Song Kram Jek ("we") provides a guild war management service through this website. This policy explains what data we collect, why, who we share it with, and your rights under Thailand's Personal Data Protection Act B.E. 2562 (2019).
We only collect what we need to run the service, and we never sell your data.
1. Data we collect
- Account details from Discord or Google when you log in: display name, email, profile picture and the provider's user ID.
- Guild data you or your officers enter: guild name, in-game character names, classes, party lineups, war stats, leave requests and notes.
- War result screenshots you upload for AI reading.
- Payment records such as plan, amount, date and status. We never store card numbers or bank details; Stripe handles those.
- Necessary technical data such as cookies for login, language and theme, and system logs for security.
2. Purposes and legal bases
- Providing the service under our contract with you: accounts, guilds, party planning, recording and displaying stats.
- Processing payments and issuing payment receipts.
- Keeping the service secure, preventing abuse and fixing technical issues (legitimate interest).
- Contacting you about your account, payments or important service changes.
- Meeting legal obligations such as accounting and tax records.
3. Service providers (data processors)
We share data with these providers only as needed to run the service. Some may store data outside Thailand under appropriate safeguards.
- Supabase: database, authentication and file storage.
- Vercel: website hosting.
- Stripe: card and PromptPay payment processing.
- Google (Gemini API): reading numbers from screenshots you upload.
- Discord and Google: login, and the Discord integration if you enable it.
4. Sharing within your guild
Guild data is visible only to members of that guild, according to the permissions the guild leader sets. Other guilds cannot access it.
If a guild leader enables a public link, such as a leave link or stats form, anyone with the link can see the player names needed to use it.
5. How long we keep data
- Account and guild data: for as long as the account or guild is active.
- Players moved to the trash: permanently deleted after 14 days.
- Screenshots for AI reading: used to read results and not kept on our systems.
- When you delete your account or guild: data is removed within 30 days, except records the law requires us to keep, such as payment records.
6. Your rights
Under the PDPA you can exercise the following rights by emailing us:
- Access your data and get a copy of it.
- Correct inaccurate data.
- Delete or destroy your data.
- Restrict or object to processing.
- Data portability.
- Withdraw consent at any time, where we rely on consent.
- Complain to Thailand's Personal Data Protection Committee (PDPC).
7. Cookies
We only use cookies that the website and the services you request need to work, so no consent is required. We do not use tracking or advertising cookies.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| theme | Song Kram Jek | Remembers your dark or light mode choice | 1 year |
| accent | Song Kram Jek | Remembers your chosen accent color | 1 year |
| locale | Song Kram Jek | Remembers your chosen language | 1 year |
| sb-*-auth-token | Supabase (on our behalf) | Keeps you logged in | Until you log out or the session expires |
| __stripe_mid, __stripe_sid | Stripe | Fraud prevention during payment | 1 year / 30 minutes |
You can delete or block cookies in your browser settings, but you may not be able to log in or keep your preferences. If we ever add non-essential cookies, such as analytics or advertising cookies, we will always ask for your consent first.
8. Security
We encrypt data in transit (HTTPS), restrict access by guild permissions, and never store your card details or passwords.
9. Minors
If you are under 20, please use the service, and especially make payments, with a parent or guardian's consent.
10. Changes to this policy
We may update this policy from time to time. For significant changes we will notify you on the website or by email before they take effect.
11. Contact us
For questions or to exercise your rights, contact policehub.developer@gmail.com.