Privacy Policy

Last updated: October 6, 2026

Thikana ("we", "our") provides free web hosting at pagecraft.website. This policy explains what information we collect, how we use it, and the rights you have over your data. By using Thikana, you agree to this policy.

1. Information we collect

We collect only what is needed to run the hosting service:

• Account information — your email address and a securely hashed password when you register. We never store passwords in readable form.
• Content you host — the files, websites and MySQL databases you upload or create through the control panel. This is your data; we store it so we can serve it.
• Server logs — IP addresses, timestamps, requested URLs and error records, collected automatically for security monitoring, abuse prevention and debugging. Logs are rotated and not kept indefinitely.
• Support messages — anything you send us when asking for help, so we can respond.

We do not ask for your name, address, phone number, payment details or any other personal information. There is no credit card required, ever.

2. How we use information

• To create and operate your hosting account, subdomains and databases.
• To send transactional email you asked for: verification codes, password resets, deployment and security notifications.
• To keep the platform secure: detecting abuse, spam, malware and attacks against the service.
• To provide support when you contact us.

We do not use your data for advertising, profiling or any purpose unrelated to operating the hosting service.

3. Cookies

Thikana uses a minimal set of cookies, strictly for the service to function:

• Session/authentication cookies — keep you logged in to the dashboard and control panel.
• Security cookies — protect against cross-site request forgery on forms.

We do not use advertising cookies, tracking pixels or third-party analytics that follow you across the web. Disabling cookies will prevent login, but the public website remains browsable.

4. Sharing and third parties

We do not sell, rent or share your personal information with third parties for their own purposes. The only parties that touch your data are:

• Our infrastructure provider — the servers Thikana runs on are provided by our hosting partner, which processes data solely to operate the underlying hardware and network. They do not have independent rights to your data.
• Legal obligations — we may disclose information if required by law or to protect the security of the service and its users.

5. Data security

• All traffic is encrypted with HTTPS; plain HTTP is redirected automatically.
• Passwords are hashed with scrypt and a unique salt per account — we cannot read them.
• Accounts are separated by access controls; backend hosting runs on shared infrastructure during the beta period. Do not store high-value secrets in backend environment variables.
• Administrative access to servers is restricted and logged.

No system is perfectly secure, but we apply the same protections we would demand for our own infrastructure.

6. Data retention

Account data is kept while your account is active. Server logs are rotated regularly and kept only as long as needed for security and operations. If you delete your account, your files, databases and account record are removed; residual copies may persist in short-term backups until they rotate out.

7. Your rights

You can:

• Access your data at any time through the dashboard and file manager.
• Correct your account email from account settings.
• Delete your files, databases and account. For full account deletion or a copy of your data, contact support and we will action it.

8. Children's privacy

Thikana is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will remove it.

9. Changes to this policy

We may update this policy as the service evolves. Material changes will be noted here with a new "Last updated" date. Continued use of Thikana after changes means you accept the updated policy.

10. Contact

Questions about privacy or your data: open a support request from your dashboard support page, or write to us via the contact options on the website. We respond to privacy requests as quickly as we can.