Web hosting: what you're actually paying for

Nobody reads their hosting bill. You pay it, $4, $15 or $40 a month, the way you pay for electricity: without much idea of what sits behind the outlet. At Peich, hosting is included in our subscription websites, and it's precisely because we spent years cleaning up after $4 hosting that we ended up folding it into the plan instead of leaving it to chance.

This article decodes the bill. The three families of hosting and the economics behind each, the teaser-price mechanism that makes "$4 a month" more expensive than it looks, the four things that actually matter for a small business, and the question almost nobody asks: which country your data lives in.

The short answer, for the busy

Web hosting comes in three families. Shared cPanel-style hosting advertises teaser prices of CAD $3.89 to $4.19 per month (Web Hosting Canada, Hostinger, July 2026), but those prices require prepaying 36 to 48 months and then renew at three to four times more. Managed WordPress hosting, like WP Engine from CAD $38 per month, adds updates, backups and specialized support. Modern cloud platforms (Vercel, Netlify, Cloudflare) distribute the site across a global network of servers and bill by usage. For a small business, four things matter more than the sticker price: backups you can actually restore, TLS encryption, updates applied without delay, and support that answers when the site goes down. As for Quebec's Law 25, it does not forbid hosting outside the province: it regulates the communication of personal information, requiring a prior assessment and a written agreement.

Three families, three economic logics

Shared hosting is the elder. One physical server, hundreds of sites on it, a control panel (usually cPanel) to upload your files. The provider's economics are simple: fill the machine to make it pay. Your site shares CPU, memory and bandwidth with all its neighbours, so when one of them gets hacked or catches a traffic spike, you are the one slowing down. The model has earned its place for personal sites and low-stakes projects. It becomes a gamble the moment the site is supposed to bring in customers.

Managed WordPress hosting (WP Engine, Kinsta and their peers) sells something else: the machine, plus someone who looks after it. WordPress updates applied for you, automatic backups, a staging environment, support staff who actually know WordPress. WP Engine's entry plan costs CAD $38 per month on annual billing, for one site and 25,000 monthly visits. Ten times the price of shared, for much the same kind of server: the premium pays for the human work and tooling wrapped around the machine.

The third family is newer: cloud platforms like Vercel, Netlify or Cloudflare. The site no longer lives on a server you rent by the month: it's distributed across a global network (a CDN, content delivery network) and served from the point closest to each visitor. No machine to maintain, no database exposed by default, automatic scaling. It's the architecture we use for the sites we build: it moves the effort from babysitting a server to designing the site, which is where effort actually produces value.

$4 a month is a teaser, not a price

Look at the real numbers, taken from the sales pages in July 2026. Web Hosting Canada lists its GO plan at CAD $3.89 per month, "61% off". Hostinger lists its Premium plan at CAD $4.19 per month, "75% off". In both cases the fine print says the same thing: the price applies if you pay 36 or 48 months upfront, in one payment. At renewal, the rate climbs back to list price: $9.99 at one, $15.39 at the other.

The mechanism deserves a name. You prepay three or four years, the provider banks it all today, and the renewal at three to four times the price bets on your inertia: moving a website is painful enough that most customers pay without looking. The spectacular discount is a customer acquisition cost, and the asset being acquired is you.

There's also a structural consequence few people run the numbers on. At $4 a month, your host collects less than $50 a year from you. A single support ticket handled by a competent human wipes out the whole year's margin. The model only works if you never call: support is designed accordingly, with knowledge bases, automated chat and queues that filter you before a human gets involved. Plain arithmetic. At that price, the absence of service isn't a flaw in the product: it is the product.

Add the invisible cost: an oversold shared server stretches the response time of every page. Slowness appears on no invoice, but you pay for it in visitors who give up and in Google rankings, since Google has measured site speed for years. Saving $10 a month can cost far more in customers who never find you or never wait for you.

The four things you're actually buying

Once the families and the prices are decoded, the real evaluation grid has four lines. This is where offers differ, not in the number of gigabytes.

Backups you can restore. Almost every host says "backups included". The questions that matter: how often, kept how long, stored where (a backup on the same server as the site burns with it), and above all, who performs the restore and how fast. A backup that has never been tested is a hypothesis, not insurance.

TLS encryption. The padlock in the browser. Let's Encrypt, a nonprofit, issues TLS certificates for free to more than 700 million websites. A host that charges extra for "SSL" is reselling you a free product; it's a reliable indicator of the house philosophy.

Updates actually applied. A typical WordPress site runs on a dozen or two plugins, and every outdated plugin is an entry point attackers already know. Someone has to do that work every week: you, your host, or your agency. If the answer is "nobody", the question isn't whether the site will have a problem, only when.

Support that answers. The simplest test costs nothing: write to support before you buy, with a real technical question. The speed and quality of the answer you get as a prospect is the ceiling of what you'll get as a customer.

Where your data lives: the Law 25 nuance

Which leaves the question almost nobody asks their host: which country are the servers in?

First, let's retire the myth: Law 25 does not require hosting in Quebec. What it does, through section 17 of the P-39.1 act, is more precise: before communicating personal information outside Quebec, a business must carry out a privacy impact assessment, establish that the information will receive adequate protection, and frame the communication in a written agreement. Regulated, not forbidden. And the threshold is "outside Quebec", not "outside Canada": a server in Toronto triggers the same obligations as a server in Virginia. We walk through the mechanism in our article on data leaving Quebec.

For a small-business website, the practical scope is real but manageable. A brochure site with no forms communicates next to nothing. As soon as there's a contact form, a newsletter or a client account, the names and emails submitted are personal information, and knowing where they end up is part of your documentation duties. The right posture sits between two extremes: the vendor selling "100% Quebec hosting" as a legal requirement (it's a sales simplification, not an obligation), and the vendor who has never thought about the question at all. The first reflex: ask your host where the data resides, and write down the answer. If nobody can tell you, that's already an answer.

Buying accountability, not servers

Here's the thread that ties all of the above together. When the host, the developer and whoever applies updates are three different companies, every outage becomes a tennis match: the host blames the site, the agency blames the server, and meanwhile you're offline. $4 hosting includes no one whose problem this is.

That's the honest case for hosting bundled into a subscription, the model we've argued for from the start: when the same team designs the site, hosts it and maintains it, the incentives line up. A slow or broken site is our problem before you've had time to notice. The disk space is incidental; what you're buying is an identifiable person accountable for the outcome.

One honest caveat: switching hosts won't fix a site that has simply run its course. If yours is slow, first work out whether it's the server or the site itself; we've written about when a redesign is due, and how to run one.

If you don't know what your hosting bill actually covers, send it to us. We'll tell you what you're paying for, what's missing, and what it should cost. No strings attached.

→ Tell us about your site