How a Sitario website works
This page describes what you technically get with your site: how it's built, where it runs, who maintains it and what happens to your data. No marketing — just the facts.
Ordering, payment and the guarantee #
The order of events is simple: you fill in the order form, pay (card or Revolut Pay via Stripe) and only then does the system start working — writing copy, designing and building your site. Right in the form you can pick the subpages your site should have (Services, About, Pricing, Portfolio, Contact) and add a note to each about what should go there. A preview of the finished site usually appears on your status page within the hour.
Nothing goes live on your domain without your approval. You review the preview and approve it with one click — approval is free, because the order is already paid. Our acceptance guarantee applies: if you don't approve the finished preview, we refund your payment in full. By placing the order you request immediate performance of the service after payment and acknowledge that once the service has been fully performed, the statutory right of withdrawal no longer applies — details in the Terms.
You watch the build live: the status page shows a progress bar, completed stages ("behind the scenes") and what the system is working on right now — from the concept, through writing copy and designing icons, to compiling and publishing your preview.
Email notifications #
At the key moments of your order we send short email notifications — strictly about the status of your order and your website. No marketing, no newsletters, no “what's new” emails. You'll get a message when:
- your payment arrives and the build starts,
- the preview of your site is ready to review and approve,
- your site is waiting for your domain to be pointed at us (own domain only — the email includes the name servers and simple instructions),
- your site goes live at your address,
- in the rare case we can't complete the order (together with refund information),
- your hosting is about to expire (reminders 30, 14 and 3 days ahead), has expired, or the permanent deletion of the site's files is approaching,
- your own domain is about to expire at your registrar (reminders 30 and 7 days ahead) or has expired — details in the hosting and domain section,
- Autoblog has set aside an article draft for your approval, or skipped a publication because the character pool ran out (applies when Autoblog is on).
Each of these notifications concerns a specific order and is sent at most once. You can also simply reply to any of them — replies reach us.
Architecture #
A Sitario website is a set of static files: HTML, CSS, images and a small amount of JavaScript. There is no application server assembling pages on request — everything is prepared ahead of time, at publish.
The visitor's path
The contact-form path
When someone types in the address, the browser connects to CloudFront — a network of several hundred servers around the world. CloudFront keeps a copy of the site at the node nearest the visitor and usually serves it within tens of milliseconds. The files originate in Amazon S3, an object store whose durability much of the internet relies on.
The only dynamic element is the contact form. Sending a message triggers an AWS Lambda function that validates the content and forwards it to your email. The function runs for a fraction of a second and disappears — there is no long-lived process to hang or to hijack.
Technology #
We build sites with Astro, a static site generator. Astro compiles the whole site into ready HTML at publish time, so the browser never has to render anything from JavaScript.
The page carries only as much JavaScript as three things need: the mobile menu, the dark-mode toggle and the cookie banner. No frameworks shipped to the browser, no “just in case” libraries.
CSS is inlined directly into the document, so the page never waits for separate stylesheets. That's one reason the first render fits within Core Web Vitals limits.
Hosting and domain #
The site's files live in Amazon S3 and traffic is served by CloudFront — AWS infrastructure, the same that runs services with millions of visitors. Your domain's DNS records are managed in Route 53.
The SSL certificate is issued by AWS Certificate Manager and renewed automatically. There is no expiry date to watch and no “SSL package” surcharge.
The first year of hosting is included in the plan price (from PLN 249). From year two, renewal costs from PLN 149/year: Start PLN 149, Business PLN 249 (with a fresh yearly blog pool and AI credits), Premium PLN 449 (additionally with the domain renewal included; the Google Ads starter campaign is one-time at purchase and is not repeated) — always covering hosting, the certificate, editor access and support. If you decide to leave, you download the complete source and move the site wherever you like — the domain and content are yours.
A sitemap is generated automatically on every publish and lives at https://www.your-domain.com/sitemap-index.xml (robots.txt links it too). You'll want it when adding the site to Google Search Console or handing it over to an SEO agency — new subpages and blog posts land in it on their own.
One thing stays on your side: paying for the domain itself, if you keep it at your own registrar. An expired domain means a site that vanishes from the web even though the hosting with us is running fine — so we watch the date for you: we check it daily in public registries and remind you by email 30 and 7 days before expiry. The renewal itself happens at your registrar — we can't do it on your behalf. This doesn't apply to a domain bought through our order form: you pay its renewal together with hosting, in the panel.
Editing content #
Changes happen in a panel: you click any text on a preview of your site and type. You also add and remove whole sections and individual elements right in the preview — a plus on a section boundary inserts a new block, a cross removes one you don't need.
The “Publish” button saves your changes and publishes the site in one go: the system rebuilds it and swaps the files on the CDN. It takes about 2 minutes — a rebuild plus a cache refresh.
- New subpages — added from a catalogue of ready-made types (services, about, pricing, portfolio or a plain text page); each lands in the menu automatically. A site holds up to 12 subpages.
- Your own hero photo — you can swap the illustration for a photograph; we optimize it automatically.
- Galleries — run several galleries with their own names, reorder photos, set captions and alt descriptions. Limit: 60 photos per site.
The editor guards the layout: you change the content, but you can't break the grid, ruin the colors or disable the mobile version. That's deliberate — a year from now the site should look as sharp as on day one.
The editor opens as early as the preview stage — you can polish the content before the site reaches your domain. Publishing is temporarily locked in just two situations: while the site is being launched on your domain, and after hosting has expired. Saved changes wait — you publish them once the lock lifts.
The site's footer carries a discreet “Built with Sitario.com” credit. If you'd rather have the site without it, switch it off in Settings — free of charge, no strings attached.
AI Assistant — changes on command #
Alongside manual editing, the editor has an “AI Assistant” tab. You type a request in plain language — “rebuild the services section into three packages”, “add an FAQ about directions”, “make the tone more direct” — and the AI applies the changes to a working copy of your site. You review the result in a preview and decide: Approve or Reject (rejecting restores the state from before the request). Changes reach the live site only when you click Publish — just like any other edit.
It differs from manual editing in scope: by hand you change texts and rearrange ready-made sections, while the Assistant restructures the page and writes the content at the same time. It guards two things as it works: your site's design system — no request can break the layout, the colors or the mobile version — and the content rules: it doesn't invent facts about your business.
Billing is simple: one request = one credit. Every site includes 3 free requests a month — they renew on the 1st of the month, and unused ones don't roll over. Need more? A pack of 10 requests costs PLN 29, and purchased credits never expire. The binding price is the one shown in the Panel.
- You see the credit counter before sending a request — no surprises.
- A failed request — a change that didn't pass technical verification — means the credit is refunded automatically.
- Rejecting a successful change doesn't refund the credit (the work was done) — but you can always undo the change itself, also later, via Version history.
- Every Assistant edit saves a version in Version history (Settings) — you can return to any state of your site.
Managing your domain's DNS #
Once your site is live, your domain's nameservers point at our infrastructure — and from then on you manage DNS records with us, in the editor panel („DNS” tab). You can add MX records (connect email, e.g. Google Workspace), TXT records (SPF, ownership verifications), subdomains (CNAME/A) and more — changes propagate within minutes.
Records that keep your site running (site and www addresses, the SSL certificate, zone delegation) are marked with a padlock and locked — you can't accidentally take your own site down. For email records, the panel warns you about the consequences of changes.
Your contact@yourdomain address — incoming email #
Every site hosted with us (without its own email on the domain) comes with a working email address on its own domain from day one, e.g. contact@yourdomain.com — the same address shown in the site's footer and contact section. Messages sent to it are automatically forwarded to your email address — the same one that receives lead notifications from the contact form. You can change it at any time in the editor panel.
The best part: there is nothing to configure. No connecting accounts to Outlook or Thunderbird, no IMAP/SMTP passwords, no separate webmail to log into — mail to your business address arrives where you already read email every day (Gmail, Outlook, whatever you use). You reply normally, with one click — the reply goes straight to the customer who wrote.
It also works as a catch-all: any address on your domain (office@, orders@, billing@…) lands in the same place. Messages flagged as spam or carrying viruses are rejected before they reach you.
One limitation of the current version: you reply from your regular mailbox, so the customer will see your private address in the reply, not contact@yourdomain. A full mailbox on your domain (sending as contact@, webmail, mail-client setup) is in the works as a separate service.
Already have email on your domain (with your current host or Google Workspace)? We don't touch it — you flag it in the order, your MX records stay intact and your mail keeps working as before.
Statistics — your site at work #
Analytics setup is included in the price of every site: we connect Google Analytics (we run the account; the site ships with full Consent Mode v2 and a cookie banner), register the site with Google's search service and submit the sitemap. You don't create any accounts or configure anything.
You see the results in the panel, in the Statistics tab — data from the last 28 days:
- visibility on Google: clicks, impressions and average position in search results,
- visits to the site,
- leads: submitted contact forms plus clicks on your phone number and email address (counted as conversion events),
- the phrases your site shows up for most often on Google.
The first data appears about 48 hours after your site goes live — that's how long Google's services need to start reporting.
We also measure your site's speed with Google PageSpeed Insights — automatically at launch and weekly after that, separately for mobile and desktop (0–100 scale). You'll find the score in the same Statistics tab, together with a “check it yourself” link that runs the same measurement in Google's public tool — so you can compare the score with your own eyes.
Alongside speed you get an SEO score (Google Lighthouse, 0–100 scale) and an AI-visibility checklist: we verify that your site has Schema.org structured data, meta descriptions and a sitemap, that AI search bots (ChatGPT, Perplexity, Gemini) are allowed in, and that the content is served as clean HTML — these are the things that make your site understandable to both search engines and AI assistants.
Have your own Google Analytics? Provide it in the order or in Settings — visit data then flows to your account, and the statistics in our panel are limited to search data. You can also switch analytics off entirely in Settings, at any time.
Google ads — a campaign run by AI #
Once your site is live, you can promote it on Google right away: the Ads tab in the panel lets you launch a Google Search campaign with no ad account, no configuration and no agency. You pick a goal (form enquiries, phone calls or site visits) and a monthly budget — and the budget slider instantly shows a forecast: how many clicks per month you can expect at typical rates in your industry. The forecast is based on real Google data (Keyword Planner), not our guesses.
Before you pay anything, you get a free working proposal: phrases from real Google data and an ad outline built from your website's details — you can regenerate and adjust it without limits. After your first top-up, AI takes over: it reads your website and automatically writes polished ad copy tailored to your business. Phrases are always hand-editable — remove them or add your own. The campaign is created in Google after the first top-up, always paused; it starts only when you consciously switch it on.
On the Premium plan the starter campaign is already paid for: PLN 250 of budget waits on your balance, allocated entirely to clicks (no 80/20 split), and AI writes polished ad copy right away. Starter funds are valid for 6 months from the plan purchase — any unused part expires after that.
- Transparent prepaid billing: you top up the budget with the equivalent of your monthly budget (PLN 300–5000, set with the slider), of which 80% goes entirely to clicks and 20% covers AI setup and management. The split is shown in black and white at checkout.
- Full cost control: the campaign can spend at most what's on your balance. When it runs low you get an e-mail in advance, and at zero the campaign pauses automatically — it cannot overspend.
- Results in the Statistics tab: ad views, clicks, enquiries from ads and cost per enquiry — the numbers that actually tell you whether the ads pay off.
- Optional auto top-up: when the balance drops below ~3 days of budget, we charge your saved card with one month of budget (max twice per 30 days, e-mail after every charge) — the campaign never dies overnight for lack of funds. Off by default; toggle it in the panel.
- Pause and resume with one button; change the budget at any time. You can also end the campaign for good — the unspent balance from your own payments stays (it funds a new campaign, or we refund it on request); Premium starter-campaign funds expire after 6 months and are non-refundable.
- A safety catch: if your website stops working (e.g. hosting expires), the campaign pauses automatically — ads never send traffic to an inactive site.
The campaign is not left to run itself. Once a week AI reviews what searches your ad actually showed up for and makes safe adjustments: it excludes phrases that burn budget on people looking for something else (e.g. “free”, “used”), pauses keywords with no results and adds phrases that bring enquiries. Every change appears in the panel under “What AI has improved” — in plain language, with the reasoning. AI never changes your budget and never switches the campaign on or off — that is always your decision.
How we count enquiries from ads — without cookies: when someone clicks your ad, Google appends a click identifier (gclid) to the page address. If that person submits the contact form, the identifier is stored with the enquiry — that's how we know it came from the ad. Nothing is stored in the visitor's browser (no cookies, no localStorage), so the mechanism requires no cookie-banner consent and collects no personal data — it only links the enquiry to the ad click.
Google reviews and a directions map #
If your business has a Google Business Profile, you can connect it to your site — right in the order form or later, in the editor's Settings tab. You search for the profile by name, just like on Google; no API keys and no Google account login required.
Once connected, the site gains a Reviews section: we show the profile's rating, the number of reviews and the five most recent reviews, fetched from Google's public interface (the Places API). Always the most recent ones — we don't cherry-pick the better ones and we don't edit anything. The section carries a permanent “Reviews from Google” label and a link to the full profile, so visitors can always check the source.
- Reviews refresh automatically once a week.
- The editor also has a “Refresh reviews” button — it works right away, at most once per hour.
- You can disconnect the profile at any time in Settings — the reviews section disappears from the site at the next publish.
You can also add a Google directions map — it appears next to the contact section, at the bottom of the page. The location comes from the connected profile or from an address you type in manually.
The map is click-to-load: until a visitor clicks “Show Google map”, the page makes no connection to Google's servers and passes them no data. So the mere presence of the map requires no cookie consent and doesn't slow the page down.
Blog add-on — a blog that writes itself #
On the Business and Premium plans a blog with a yearly character pool (60,000 / 160,000) is already included in the site price. Regardless of the plan, the blog add-on is a subscription (PLN 49/month) that extends your site with a blog and an article-writing system. Every month you get a 20,000-character pool to spend — enough for 4-5 typical articles, depending on the lengths you pick.
You commission a new article in the panel: give a topic, the key phrases you care about, and pick a length. The system researches the topic, writes an SEO-ready article and places a draft in your Blog tab — usually within minutes. You read it, edit whatever you like and publish with one click.
You can enable the add-on three ways: tick the blog option when ordering your site (payment is then card-only — it's a subscription), use the button on your site's status page, or the Blog tab in the editor. Not into subscriptions? There's also a one-off 20,000-character pack (PLN 69) — no recurring charges. Active subscribers top up extra characters at their subscription rate (PLN 49).
You edit posts in a formatting editor: headings, lists, tables, and photos dropped straight into the text. Every post has a featured image — generate one with AI (one generation per post), upload your own, or pick one from the image library, where images rotate between posts. You can permanently delete from the library only images no post is using.
- The character pool renews monthly; unused characters don't roll over to the next period.
- Nothing publishes without your say-so — drafts wait for your approval, unless you deliberately enable Autoblog with auto-publish (see the section below).
- Every article is built on live research: the system crafts search queries, searches the web, reads and selects sources, and only then writes — showing you each step while it works.
- Cancel the subscription with one click in the editor — it stays active until the end of the paid period, and published articles remain.
- Published articles are yours and stay on the site — even if you cancel the add-on.
Autoblog — publishing on a schedule #
Autoblog is a feature of the blog subscription (no extra charge): instead of remembering to commission articles, you set a publishing rhythm once and the system writes and publishes posts on its own. You enable it in the editor, in the Blog tab — the “Autoblog” card: pick a frequency (weekly, every two weeks or monthly), a day of the week and an article length. Articles draw from the same monthly character pool as the ones you commission by hand.
Topics live in a queue: you add your own, and on request the system proposes more (up to three batches of proposals a day) — you approve or reject each proposal with one click. By default, articles are written only on topics you have approved. There is also a full-autopilot mode: when approved topics run out, the system falls back to its own proposals — you enable it deliberately, with a separate switch.
Publication is your call too: with auto-publish on, a finished article goes straight onto your site, together with an automatically generated featured image; with it off, the article waits as a draft for your review. Published posts can be edited and deleted like any other.
- The schedule works only with an active blog subscription — a one-off pack doesn't renew the pool, so it can't sustain a rhythm.
- When the character pool runs out, scheduled articles are skipped and the schedule waits for the pool to renew — you'll get a single email about it; the panel also warns you upfront if the chosen rhythm doesn't fit your pool.
- You can switch the schedule off at any time with one toggle — the topic queue and published posts remain.
Deleting your site and leaving #
You delete the site yourself, no need to write to us: in the panel, on your order status page, you'll find a danger zone at the bottom. The operation is irreversible, so as a safeguard it requires typing out the domain name. Once confirmed:
- Hosting, the CDN and the SSL certificate are dismantled — the site disappears from the domain.
- Active subscriptions (e.g. the blog add-on) are cancelled immediately.
- The domain stays yours — it was registered in your name from the start.
- The DNS zone, including e-mail records, keeps working for 30 days — time to move DNS to your registrar.
- The site's source files (ZIP) remain available for download for 30 days.
If you plan to move the site elsewhere, download the source ZIP first — after 30 days there will be nowhere to get it from.
Security #
Most break-ins on business websites target the login panel, outdated plugins or the database. A Sitario site has none of those in production — the public part is read-only files.
- No backend and no database — nothing to take over, nowhere to inject malicious code.
- No login panel in production — editing happens in a separate system, away from the public site.
- DDoS attacks are absorbed by CloudFront — traffic spreads across hundreds of nodes before it reaches the origin.
- Site backups — every publish can be rolled back.
Performance #
Google grades pages with three Core Web Vitals metrics: LCP (how fast content appears), INP (how fast the page responds to touch) and CLS (whether content jumps around). A static architecture passes these by nature — there is no database and no heavy JavaScript to wait for.
- Fonts hosted with the site and subset to the characters in use — tens of KB instead of ~300 KB from Google Fonts.
- Images converted to WebP and scaled to their actual display size.
- CSS inlined into the document — zero render-blocking stylesheet requests.
- No JS frameworks in the browser — the phone has nothing to chew on.
The result: a PageSpeed Insights score of 90+ on mobile is our norm, not an achievement.
Your data and ownership #
The domain is registered in your name — including when you buy it through our order form. The content is yours, and you can download the complete source anytime and host it anywhere.
Contact-form data goes only to your email — we build no database out of it. Analytics, if you enable it, runs under Consent Mode v2: it collects data only after the visitor agrees, as GDPR requires. Visitors can also change their mind — a “Cookie settings” link in the site's footer reopens the banner, and withdrawing consent deletes the analytics cookies.
A privacy policy ships with every site and describes exactly this scope of processing — nothing beyond it.