Your data in this machine

You can read the free chapters without signing in, and no personal data is stored on our server. When you sign in or buy, we keep:

• From Google: your Google account ID, verified email address, name and profile picture link (we ask only for openid, email and profile, and never receive your password).
• Sessions: a hash of your sign-in token, and when it was created, expires and was last used (the token itself exists only in your cookie).
• Progress: which learning-path steps you have completed in each chapter. What you type in the explain-it-yourself boxes is not sent anywhere.
• Purchases: the amount and currency, the status (pending, paid, refunded, canceled, expired), Stripe reference IDs and times, plus the IDs and results of Stripe’s payment notifications.
• Reading access: how and when it was granted and, if it was revoked, why.
• Emails we send you: when, and with what result (sent, failed or not sent), we sent the welcome email for each order, or the thank-you email. The content of the emails is not stored in our database. See section 4.
• Ad measurement: only if you accept — see section 3.

We never see or store your card number or bank details. Payment happens on Stripe’s page.

• __Host-tim_session — the sign-in cookie, valid for 30 days (HttpOnly, Secure), deleted when you sign out.
• __Host-tim_oauth — used while you sign in with Google, for at most 10 minutes.
• localStorage entries starting with tim:, such as how far you have read. They stay on this device only and can be cleared from the Machine Lens on the site.
• tim_consent — remembers whether you accepted or declined ad-measurement cookies, for 180 days.
• _fbp and _fbc — Meta Pixel cookies, present only if you accept (see section 3) and deleted if you switch to decline.
• Your country: our hosting provider tells our server which country your connection comes from (worked out from your IP address). We use it only to show and charge the right price for your country, and to tell you if the set is not on sale there yet. We do not store it.

There are no other visitor analytics tools. The only third-party script is the Meta Pixel, and it loads only after you press accept.

We advertise on Facebook and Instagram and use Meta’s Pixel and Conversions API to measure whether ads actually lead to purchases. All of this runs only with your consent. If you have not chosen yet, or you declined, Meta’s script is not loaded and nothing about you is sent to Meta.

• From your browser (Meta Pixel): page views, viewing a book’s details or the price page, starting checkout, and a purchase confirmed by Stripe, together with the price you were shown (399 baht or US$14). Meta receives your browser’s usual technical data, such as your IP address and Meta’s cookies, as with any Pixel.
• From our server (Conversions API): when an order you accepted for at checkout is confirmed by Stripe, we send that purchase to Meta once: the amount and currency, the order ID, your email and account ID converted to a hash (SHA-256), your IP address, browser details and the _fbp/_fbc cookies.
• We do not send Meta your name, card number, bank details, what you read, or your reading progress.
• The matching data (IP address, browser details and Meta’s cookies) is kept with the order until the purchase has been sent to Meta, or the order ends unpaid, or is refunded — and for no more than 8 days — and then deleted. Data Meta has already received is governed by Meta’s data policy and may be processed outside Thailand.
• You can change your mind at any time under “Cookie settings” at the bottom of every page. If you switch to decline, the Pixel stops and Meta’s cookies in this browser are deleted, but data sent earlier is not recalled. If you would like us to do more, contact tondigitalonline@gmail.com

To sign you in, check your access before sending a full chapter, take payment and grant or revoke access, keep your progress in sync across devices, send emails about your purchase, answer your requests, and keep the service secure. We do not sell data, and we use data for ad measurement only as described in section 3, when you accept.

Emails we send you are only about your purchase (transactional email). They are part of the service you bought, not advertising:

• A welcome email, at most one per order, only for orders paid after we started sending welcome emails. It is sent only after Stripe has confirmed your payment and your reading access is active, and not if the order was refunded first. It confirms the payment went through, tells you how to get to the website, and how to add it to your phone’s home screen. If the email cannot be delivered, your reading access works as normal.
• A thank-you email: people who bought before we started sending welcome emails do not receive the automatic welcome email, but may receive one thank-you email from us.

They go to the verified email address of the Google account you bought with. We do not send newsletters or marketing email. If we reply to an email you sent us, we reply from the contact address above. Receipts, if any, are sent by Stripe.

• Google — sign-in, and sending the emails in section 4: our system sends your email address and the order ID or account ID to Google Apps Script, which sends the email from our Gmail account using Google’s MailApp service. Apps Script keeps only the order or account IDs already emailed, so nothing is sent twice, and a copy of each email we send you stays in our Gmail Sent folder.
• Stripe — payments. We send your account email, an internal account ID and the order ID to create the checkout page.
• Meta — ad measurement, only if you accept, as in section 3.
• Cloudflare — hosts the website, server and database, and processes connection data such as IP addresses (including the country used for pricing) and system error logs.

These providers may process data outside Thailand under their own policies. We do not disclose data to anyone else unless the law requires it.

• Account data, progress and reading access are kept while your account exists. Sessions expire after 30 days or when you sign out.
• Copies of the emails we sent you, in our Gmail Sent folder, and any bounce notices, are kept while your account exists, to answer questions about your purchase and access.
• You can ask us to delete your account by email (send it from the address you sign in with). If you never bought anything, we delete the whole account.
• If you did buy, we delete your email, name, picture, Google link, sessions and progress, and revoke your reading access. The order record (amount, status, times and Stripe reference IDs) and the email delivery log stay linked to your account ID and order ID, which could be traced back to you through the payment data Stripe holds, so we still treat them as personal data. They are kept only as long as needed as proof of income for tax and legal audits, and then deleted. The IDs Apps Script keeps so nothing is sent twice (they contain no email address or name) stay for the same reason.
• Copies of the emails we sent you, and any bounce notices, we delete by hand as part of deleting your account: we find the emails sent to your address in our Gmail, delete them, and then delete them permanently from the trash (if not, Gmail empties the trash on its own within 30 days). After that, Google may take some time to remove them from its backup systems.

Under Thailand’s Personal Data Protection Act B.E. 2562 (2019), you can ask to access, get a copy of, correct, delete, restrict, object to the processing of, or move your data by writing to tondigitalonline@gmail.com. We will act within the time the law requires and may ask you to confirm that you own the account. You may also complain to Thailand’s Personal Data Protection Committee.

If this policy changes, we will update the effective date at the top and announce it on the website if the change matters for your data.