What we collect
We only collect what you type into this site yourself, plus the technical minimum needed to keep the site running.
- Subscriber email when you subscribe to new posts or unlock gated content with your email
- Comments the name you choose, your message, and an optional email. The comment and name appear publicly; the email does not
- The quiz and AI box on the services pages your email, quiz score, and the idea text you send to the AI
- Questions asked in the "Ask this blog" box the question text is logged to see how well the system answers; it is not tied to your identity
- Private-area access requests name and email, only if you request access to locked content
- Per-IP usage counters daily counters that cap AI-box calls, block spam, and keep the bill sane. Counters, not browsing history
We store no passwords (membership works with signed links and cookies instead), no credit card data, and we run no cross-site behavioral tracking.
How we use it
- Sending you new posts or the content you asked for
- Showing your comment under the article and replying to it
- Having the AI turn your idea into a document outline (the text you type is sent to an AI model to generate the reply)
- Rate-limiting, spam protection, and keeping the system healthy
- Improving content, based on what people ask and where the system fails to answer
We do not sell your data and we do not pass it to anyone for marketing.
Legal basis
- Consent subscribing, unlocking with your email, and sending ideas to the AI all happen because you typed and pressed send. You can withdraw at any time
- Legitimate interest per-IP counters and technical logs, used only as far as needed to stop abuse and keep the site up
Third-party services
The site runs on these providers, so data passes through their systems in these roles:
| Service | Role | Data involved |
|---|---|---|
| Cloudflare | Site network, data storage, and the AI models (Workers AI) | Everything listed above, including text processed by the AI |
| Vercel | Origin hosting for the pages | Standard technical access logs |
| Google Fonts | Serving the display fonts | Your browser fetches font files directly from Google (Google sees your IP, as with any file load) |
| Google Sign-in | Admin login only | Not used for regular readers |
We install no third-party analytics or advertising tools (no Google Analytics, no Facebook Pixel).
Cookies and cookie settings
This site uses essential cookies only, each powering a feature you chose to use. There are no analytics or advertising cookies at all.
| Cookie | Purpose | Lifetime |
|---|---|---|
blog_unlock | Remembers that you unlocked gated blog content with your email | 30 days |
prd_unlock | Remembers that you finished the quiz on the services page, so the AI box stays open | 30 days |
productize_auth | Login for the private area (invited users only) | 7 days |
All of them are server-signed and unreadable by JavaScript. Your browser also keeps two non-cookie values locally: the light/dark theme and your cookie-notice acknowledgement. Neither is sent to the server.
Open the cookie manager with this button, or the "Cookie settings" link in the footer of every page.
International transfers
Cloudflare, Vercel, and Google run servers in many countries, so your data is stored and processed outside Thailand as part of how these providers work. Each maintains its own internationally recognized data-protection measures.
Data retention
- Subscriber emails kept until you unsubscribe or ask us to delete them
- Comments shown until the author asks for removal, or we remove them as spam
- AI inputs and questions kept as a limited rolling log for quality improvement, then rotated out
- Per-IP counters daily counters; when the day ends, so does their job
Your rights under PDPA
Under Thailand's Personal Data Protection Act (PDPA) you can:
- Request access to and a copy of the data we hold about you
- Request corrections
- Request deletion, such as unsubscribing, removing a comment, or wiping your email from the system
- Withdraw consent you gave earlier, at any time
- Object to or suspend the use of your data
- File a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe we handled your data improperly
To exercise any of these, contact us via the channels at the end of this page. We respond within 30 days.
Security
Every page is served over HTTPS, every cookie is digitally signed against forgery, each data type is stored in its own separate space, and rate limits protect the system from abuse. Backend data is accessible to the site owner only.
Changes to this policy
If our practices change, we update this page and the date at the top. For changes that materially affect your rights, we notify subscribers by email.
Contact
Questions about this policy, or exercising your PDPA rights:
- Email: tiramitsu.88@gmail.com
- LinkedIn: Sutthinee Theppariyapol