Privacy policy
What Sitific keeps about you, why, for how long, and what you can do about it.
Last updated 2026-10-16
Who is responsible
Sitific.
Contact: [email protected]
We are responsible for the information described here: about Sitific's account holders, and about visitors to Sitific's own pages (sitific.com and app.sitific.com). Each site built on Sitific is run by its owner, who decides what it collects and has its own privacy page; for those sites we act only on the owner's behalf, to host them.
What we keep, and why
- Your account: your name, email address, and the password you choose (stored only as a one-way hash). If you use a passkey, its public key; if you use an authenticator app, its secret, stored encrypted; recovery codes, stored as one-way hashes. We need these to give you an account and keep it yours.
- Your sign-ins: each signed-in browser's session (stored as a hash) with its browser name, so you can see and end your sessions. Failed sign-ins are counted against coded forms of the address and account they came from, to stop password guessing, and deleted after a day.
- Your sites: what you write and upload, your settings, and the members and invitations of each site — the service itself.
- Abuse reports: the page reported, the reason and what the reporter saw, and their email only if they chose to give it. A report that has been dealt with is deleted 180 days later. A site's owner is never told who reported it.
- Server logs: our web server records each request — the address it came from, the browser, the page and the time — to keep the service secure and working. The logs are rotated and kept for at most about 90 days.
We do not sell personal information, and we do not use it for advertising.
We send email only for your account and your sites: to confirm your address, to reset a password, to tell you of an invitation to a site, and to tell our operators about abuse reports and problems. We do not track whether you open these emails or which links you click.
Cookies
Sitific's home page, sitific.com, sets no cookies. The admin at app.sitific.com sets only the cookies it needs to work: one that keeps you signed in, one that holds a sign-in step in progress, and one that recognises a browser that has signed in before, so a stranger's guesses cannot lock you out. None is used for tracking or advertising, so none needs your consent.
Who else handles it
- Cloudflare carries every request to Sitific and its sites, protects them from attacks, and may count visits to Sitific's pages without cookies (Cloudflare Web Analytics).
- Resend sends our emails.
- Our server is a machine we rent, currently located in Malaysia, where the information above is stored. Backups are encrypted before they leave it.
Each of them handles the information only to provide its service to us.
Your rights
You may ask to see the information we hold about you, and to have it corrected or deleted. Write to us, and we will answer within a month.
How long we keep it
Your account and your sites stay until you delete them or ask us to close the account. When you ask, we delete its information within 30 days, except what the law requires us to keep and what is in backups, which are replaced in turn.
Changes
The date at the top says when this policy last changed. We will tell account holders by email of a change that matters to them.
Contact
Write to [email protected] about anything on this page.