Privacy notice

Last updated 7 November 2026

This explains what personal data myTonyon.space keeps, why, and what you can ask us to do about it. It is written with Thailand's Personal Data Protection Act (PDPA) in mind.

Who we are

The data controller is Pattana Somroob. To reach us: pattana.ps@gmail.com.

What we keep, and why

• Your account: your username, display name, avatar color, the look you chose for your character (hair, clothes and the like) and a password hash (a scrambled form, never the password itself). We need these so you can sign in and be recognised in a cafe. An event account has no email address.
• Your cafes: which cafes you belong to and which seat is yours.
• Your last visit: When you were last in a cafe. Its members see your name with the time; visitors see only the time. It goes when you leave the cafe or your account is deleted.
• Chat messages and emotes: kept so members can catch up, and deleted automatically when they expire. That is 7 days by default, and a host can choose from 1 to 90 days for their cafe.
• Wishes: the wish text, the name you gave, the style, the time, and a hash of a random token from your browser. A private wish keeps its text off our servers, but the name you give is stored and shown with it. Wishes are kept until 31/12/2026 and then deleted. If you delete your account, your wishes are deleted too.
• Reports: when someone reports a wish we keep the reason, the time and a hash that stops the same person reporting it twice. We do not keep their address. Reports, and the bans an administrator sets against abusive launchers (a hash, never an address), are deleted with the wishes on 31/12/2026.
• Knocks (asking to join a cafe): the name and note you write, the time, and a keyed hash of your IP address, which is only used to limit repeat knocks. A knock waits up to 7 days for an answer, and all knock records are deleted after 30 days.
• Invite and password-reset links: only a hash of each link is stored, never the link itself.

What we don't keep

• No tracking, no analytics and no advertising.
• The picture you can share after floating a krathong is made in your browser. It isn't sent to us.
• No access logs. We keep error logs only, and they are rotated.
• Failed sign-ins: when a password is wrong, or there are too many tries, the error log notes the time, the username if it belongs to an account (anything else only as a keyed hash) and a keyed hash of your IP address (never the address itself), so we can spot someone guessing passwords. These lines are rotated with the error logs.
• IP addresses used for rate limits and connection limits live in memory only and are gone when the server restarts. We do not store the IP address of anyone who floats a wish.

Cookies and browser storage

We set a session cookie so you stay signed in. If you choose to be remembered, a "remember me" cookie lasts 30 days. The session cookie also holds a token that protects forms from forgery. If you knock on a cafe, a knock cookie lasts 7 days so we can show you the answer.

In the event places a visitor cookie lasts 365 days. It holds a random token (we store only its hash) that keeps the limit on wishes and lets you report a wish only once. A language cookie remembers whether you chose Thai or English.

Your browser's local storage keeps your own preferences: chat mode, 3D view, graphics, pixel art, shortcuts, volume, weather sounds and weather effects. All of this is needed for the site to work, so there is no cookie banner. Sound stays off until you turn it on.

Who else handles your data

• Alibaba Cloud hosts the server in Bangkok, Thailand, and keeps the nightly backups there too, for 30 days, so your data is stored in Thailand. Alibaba Cloud acts as our processor.
• jsDelivr a public content delivery network, serves the 3D and chat scripts. When they load, jsDelivr sees your IP address and browser details. It is not told which page you are on.

Who in a cafe sees what

• Members see the recent history of their cafe.
• Watchers (anyone, signed in or not) see live messages with the speaker's name, but no history.
• Hosts see knocks, with the name and note. They never see IP addresses.

Your rights

Under the PDPA you can ask to see your data, correct it, delete it, move it, object to how we use it, or withdraw consent. You can also complain to Thailand's Personal Data Protection Committee (PDPC). Write to us at pattana.ps@gmail.com and we will answer within 30 days. Deleting your account removes the account, your cafe memberships and all the messages you wrote.

Changes

If this notice changes, the "last updated" date at the top changes too. See also the terms of use. Terms