> What is CDN in Hostinger and what does it mean for GDPR? How Hostinger CDN processes IP addresses, where edges run, and why it usually needs no cookie consent. > > Canonical: https://www.flowconsent.com/en/services/cdn/hostinger-cdn CDN # Hostinger CDN Unclassified · [Official website](https://www.hostinger.com) Hostinger CDN is the content delivery network built into Hostinger hosting plans, run by the Lithuanian hosting group Hostinger. Once enabled, it sits in front of your site as a reverse proxy, caches static files on edge servers, compresses and optimises images and filters malicious traffic. It processes visitors' IP addresses and request data but sets no tracking cookie in normal operation. [Block Hostinger CDN until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=cdn) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [CDN](https://www.flowconsent.com/en/services/cdn) - Consent Unclassified - Prior consent Not required - Documented cookies 0 - Third-party domains 1 - Servers Hostinger edge servers in several regions (Hostinger has announced locations including the United Kingdom, France, the United States, Singapore, Brazil and India); the operator is Hostinger, a Lithuanian group (HOSTINGER, UAB, Vilnius), and the network is run by Hostinger International Ltd. Overview ## What does Hostinger CDN do? ## **What is CDN in Hostinger?** Hostinger CDN is the content delivery network that Hostinger includes with its Business and cloud hosting plans and offers as an upgrade on smaller plans. In plain terms, the meaning of CDN at Hostinger is a layer of edge servers placed between your visitors and your hosting server: static files such as images, CSS, JavaScript and fonts are cached close to the visitor and served without contacting the origin. Hostinger reports speed gains of up to 40 percent on sites tested during its rollout. The CDN is switched on from the Hostinger dashboard under Performance. Hostinger then changes the DNS records of the domain, pointing the root A records and the www CNAME to Hostinger managed CDN addresses, which is why the domain must use Hostinger nameservers. Besides caching, it adds TLS 1.3 and HTTP/3, compression, WebP image conversion, CSS and JavaScript minification, a web application firewall, DDoS mitigation and an Under Attack mode. You can confirm it is active when responses carry the x-hcdn-request-id and x-hcdn-cache-status headers. ## **Data and cookies processed by Hostinger CDN** As a reverse proxy, Hostinger CDN necessarily sees every request: the visitor''s IP address, the requested URL, the user agent, the referrer, request headers including any cookies your own site sets, and timestamps. This data is used to route, cache, secure and log traffic, and to show cache and status code statistics in the Analytics tab of the dashboard. It does not inject any script into your pages. Hostinger does not document any cookie set by the CDN during normal caching. It reads your site''s own cookies, for example WordPress login or WooCommerce cart cookies, to decide when to bypass the cache. When Under Attack mode or a high security level shows a browser verification page, a short lived verification cookie is typically stored to remember that the browser passed the check; its name is not publicly documented. ## **GDPR and ePrivacy implications** Under the GDPR, an IP address is personal data, so Hostinger acts as your processor for the CDN, in the same way as for hosting. The relationship is covered by the Hostinger Data Processing Addendum, which you should keep on file together with your register of processing activities. Purposes are limited to delivery, performance and security, which are compatible with data minimisation. The ePrivacy Directive 2002/58/EC, Article 5(3), only concerns storing or reading information on the visitor''s device. Caching on Hostinger edge servers is not storage on the device, and a verification cookie used solely to protect the site against attacks falls under the strictly necessary exemption recognised by the CNIL, the German TDDDG § 25(2) and the Spanish LSSI CE art. 22.2. ## **Do you need consent for Hostinger CDN?** In most cases, no. A CDN that only delivers and protects your site serves the service explicitly requested by the visitor, so you can rely on legitimate interest under Article 6(1)(f) GDPR and you do not need to block it behind your cookie banner. Blocking it would in fact be impossible, since the whole site is delivered through it. The situation changes only if you combine the CDN with tools that track visitors, such as third party analytics or advertising tags. Those tools need their own consent, independently of the CDN. Be transparent in your privacy notice that a CDN processes IP addresses, and mention the security cookie if you enable Under Attack mode. ## **Data transfers and edge locations** Hostinger is a Lithuanian group, HOSTINGER, UAB in Vilnius, and its network is operated by Hostinger International Ltd. The CDN serves each visitor from the nearest edge; Hostinger has announced edges in the United Kingdom, France, the United States, Singapore, Brazil and India. A European visitor is normally served from a European location, while visitors elsewhere are processed in third countries. Hostinger states that it transfers data outside the EEA only on a valid basis, relying on the standard contractual clauses of Decision 2021/914 under Article 46 GDPR. The United Kingdom benefits from an adequacy decision. Because only technical request data is involved and no profiling takes place, the Schrems II transfer risk is limited, but you should document it in your transfer assessment. ## **Practical compliance steps** Add Hostinger CDN to your list of processors and keep the Hostinger DPA. In your privacy notice, explain that a content delivery network processes IP addresses and request data to deliver and secure the site, name Hostinger, and mention the possible transfer to edges outside the EEA with the safeguard used. Check how long CDN and access logs are retained and whether that matches your own retention policy. In your cookie policy, state that the CDN sets no tracking cookie and list the security verification cookie as strictly necessary if you use Under Attack mode. Classify the CDN as a necessary service in your consent management platform so it never appears as a choice for the visitor, and make sure the trackers you add on top of it are blocked until consent. Compliance ## Hostinger CDN and the GDPR - Legal basis Legitimate interest (Art. 6(1)(f) GDPR) in delivering the website quickly and securely; the CDN performs no storage on the visitor's device in normal operation, so Art. 5(3) ePrivacy does not apply. - Risk level low - Applicable regulations GDPR (Art. 6(1)(f), Art. 28 and Chapter V), ePrivacy Directive 2002/58/EC art. 5(3) only if a browser verification cookie is set, NIS2 security expectations for hosting providers ### Impact assessment (DPIA) A DPIA is generally not required for Hostinger CDN, because it only processes technical request data for delivery and security, without profiling or tracking. Record the CDN in your register of processing activities as part of your hosting processor relationship and keep a copy of the Hostinger Data Processing Addendum. Check the log retention period and the edge regions used, and note that the browser verification page in Under Attack mode may store a short lived cookie. Reassess if you add Hostinger analytics or other features that go beyond content delivery. ### Sample text for your banner > We use Hostinger CDN to deliver our pages quickly and protect the site against attacks. It processes technical data such as your IP address on our behalf and does not set marketing or analytics cookies. No consent is needed for this strictly necessary service. Cookies and trackers ## What Hostinger CDN sets and contacts - Tracking method Server side reverse proxy enabled from the Hostinger dashboard: the domain's A records and www CNAME are switched to Hostinger managed CDN addresses (for example cdn.hstgr.net), so every request passes through Hostinger edge servers before reaching the hosting server. Detected through the x-hcdn-request-id and x-hcdn-cache-status response headers. No script is added to the page. - Server location Hostinger edge servers in several regions (Hostinger has announced locations including the United Kingdom, France, the United States, Singapore, Brazil and India); the operator is Hostinger, a Lithuanian group (HOSTINGER, UAB, Vilnius), and the network is run by Hostinger International Ltd. - Cookieless mode available Yes - Data transferred outside the EU Visitors are served from the nearest edge, so requests from outside Europe are processed in the United States, Singapore, Brazil or India, and logs or configuration may be accessible across the Hostinger group. Hostinger states that transfers outside the EEA rely on the European Commission standard contractual clauses (Art. 46 GDPR) and offers a Data Processing Addendum. The data concerned is limited to technical request data such as IP address, URL, user agent and timestamps. ### Third-party domains contacted (1) - `cdn.hstgr.net` Questions ## Frequently asked questions about Hostinger CDN Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Does Hostinger CDN set cookies? Hostinger does not document any cookie set by the CDN during normal caching; it only reads your site's own cookies, such as WordPress login or WooCommerce cart cookies, to bypass the cache. When Under Attack mode or a high security level shows a browser verification page, a short lived verification cookie is typically stored. Its name is not publicly documented, so check your browser tools if you enable that mode. ### Is consent required for Hostinger CDN? No, in normal use. A CDN that only delivers and protects your site is strictly necessary for the service the visitor requested, and the verification cookie used against attacks is covered by the ePrivacy exemption. Trackers you run on top of the CDN still need their own consent. ### What is the legal basis for Hostinger CDN? Legitimate interest under Article 6(1)(f) GDPR, namely delivering the website quickly and securely. Hostinger processes the request data as your processor, so the Hostinger Data Processing Addendum under Article 28 applies. ### Does Hostinger CDN transfer data outside the EU? Possibly. Visitors are served from the nearest edge, and Hostinger has announced edges in the United States, Singapore, Brazil and India as well as the United Kingdom and France. Hostinger relies on standard contractual clauses (Decision 2021/914) for transfers outside the EEA. Only technical request data is involved, which keeps the Schrems II risk low. ### Do I need a DPIA for Hostinger CDN? Usually not. The CDN processes technical data for delivery and security without profiling, large scale monitoring or sensitive data, so it does not meet the usual high risk criteria. Record it in your register of processing activities and keep the DPA on file. ### How do I use Hostinger CDN in a GDPR compliant way? Keep the Hostinger DPA, list the CDN among your processors and explain in your privacy notice that a content delivery network processes IP addresses. Check log retention and edge locations, and mention the security cookie if you use Under Attack mode. Classify the CDN as necessary in your consent tool. ### What are EU based alternatives to Hostinger CDN? Bunny.net from Slovenia, Gcore from Luxembourg and the OVHcloud CDN from France are European CDN providers that let you restrict delivery to European locations. Note that switching usually means moving away from Hostinger nameservers, since Hostinger CDN only works with them. ### How should I update my cookie policy for Hostinger CDN? State that the site is delivered through Hostinger CDN, which processes technical request data and sets no tracking cookie. If you enable Under Attack mode, list the browser verification cookie as strictly necessary with a short lifetime. Mention the CDN in the processors section of your privacy notice. Same category ## More services: CDN [See the whole category](https://www.flowconsent.com/en/services/cdn) ### [Cloudflare](https://www.flowconsent.com/en/services/cdn/cloudflare) [Cloudflare is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Cloudflare is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Cloudflare offers reliable solutions that scale with organizational needs and evolving web standards.](https://www.flowconsent.com/en/services/cdn/cloudflare) [CDN](https://www.flowconsent.com/en/services/cdn/cloudflare) · ### [LiteSpeed Cache](https://www.flowconsent.com/en/services/cdn/litespeed-cache) [LiteSpeed Cache is a web performance optimization tool that helps websites load faster by implementing caching, lazy loading, and resource optimization techniques. It automatically compresses and minifies CSS, JavaScript, and images. LiteSpeed Cache improves Core Web Vitals scores, enhances user experience, and boosts search engine rankings through intelligent optimization strategies. With easy implementation and real-time monitoring, LiteSpeed Cache delivers measurable speed improvements.](https://www.flowconsent.com/en/services/cdn/litespeed-cache) [CDN](https://www.flowconsent.com/en/services/cdn/litespeed-cache) · ### [Jetpack Boost](https://www.flowconsent.com/en/services/cdn/jetpack-boost) [Jetpack Boost is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Jetpack Boost supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Jetpack Boost enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/cdn/jetpack-boost) [Analytics](https://www.flowconsent.com/en/services/cdn/jetpack-boost) · ### [Varnish](https://www.flowconsent.com/en/services/cdn/varnish) [Varnish is a web performance optimization tool that helps websites load faster by implementing caching, lazy loading, and resource optimization techniques. It automatically compresses and minifies CSS, JavaScript, and images. Varnish improves Core Web Vitals scores, enhances user experience, and boosts search engine rankings through intelligent optimization strategies. With easy implementation and real-time monitoring, Varnish delivers measurable speed improvements.](https://www.flowconsent.com/en/services/cdn/varnish) [CDN](https://www.flowconsent.com/en/services/cdn/varnish) · ### [EWWW Image Optimizer](https://www.flowconsent.com/en/services/cdn/ewww-image-optimizer) [EWWW Image Optimizer is an image management and optimization solution that helps websites deliver high-quality visual content with optimal performance. It provides automatic compression, format conversion, and responsive delivery for fast page loads. EWWW Image Optimizer supports lazy loading, CDN distribution, and gallery creation, enabling businesses to showcase visuals beautifully while maintaining excellent Core Web Vitals scores and search engine rankings.](https://www.flowconsent.com/en/services/cdn/ewww-image-optimizer) [CDN](https://www.flowconsent.com/en/services/cdn/ewww-image-optimizer) · ### [Gcore](https://www.flowconsent.com/en/services/cdn/gcore) [Gcore is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Gcore supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Gcore ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/cdn/gcore) [CDN](https://www.flowconsent.com/en/services/cdn/gcore) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)