This policy covers the yadobi.com website only. Each app has its own policies, published on that app’s own site.
1. Data controller
This site is operated by, and the personal-data controller is, yadobi (operated by an individual). For anything about personal data, write to privacy@yadobi.com.
2. What we collect
- When you use the contact form: your name (a nickname is fine), email, topic, the related app (if chosen) and your message.
- When you email us directly: your email address and what you send.
- Request logs at Cloudflare, our hosting provider: IP address, time and the page requested, kept briefly for security and troubleshooting.
- Cloudflare Web Analytics: aggregate visit counts, with no cookies and no cross-site tracking.
- Cloudflare Turnstile on the contact page: checks browser signals to tell people from bots.
We use no tracking or advertising cookies. The only thing this site keeps in your browser is a draft of your contact-form message while you send it (sessionStorage), so it isn’t lost if sending fails. The draft never reaches us, and it is deleted once the message is sent or the tab is closed.
3. Why we use it, and the legal basis
- To answer you: we use what you send to reply, based on the consent you give in the form and on acting on your request.
- To stop spam and keep the site secure: Turnstile, a send-rate limit and Cloudflare logs, based on our legitimate interest.
- To see roughly how many people visit: aggregate statistics that cannot identify you.
We never sell or rent your data, and never use it for marketing.
4. How long we keep it
Messages live only in our mailbox (there is no other database) and are deleted automatically 12 months after the conversation ends. Ask us and we will delete them sooner. Cloudflare keeps its logs for its own, much shorter, retention period.
5. Processors and transfers abroad
- Cloudflare, Inc. (United States and global network): hosting, email forwarding, Turnstile and visit statistics.
- Google LLC (Gmail): the mailbox that receives messages.
- An email-sending (SMTP) provider we use to reply as @yadobi.com.
These providers are outside Thailand. We only use providers with internationally recognised data-protection safeguards, and share only what the service needs.
6. Your rights
Under Thailand’s Personal Data Protection Act B.E. 2562 (2019) you can:
- access your data and get a copy
- have it corrected
- have it deleted
- object to, or ask us to restrict, its use
- receive it in a machine-readable format
- withdraw consent at any time, without affecting what was done before
Send requests to privacy@yadobi.com. We reply within 30 days. If you believe we have not followed the law, you can complain to the Office of the Personal Data Protection Committee (PDPC).
7. Changes
If we change this policy, we update the date above and summarise significant changes here.
- 14 November 2026: first version