What we collect, and who can see it.

This site is run by the THEYTHAKA'26 organising committee. For anything about your information — a correction, a copy, or a deletion — write to admin@theythaka.com.

Your account

Your name and email address. If you set a password we store only an argon2id hash of it — the password itself is never written down, and cannot be recovered from what we hold.

If you use Google

We ask Google only for your name, email address and profile picture, and only to create your account. We request no other permission, and we never read your Gmail, Drive, contacts or calendar.

Your registration

Full name, email, phone number, course, year, enrolment number, whether you are a new or returning student, and — if you register as a committee member — which committee. Your class representative’s name is recorded alongside it.

Your payment

The screenshot you upload, the amount, and the UPI reference if you give one. We never see your bank credentials, card details or UPI PIN, because the payment happens in your own app and not here.

Your entry pass

A pass number, a signed QR code and the PDF we email you.

At the gate

Each scan is recorded with the outcome and a copy of your name and course as they were at that moment. The copy is deliberate: it keeps the record of who was admitted honest even if details are edited afterwards.

Technical records

Server logs carry a request identifier and the ids of the records involved, never your name, email or phone number. IP addresses are used to limit repeated attempts and are stored only as a SHA-256 hash, never in readable form.

To check that your payment is genuine, to issue your entry pass and email it to you, to admit you at the gate, and to let the organisers see how many places are left. We do not use any of it for advertising, we do not profile you, and we do not sell or rent it to anyone.

Volunteers

Your name, email, phone, course, year, registration number and payment screenshot — enough to verify your payment. Volunteers are deliberately not shown the amount paid or any financial figure; the system withholds those rather than relying on them not to look.

Organisers

Everything above, plus amounts and the record of who approved or rejected what.

Nobody else

Your payment screenshot is never a public link. It is stored privately and served only through a request that checks who is asking, every time — so a link cannot be forwarded to someone without permission, and a volunteer who is stood down loses access immediately.

Checking your status with a registration number shows only whether it is pending, approved or rejected. It deliberately reveals no name, email, phone number or amount, because a registration number is short enough to guess.

The site runs on Vercel, the database is Neon, uploaded screenshots are held in Vercel Blob, and email is sent through Hostinger. Vercel, Neon and Vercel Blob store this data on servers in the United States, so your information leaves India. Connections to the database and to the site are encrypted.

Registration and payment records are kept for twelve months after the event, so that the fest’s accounts and attendance can be checked afterwards. Gate scan records are kept for the same period. You can ask us to delete your account sooner, though we may need to keep a record of a payment we have already accepted.

Write to admin@theythaka.com to see what we hold about you, to have something corrected, or to have it deleted. If you signed in with Google you can also remove this site’s access from your Google account settings at any time; that stops future sign-ins but does not by itself delete a registration you have already made.

If this policy changes we will update this page and the date at the top. Material changes affecting registrations already made will be emailed to the address on the registration.

Terms of service