Last updated: 25 October 2026
This Privacy Policy explains what information SiteMix (“SiteMix”, “we”, “us”), a self-service website builder operated from Hong Kong, collects when you use sitemixhk.com and the SiteMix Android app, how we use it, and the choices you have.
1. Information we collect
- Account information. When you sign up with email and password we store your email address and a securely hashed version of your password (never the password itself).
- Sign-in with Google. If you choose Google, we receive only basic profile information: your Google account ID, email address, name and profile picture. We request only the
openid,emailandprofilescopes. We never post on your behalf and never read your contacts, messages or files. - Your site content. The websites you build — text, images, settings, products, booking options and the domain names you connect — are stored so we can save, host and publish them.
- Payment status. Website-builder subscriptions are paid with PayPal on the web and in the SiteMix Android app downloaded from sitemixhk.com or other app stores; the version installed from Google Play uses Google Play Billing. We receive and store your plan, subscription status, renewal dates and the payment provider’s reference IDs. We do not receive or store your card number or bank details.
- Technical information. Like most websites, our server records basic request logs (such as IP address, browser type and time) for security and troubleshooting.
- Messages you send us, for example support emails.
2. How we use information
- To create and secure your account and keep you signed in.
- To build, store, host and publish your websites.
- To process subscriptions, confirm payments and manage your plan.
- To answer support requests and send important service messages (for example password reset or billing notices).
- To prevent abuse and keep the service working.
We do not sell your personal information, and we do not use it for third-party advertising.
3. Cookies and local storage
We use a small number of essential cookies: a session cookie that keeps you signed in, a short-lived cookie that protects the sign-in process with Google, and a technical cookie that tells the page it is connected to the SiteMix server. We also use your browser’s local storage to remember your language choice and unsaved drafts. We do not use advertising or tracking cookies on the SiteMix platform. (Sites you build may add their own tools — for example analytics — which are your responsibility as the site owner.)
4. Who we share information with
We share information only with service providers we need to run SiteMix:
- PayPal and Google Play — to process payments (PayPal also sends marketplace seller payouts);
- Porkbun (domain registrar) and GoDaddy (domain storefront) — for domains, as described in section 7;
- a parcel-tracking service (17TRACK), only for courier and tracking numbers of shipped auction items;
- Google — only when you choose to sign in with Google;
- Google Cloud Translation — if you use automatic translation on the Business plan, the text being translated is sent to Google;
- our cloud hosting provider, which stores the servers that run the service.
We may also disclose information if required by law. Each provider handles data under its own privacy policy.
5. Marketplace, game accounts and auction
On the SiteMix marketplace (online shops and social accounts), game-account and auction pages, SiteMix acts only as an intermediary between buyers and sellers; we do not own the items listed. The buyer pays SiteMix through PayPal, the payment is held in SiteMix platform escrow during a short holding period, and the seller is then paid via PayPal minus the platform fee. For these transactions we process:
- Listing and order details — listing content and images, prices, offers and bids, order status, payment and payout reference IDs, receipt numbers, reports and disputes, and ratings;
- On-platform messages between buyer and seller, and questions and answers on listings (buyers and sellers never see each other’s email address);
- Payout details — the seller’s PayPal email address used to pay them;
- Handover details for digital items (for example account login details), stored encrypted and shown only to the buyer after payment is confirmed; for shipped items, the courier and tracking number.
We do not receive or store buyers’ or sellers’ card or bank details.
6. Travel links
Our Travel page contains affiliate links to Klook, and to Kiwitaxi and Welcome Pickups through the Travelpayouts affiliate network. SiteMix may earn a commission when you book through these links, at no extra cost to you. Searches, bookings and payments happen on the partner’s own website under its terms and privacy policy; SiteMix does not receive your booking or payment details. Partner sites and Travelpayouts may set their own cookies to track referrals.
7. Domains
You can connect a domain you already own, buy one through the SiteMix Domains storefront (a GoDaddy reseller storefront where GoDaddy takes the order and payment and SiteMix earns a commission), or buy one in the SiteMix domain store. For domains bought in the SiteMix domain store we process the domain name, the registrant contact details you enter (they are passed to our registrar, Porkbun, to register the domain in your name, with WHOIS privacy turned on), the order and payment reference, renewal dates and the DNS records we manage for you. We do not store your card details.
8. Shops and cloud-drive files on your sites
If your site has a shop, orders your customers place (name, phone, email, delivery address, note and order status) are stored so you can manage them. Your customers pay you directly; SiteMix does not hold that money. You are responsible for your customers’ data as the shop owner, and we process it on your behalf. If you add Google Drive, Dropbox or OneDrive share links to your site, our server only checks whether each link is public; we do not access private files.
9. Android app
The SiteMix Android app shows the same SiteMix service as the website, so this policy applies to it in the same way. Payments in the app work as described in section 1.
10. Where data is stored
SiteMix is run from Hong Kong. Our servers are provided by a cloud hosting company and may be located outside Hong Kong (currently in Australia). Payment and sign-in providers may process data in other countries.
11. How long we keep data
We keep your account and site data while your account is open. Sites you delete in your dashboard are removed from our live systems. Payment records may be kept longer where needed for accounting or legal reasons.
12. Your rights and data deletion
You can access and update your sites in your account at any time. You can ask us for a copy of your personal data, to correct it, or to delete your account and all associated data by emailing support@sitemixhk.com from the email address on your account. We complete deletion requests within 30 days. See Data Deletion for details.
13. Security
We use HTTPS, hashed passwords and access controls to protect your data. No online service is 100% secure, so please use a strong, unique password.
14. Children
SiteMix is not intended for children under 13, and we do not knowingly collect their data.
15. Changes
If we change this policy we will update the date at the top of this page, and for important changes we will let account holders know.
16. Contact
Questions about privacy: support@sitemixhk.com.