Privacy policy

Updated 2 October 2026

Thana is a marketplace for vehicles, property, land and jobs in Albania. This page explains what data we collect, why, how long we keep it and how you can delete it.

What we collect

Your account. Your email address (for the sign-in code), your name, and your phone number if you add one. If you sign in with Apple or Google, we receive only your name and email address (or Apple's hidden relay address) from them; we never see your password. If you choose to verify your phone number, we send it a one-time code by SMS. For businesses: the description, address and opening hours you enter.

Listings. What you publish: the text, price, city, sector details and photos. We remove all metadata from photos, including GPS location, before storing them.

Messages you exchange with buyers or sellers in the app.

Saved items. Listings you save, searches you save and sellers you follow.

Blocking and reports. The people you block and the reports you send us. The person you block or report is not told who did it.

Statistics for sellers. We count each listing's views per day, and taps on the Call, WhatsApp and Message buttons. The seller sees the numbers and, for messages, your shortened name; they never see your email.

Push notifications. If you allow them, we store your phone's push token so we can tell you about messages, new matches for your saved searches and price drops.

Technical data. The server logs IP addresses and request times for security and to stop abuse. These logs are deleted regularly.

The website. thana.al shows the same public listings as the app. It sets no cookies and has no analytics.

We don't show ads, we don't sell data and we don't use third-party trackers.

Who sees it

Your name, phone (if you added it), listings and business profile are public, because buyers need to contact you. Your email is never shown to other users. Messages are seen only by the two people in the conversation. Thana moderators can see listings and accounts when reviewing a report.

Services we use

Data is stored on our own server at Liquid Web. Sign-in code emails are sent through Brevo, an email delivery service. Phone verification codes are sent by SMS through Twilio, which receives only your phone number and the code. Push notifications go through Expo's push service (and Apple or Google for delivery to your phone); they contain only the notification's title and short text.

How long we keep it

For as long as you have an account. When you delete a listing, it disappears from Thana. When you delete your account, we delete the account, listings, photos, messages, saved searches and push tokens. Database backups are kept for up to 14 days and then overwritten.

Your rights

You can see and change your data in Profile, and you can delete your account at any time in the app (Profile → Delete account) or by writing to us. You can ask for a copy of your data or for it to be corrected. If you think we are not handling it properly, you can contact Albania's Information and Data Protection Commissioner (IDP).

Children

Thana is for people aged 18 and over.

Contact

For any privacy question: info@thana.al.