How a Sitario website works
This page describes what you technically get with your site: how it's built, where it runs, who maintains it and what happens to your data. No marketing — just the facts.
Architecture #
A Sitario website is a set of static files: HTML, CSS, images and a small amount of JavaScript. There is no application server assembling pages on request — everything is prepared ahead of time, at publish.
The visitor's path
The contact-form path
When someone types in the address, the browser connects to CloudFront — a network of several hundred servers around the world. CloudFront keeps a copy of the site at the node nearest the visitor and usually serves it within tens of milliseconds. The files originate in Amazon S3, an object store whose durability much of the internet relies on.
The only dynamic element is the contact form. Sending a message triggers an AWS Lambda function that validates the content and forwards it to your email. The function runs for a fraction of a second and disappears — there is no long-lived process to hang or to hijack.
Technology #
We build sites with Astro, a static site generator. Astro compiles the whole site into ready HTML at publish time, so the browser never has to render anything from JavaScript.
The page carries only as much JavaScript as three things need: the mobile menu, the dark-mode toggle and the cookie banner. No frameworks shipped to the browser, no “just in case” libraries.
CSS is inlined directly into the document, so the page never waits for separate stylesheets. That's one reason the first render fits within Core Web Vitals limits.
Hosting and domain #
The site's files live in Amazon S3 and traffic is served by CloudFront — AWS infrastructure, the same that runs services with millions of visitors. Your domain's DNS records are managed in Route 53.
The SSL certificate is issued by AWS Certificate Manager and renewed automatically. There is no expiry date to watch and no “SSL package” surcharge.
The first year of hosting is included in the PLN 199 price. From year two, renewal costs PLN 149/year — covering hosting, the certificate, editor access and support. If you decide to leave, you download the complete source and move the site wherever you like — the domain and content are yours.
Editing content #
Changes happen in a panel: you click any text on a preview of your site and type. You can also add sections, cards and photos from ready-made blocks.
After you save, the system rebuilds the site and swaps the files on the CDN. Publishing takes about 2 minutes — the time of a rebuild plus a cache refresh.
The editor guards the layout: you change the content, but you can't break the grid, ruin the colors or disable the mobile version. That's deliberate — a year from now the site should look as sharp as on day one.
Security #
Most break-ins on business websites target the login panel, outdated plugins or the database. A Sitario site has none of those in production — the public part is read-only files.
- No backend and no database — nothing to take over, nowhere to inject malicious code.
- No login panel in production — editing happens in a separate system, away from the public site.
- DDoS attacks are absorbed by CloudFront — traffic spreads across hundreds of nodes before it reaches the origin.
- Site backups — every publish can be rolled back.
Performance #
Google grades pages with three Core Web Vitals metrics: LCP (how fast content appears), INP (how fast the page responds to touch) and CLS (whether content jumps around). A static architecture passes these by nature — there is no database and no heavy JavaScript to wait for.
- Fonts hosted with the site and subset to the characters in use — tens of KB instead of ~300 KB from Google Fonts.
- Images converted to WebP and scaled to their actual display size.
- CSS inlined into the document — zero render-blocking stylesheet requests.
- No JS frameworks in the browser — the phone has nothing to chew on.
The result: a PageSpeed Insights score of 90+ on mobile is our norm, not an achievement.
Your data and ownership #
The domain is registered in your name — including when you buy it through our order form. The content is yours, and you can download the complete source anytime and host it anywhere.
Contact-form data goes only to your email — we build no database out of it. Analytics, if you enable it, runs under Consent Mode v2: it collects data only after the visitor agrees, as GDPR requires.
A privacy policy ships with every site and describes exactly this scope of processing — nothing beyond it.