-40GB) |
| GoDaddy | Unlimited storage | "For normal operational purposes"; no archival, backup, or file-sharing use; inodes capped |
| A2 Hosting | Unlimited SSD | Must be for website operation; 500K inode limit; no file-sharing, archival, or streaming |
| HostGator | Unmetered disk & BW | 25% CPU usage cap; 250K inodes; no streaming, file sharing, or backup services |
π‘ The Honest Alternative
Choose providers that state exact resource limits: Cloudways (1-8 vCPU, 1-32GB RAM, 25-640GB storage), DigitalOcean (defined CPU/RAM/bandwidth), Vultr (exact specs per plan). When you know the limits, you can plan. "Unlimited" just means "we won't tell you until you've broken the rules."
Refund & Cancellation Policies
| Provider | Guarantee | Cancel Window | What's Excluded |
|---|---|---|---|
| SiteGround β | 30 days | Any time | Domain registration, renewals after 30 days |
| Hostinger | 30 days | Via support ticket | Domains, renewals, add-ons (CDN, email, etc.) |
| Bluehost | 30 days | Via account portal | Domain fee ($15.99 deducted from refund), add-ons |
| A2 Hosting β | 30 days (full) / anytime (prorated) | Any time | Setup fees, domains, SSL |
| Kinsta ββ | 30 days | Via dashboard | None (clean full refund) |
| Cloudways ββ | No contract | Cancel anytime | Pay-as-you-go, no refund needed |
| GoDaddy | 30 days (annual) / 48hrs (monthly) | Via account | Domains, add-ons, setup fees |
Uptime SLA Fine Print
A "99.9% uptime guarantee" sounds impressive, but the devil is in the exclusions. Most SLAs exclude scheduled maintenance, DNS issues, DDoS attacks, third-party failures, and sometimes even "acts of God." What counts as downtime varies dramatically between providers.
β±οΈ What 99.9% Really Means
Common SLA Loopholes
- β’ Scheduled maintenance excluded: 4 hours of "scheduled" downtime per month doesn't count toward the 99.9% SLA
- β’ Must file a claim: Credits aren't automatic; you must submit a ticket within 7-30 days with evidence
- β’ Credits, not refunds: Compensation is service credits (apply to next bill), not cash refunds
- β’ Credits expire: Often valid for only 30-60 days, and non-transferable
- β’ "Network uptime" only: SLA may only cover network availability, not application/server uptime
Renewal Price Hikes
The introductory price is marketing. The renewal price is reality. Here's what the most popular hosts actually charge after your first term expires:
| Provider | Intro Price | Renewal Price | Increase |
|---|---|---|---|
| Hostinger | $2.99/mo | $7.99/mo | +167% |
| Bluehost | $2.95/mo | $11.99/mo | +306% |
| SiteGround | $2.99/mo | $17.99/mo | +502% |
| A2 Hosting | $2.99/mo | $12.99/mo | +334% |
| GoDaddy | $5.99/mo | $9.99/mo | +67% |
| Cloudways | $14/mo | $14/mo | 0% β |
| DigitalOcean | $6/mo | $6/mo | 0% β |
| Kinsta | $35/mo | $35/mo | 0% β |
π‘ How to Beat Renewal Price Hikes
- β’ Buy the longest term upfront (3-4 years) to lock in the intro price longer
- β’ Set a calendar reminder 60 days before renewal to shop competitors
- β’ Contact retention/cancellation team: most providers offer 20-40% renewal discounts to keep you
- β’ Consider transparent-pricing providers (Cloudways, DigitalOcean, Kinsta) where the price never changes
- β’ Migrate before renewal: switching hosts takes 1-2 hours with most providers
Account Suspension Rules
Understanding when and how a provider can suspend your account is critical. Some providers give you 72 hours to fix a policy violation; others delete everything with 24 hours notice (or less).
Resource overuse (CPU/RAM)
Notify via email β 24-48hr to optimize β suggest upgrade
Throttle immediately with no warning β suspend if it continues β no notification
What to look for: Look for: 'We will notify you before throttling or suspending for resource usage.'
Payment failure
3 retry attempts over 7-14 days β email notification β 15-day grace period β suspend (data retained 30 days)
1 retry β suspend in 48hrs β delete data in 7 days
What to look for: Look for: 'Your data will be retained for at least 30 days after suspension for non-payment.'
ToS violation (content)
Email with specific violation β 48-72hr to resolve β suspend only if unresolved β data retained
Immediate suspension β no appeal process β data deleted
What to look for: Look for: 'We will provide a specific description of the violation and a reasonable time to remedy it.'
Malware/hack detected
Quarantine affected files β notify immediately β provide malware scan results β 24hr to clean up
Suspend entire account β require professional cleanup before reactivation β charge cleanup fee
What to look for: Some hosts charge $100-300 for malware cleanup. Check if security scanning is included in your plan.
Provider ToS Comparison
We scored the ToS of 8 major hosting providers on transparency, fairness, and customer protection:
| Provider | Data Rights | Refund | Price Trans. | Suspension | Overall |
|---|---|---|---|---|---|
| Kinsta | βββ | βββ | βββ | βββ | A+ |
| Cloudways | βββ | βββ | βββ | ββ | A |
| SiteGround | ββ | ββ | β | βββ | B+ |
| A2 Hosting | ββ | βββ | β | ββ | B |
| DigitalOcean | βββ | ββ | βββ | ββ | A- |
| Hostinger | ββ | ββ | β | β | B- |
| Bluehost | β | β | β | β | C+ |
| GoDaddy | β | β | β | β | C |
ToS Review Checklist
Use this checklist before signing up with any hosting provider. It takes 15-20 minutes and can save you hundreds of dollars and countless headaches:
π° Billing & Pricing
π Data & Ownership
β±οΈ Uptime & Performance
π‘οΈ Account & Security
βοΈ Legal & Disputes
Know Your Rights
πͺπΊ EU/EEA (GDPR)
Right to data portability (get your data in a common format), right to erasure (full deletion on request), 14-day cooling-off period for online purchases, providers must have a legal basis for processing your data, and clear consent for marketing communications.
πΊπΈ United States
Fewer consumer protections. The ToS IS the contract, what it says, goes. FTC Act prohibits 'unfair or deceptive acts' (misleading 'unlimited' claims may qualify). State-specific laws: California (CCPA gives data access/deletion rights), New York, and others have additional protections.
π¬π§ UK
Consumer Rights Act 2015 requires digital services to be 'as described, fit for purpose, and of satisfactory quality.' UK GDPR mirrors EU GDPR. 14-day right to cancel online purchases (may be waived if service begins immediately with consent).
π¦πΊ Australia
Australian Consumer Law (ACL) guarantees that services are 'fit for purpose' regardless of what the ToS says. Unfair contract terms in standard form contracts can be voided. ACCC actively enforces against misleading hosting claims.
Frequently Asked Questions
Can a hosting provider delete my website without warning?
Are 'unlimited' hosting plans really unlimited?
Who owns my data on a hosting provider's servers?
What should I do if my hosting provider changes their ToS?
Is the renewal price increase legal?
Find Hosting with Fair Terms
Use our hosting finder to compare providers we've vetted for transparent pricing, fair policies, and strong data protection.
Compare Hosting Providers
