Privacy notice

What this notice covers

This notice explains how เมกวิน เมธีวรรณกุล ("Antverse", "we") collects, uses and discloses personal data of people who use antverse.co. It is written to meet Thailand's Personal Data Protection Act B.E. 2562 (PDPA), under which we are the data controller.

What we collect

• Account data — email, display name, handle, avatar and the topics you follow. If you sign up with Google we receive your email, name and avatar from that account.
• Shopee username — only if you enter it. It exists to match future orders to your account and is optional.
• Reading and quiz activity — which articles you opened, how long and how far you read, quiz scores and whether you passed.
• Coin and XP entries — every award or spend is written as a permanent, unalterable entry with the balance at that moment.
• General usage data — pages viewed, in-site events, and an anonymous identifier for visitors who are not signed in.
• Audit records — significant actions such as publishing, moderation decisions and account erasure, together with the originating IP address.
• Author data — if you apply to write for us, your application, portfolio links and submitted drafts.

Why we collect it, and on what legal basis

• To provide the service you signed up for — accounts, reading progress, coin awards and payouts. Basis: performance of a contract.
• To prevent coin farming and fraud — detecting abnormal quiz repetition, fake accounts and implausible coin growth. Basis: legitimate interest in keeping the reward system fair.
• To improve the content — seeing which articles are actually finished so we know what to write next. Basis: legitimate interest.
• To send necessary email — sign-in links, moderation outcomes and payout decisions. Basis: performance of a contract.
• To send the newsletter — only if you subscribe. Basis: consent, which you may withdraw at any time.

Who we share it with, and where it goes

We do not sell personal data and we do not share it for advertising. These providers process data on our behalf:

• Supabase — database and authentication, stored in Singapore.
• Google Cloud — the servers this site runs on, located in Singapore, and Google Sign-In.
• Resend — email delivery, processed in Japan.

Using them means your data is transferred to and stored outside Thailand. We choose providers with recognised international data protection standards, bound by contract to process data only on our instructions.

We may also disclose data where the law requires it, or where it is necessary to protect our rights or the safety of other users.

How long we keep it

• Account data — for as long as the account exists, and removed when you ask us to erase it.
• Usage and event data — no longer than 24 months, then deleted or anonymised.
• Coin entries and audit records — kept after erasure in a form that does not identify you. See the next section.

What happens when you delete your account

We delete what identifies you. We do not delete the coin entries. This is a deliberate design limit and we would rather you knew it before signing up.

When you ask us to erase your account we remove your display name, handle, avatar, Shopee username and anything received from your Google account, and we replace your email address with a reference that cannot be delivered to and does not point back at you. The account can no longer be signed into.

What remains is the history of coins and XP that were awarded, along with the related audit records. Those entries are the ledger the whole reward system balances against; deleting them would leave the system unable to reconcile and would undermine other members' ability to have their own history verified. What remains carries no name, no email and nothing else that identifies you — only an internal reference number.

Cookies

We use two kinds of cookie and no others: one that keeps you signed in, and an anonymous identifier used to count readership. We do not use advertising cookies and there are no third-party tracking scripts on this site. Clearing cookies signs you out but does not affect the data in your account.

Your rights, and how to use them

Under the PDPA you may request access to and a copy of your data, correction of inaccurate data, erasure, restriction of processing, objection to processing, portability, and withdrawal of any consent you have given.

The fastest route is to do it yourself: the account page shows everything we hold about you, lets you correct it in place, and includes an account deletion that behaves exactly as described above. For other requests, or for a copy of your data as a file, contact us using the details at the end of this notice. We will respond within 30 days.

If you believe we are processing your data unlawfully, you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

Minors

If you are under 20, signing up and giving consent requires the approval of a parent or guardian. If we learn that we hold a minor's data without that approval we will delete it promptly. Cashing coins out is available only to members who have reached the age of majority.

Security

All data is encrypted in transit, and access is enforced at the database layer per account: your session can read your rows and no one else's. There are no passwords in the system — sign-in is by email link or Google account only.

Changes to this notice

When the substance of this notice changes we change the version number shown above and ask for your agreement again the next time you visit. Consent given to an earlier version is never counted towards a new one.

Contact us

เมกวิน เมธีวรรณกุล
88/728 Life Pinklao ซ.จรัญสนิทวงศ์ แขวงบางยี่ขัน เขตบางพลัด กรุงเทพมหานคร 10700
Phone 097-159-9514
Email antverse.dev@gmail.com