What we collect
We collect what you type into this site yourself, the technical minimum needed to keep the site running, and visit statistics -- one of which, since 15 Aug 2026, does use a cookie (see the cookies section).
- Subscriber email when you subscribe to new posts or unlock gated content with your email
- Comments the name you choose, your message, and an optional email. The comment and name appear publicly; the email does not
- The quiz and AI box on the services pages your email, quiz score, and the idea text you send to the AI
- Questions asked in the "Ask this blog" box the question text is logged to see how well the system answers; it is not tied to your identity
- Private-area access requests name and email, only if you request access to locked content
- Per-IP usage counters daily counters that cap AI-box calls, block spam, and keep the bill sane. Counters, not browsing history
- Page interaction replays scrolling and clicking, replayed to find where a page gets awkward. What you type into a field is masked in your browser and never sent. Kept 30 days, then deleted
We store no passwords (membership works with signed links and cookies instead), no credit card data, and we run no cross-site behavioral tracking (PostHog runs on productize.life and its own subdomain only, never across other companies' sites).
How we use it
- Sending you new posts or the content you asked for
- Showing your comment under the article and replying to it
- Having the AI turn your idea into a document outline (the text you type is sent to an AI model to generate the reply)
- Rate-limiting, spam protection, and keeping the system healthy
- Improving content, based on what people ask and where the system fails to answer
We do not sell your data and we do not pass it to anyone for marketing.
Legal basis
- Consent subscribing, unlocking with your email, and sending ideas to the AI all happen because you typed and pressed send. You can withdraw at any time
- Legitimate interest per-IP counters and technical logs, used only as far as needed to stop abuse and keep the site up. This also covers visit statistics and page-to-page journeys, which we use to decide what to write and which pages to fix, not for advertising or individual profiling. You can object under the rights section below
Third-party services
The site runs on these providers, so data passes through their systems in these roles:
| Service | Role | Data involved |
|---|---|---|
| Cloudflare | Site network, data storage, and the AI models (Workers AI) | Everything listed above, including text processed by the AI |
| Vercel | Origin hosting for the pages | Standard technical access logs |
| Kobbe | Page view statistics | Which page, when, and coarse browser information. No cookies, not tied to a person |
| PostHog (EU region) | Counts visitors, the paths they take between pages, clicks, and keeps a replay of how a page was used | Which page, when, browser information, IP address, and a random id kept in a cookie so repeat visits are recognised as the same visit. Shared with deban.productize.life, a subdomain of ours. Replays are kept 30 days and then deleted, with field contents masked in the browser before anything is sent |
| Ahrefs Web Analytics | A third view of the same traffic, paired with the backlink tool | Which page, when, and coarse browser information. No cookies |
| Cloudflare Web Analytics | A second view of the same traffic, measured at the network | Same as above, no cookies |
| findmaker.ai | The verification badge in the footer | Your browser fetches the image directly from findmaker (they see your IP, as with any file load) |
| Google Fonts | Serving the display fonts | Your browser fetches font files directly from Google (Google sees your IP, as with any file load) |
| Google Sign-in | Admin login only | Not used for regular readers |
We install no advertising or retargeting tools at all (no Google Analytics, no Facebook Pixel), and we neither sell nor trade data with ad networks. PostHog, added 15 Aug 2026, is our own product-analytics tool; the data sits in our account on EU servers.
Cookies and cookie settings
This site uses essential cookies, each powering a feature you chose to use, plus one analytics cookie since 15 Aug 2026. There are no advertising cookies.
| Cookie | Purpose | Lifetime |
|---|---|---|
blog_unlock | Remembers that you unlocked gated blog content with your email | 30 days |
prd_unlock | Remembers that you finished the quiz on the services page, so the AI box stays open | 30 days |
productize_auth | Login for the private area (invited users only) | 7 days |
ph_*_posthog | Analytics cookie. Holds a random id so repeat visits are recognised as the same visit. Shared with the deban.productize.life subdomain | PostHog default |
The first three are server-signed and unreadable by JavaScript. The PostHog cookie is set from the browser and is readable by JavaScript, by its design. Your browser also keeps two non-cookie values locally: the light/dark theme and your cookie-notice acknowledgement. Neither is sent to the server.
Open the cookie manager with this button, or the "Cookie settings" link in the footer of every page.
International transfers
Cloudflare, Vercel, and Google run servers in many countries, so your data is stored and processed outside Thailand as part of how these providers work. PostHog statistics are held on servers in the European Union. Each maintains its own internationally recognized data-protection measures.
Data retention
- Subscriber emails kept until you unsubscribe or ask us to delete them
- Comments shown until the author asks for removal, or we remove them as spam
- AI inputs and questions kept as a limited rolling log for quality improvement, then rotated out
- Per-IP counters daily counters; when the day ends, so does their job
Your rights under PDPA
Under Thailand's Personal Data Protection Act (PDPA) you can:
- Request access to and a copy of the data we hold about you
- Request corrections
- Request deletion, such as unsubscribing, removing a comment, or wiping your email from the system
- Withdraw consent you gave earlier, at any time
- Object to or suspend the use of your data
- File a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe we handled your data improperly
To exercise any of these, contact us via the channels at the end of this page. We respond within 30 days.
Security
Every page is served over HTTPS, every cookie is digitally signed against forgery, each data type is stored in its own separate space, and rate limits protect the system from abuse. Backend data is accessible to the site owner only.
Changes to this policy
If our practices change, we update this page and the date at the top. For changes that materially affect your rights, we notify subscribers by email.
Contact
Questions about this policy, or exercising your PDPA rights:
- Email: sutthineeth@productize.life
- LinkedIn: Sutthinee Theppariyapol