Privacy PolicyLast Updated: September 28, 2026 · See the KVKK Privacy Notice for details

English translation. This English version is provided for convenience. The Turkish version is the legally binding text; if there is any discrepancy, the Turkish version prevails.

01 Data Controller

For personal data processed through hokas.net ("Platform", "HOKAS"), the data controller is OVVA İLERİ TEKNOLOJİ YAZILIM SANAYİ VE TİCARET LİMİTED ŞİRKETİ, which operates the Platform (the "Company").

Address: Panayır Mah. 505. Sk. Evke Flex Office Kat:5 No:53 Osmangazi / Bursa
Tax Office and No.: Osmangazi Vergi Dairesi - 6491342090
Contact: [email protected]

02 General Information

HOKAS is a platform that provides container/server hosting and file management services under free and paid plans. This Privacy Policy explains how the personal data of people who visit and use the Platform is processed. The detailed legal notice is the KVKK Privacy Notice; in case of conflict, the Privacy Notice prevails. By using the Platform you are deemed to have accepted this Policy and the Terms of Service.

On the free plan the user pays no fee; revenue from the ads watched to extend container running time (uptime) belongs to the Company. Paid plans are offered for a fee and do not require watching ads.

When an agreement such as the Terms of Service or this Policy is made or updated, an announcement is made on our Discord server (discord.gg/qu9DNHckFu).

03 Information We Collect

Identity/account data: username, email, profile information (through Clerk and, optionally, Google).
Security data: IP address, approximate location, browser/User-Agent, session and sign-in records, error and security logs.
Service/hosting data: your container and server records, domain/subdomain connections, resource usage and uptime information.
Order and payment data (paid plans): purchased plan, amount, currency, duration, order/payment status, transaction IP and time; information required for invoicing. Card number, expiry date and CVV are not stored by HOKAS.
Cookie/analytics data: anonymous usage statistics through Google Analytics, only with your consent.

Projects, code and files you upload to your container are hosted in order to provide the service technically; you are responsible for this content.

04 How Information Is Collected

Your data is collected automatically or by electronic means through account creation, sign-in (Clerk / sign-in with Google), panel and API requests, order and payment transactions, server and security logs, and cookies.

05 Purposes of Use

Your data is processed to create and verify your account, provide the service, carry out the sale, collection, invoicing and refund processes of paid plans, secure the platform and infrastructure, detect and prevent abuse, resolve technical problems, manage uptime/resource usage, improve the site (with your consent) and comply with legal obligations.

06 Legal Basis

Depending on the nature of the processing activity, your data is processed under Article 5 of the KVKK on the legal grounds of establishing or performing a contract, compliance with a legal obligation, establishment, exercise or protection of a right, the legitimate interests of the data controller and, where required, your explicit consent (e.g. analytics cookies).

07 IP Address and Logs

When you access the Platform, your IP address, approximate location, browser/operating system information and request times are recorded for security, detection of abuse, debugging and legal obligations. IP addresses are stored in encrypted form. Access and security logs are kept for 365 days and technical error logs for 30 days; they are deleted automatically at the end of that period.

08 Cookies

Strictly necessary cookies: used for session management, authentication and security; they do not require consent.
Analytics cookies (Google Analytics): enabled only with your consent in the cookie notice. If you do not consent, they are not loaded. You can change your preference at any time using the "Cookie Preferences" link at the bottom of the site.
Third-party cookies: providers we use to operate the service (e.g. Clerk, the ad/link service, the payment service provider) may set their own cookies.

You can block cookies in your browser settings; however, if strictly necessary cookies are blocked, some parts of the Platform may not work properly.

09 Payment Information

Paid plans are collected by credit/debit card through a payment service provider. Your card details are processed directly by the payment service provider and are not stored on HOKAS servers. The Company only keeps order, amount, status and transaction records. Order, payment and invoice records are retained for the statutory period under tax and commercial legislation (10 years). The payment service provider is subject to its own privacy policy.

10 Third-Party Services

Clerk: authentication, account and session management.
Google: authentication when signing in with Google; Google Analytics with your consent.
Payment service provider: collection of paid plans.
Cloudflare: DNS, security and traffic management.
CDN providers (jsDelivr, cdnjs, etc.): loading of some components of the site.
Hosting/server and network providers: the infrastructure that hosts your containers.
ShrinkMe and similar ad/link services: provision of the additional uptime flow.
Internal notification services (e.g. Telegram): delivery of technical and security alerts to administrators.

These providers are subject to their own privacy policies; processing carried out on the providers' own systems during the ad/link flow is outside HOKAS's control.

11 Disclosure to Third Parties

Your data is transferred only to the service providers listed in Section 10, to the extent necessary for the service to operate, and to authorized public authorities upon their lawful request. Your data is not sold and is not shared with third parties for marketing purposes.

12 Transfers Abroad

Some of the service providers we use and the servers (nodes) on which containers run may be located abroad. In that case, your data may be transferred abroad in accordance with Article 9 of the KVKK, with appropriate safeguards such as the standard contracts determined by the Board where required.

13 Retention Periods

Account and hosting data: until the account is deleted.
Access/session and security logs (including IP): 365 days.
Technical error logs: 30 days.
Containers that have expired or have no time limit defined and have been stopped for 3 days, and the data within them: deleted automatically.
Order, payment and invoice records: statutory retention period (10 years).

At the end of the period, or when the reason for processing ceases to exist, data is deleted, destroyed or anonymized.

14 Data Security

Your password is not stored by HOKAS; authentication is carried out entirely through Clerk. Sensitive service credentials and IP addresses are stored encrypted in the database; technical and administrative measures such as access control, authorization mechanisms and security logging are applied. No system connected to the internet can be guaranteed to be absolutely secure.

15 User Rights

Under Article 11 of the KVKK, you have the right to learn whether your data is processed, to request information about it, to learn the purpose of processing and whether it is used accordingly, to know the third parties to whom it is transferred in Türkiye or abroad, to request correction of incomplete or inaccurate data, to request deletion or destruction under the conditions set out in the law, to request that these actions be notified to third parties to whom the data has been transferred, to object to a result against you arising from analysis exclusively by automated systems, and to claim compensation for damages if you suffer loss. Applications are concluded within 30 days at the latest.

16 Data Deletion

When you close your account, your account record, containers, related files and domain/subdomain connections are permanently deleted; this cannot be undone. Your deletion request is concluded within 30 days at the latest. Records that must be retained by law (e.g. invoices, some logs) are kept separately for the statutory period.

17 Children's Privacy

The Platform is not directed at persons under 13 and does not knowingly collect data from them. You must be at least 18 to purchase a paid plan. If we become aware that data has been collected from a child under 13, that data will be deleted within a reasonable time.

18 Security Breaches

If a security breach affecting your personal data is detected, the Personal Data Protection Board and affected users will be notified without delay in accordance with the relevant provisions of the KVKK, and reasonable technical and administrative measures will be taken to reduce the impact.

19 External Links

The Platform may contain links to third-party sites or services such as Discord, Trustpilot and WhatsApp. HOKAS is not responsible for the privacy practices of these sites; we recommend reviewing their privacy policies before visiting.

20 Changes to this Policy

This Policy may be updated if there are changes to the services, the third-party providers used or legislation. The current version is always published on this page; when an updated agreement enters into force, an announcement is made on our Discord server (discord.gg/qu9DNHckFu).

21 Contact

For questions about this Policy or the processing of your personal data: [email protected]

General support, sales and refunds: [email protected] · Abuse reports: [email protected]

22 KVKK Privacy Notice

For the detailed Privacy Notice prepared under Article 10 of Law No. 6698: KVKK Privacy Notice. Users who accept this Privacy Policy are deemed to have read the Privacy Notice as well.

23 Effective Date

This Privacy Policy enters into force on the date of publication; the most recent version applies.

Effective / last updated: September 28, 2026