Sign in

Privacy Policy

sarachai.com (the “site”) is the personal websiteof Watcharin Sarachai (“we”), not the website of any organisation or institution. This policy explains what we collect and how we use it when you use the site, including the Classroom (/learn), in line with Thailand’s Personal Data Protection Act B.E. 2562 (PDPA).

1. What we collect

Reading posts and pages — no account or sign-in needed. We do not run visitor analytics (such as Google Analytics).

Signing in — only for people who have been granted access (for example authors), and only with a Google account; we never store passwords. On sign-in we receive and keep your name, email address and profile picture from Google, plus your role and last sign-in time, and we log significant actions in the management area (an audit log) for security.

The chat assistant — what you type is processed by a language model running on our own servers, not sent to an outside AI provider. The conversation is kept in your browser; we do not save chat messages in a database. Your IP address is held briefly in memory to rate-limit requests and is not stored permanently. Please don’t type personal or sensitive information into the chat.

LINE Official Account (@502byvjh)— when you message our LINE account we receive your LINE user ID and your messages. Up to the last 10 exchanges are kept in memory so replies have context; they are not written to a database and are cleared whenever the service restarts. LINE’s own privacy policy also applies.

Browser security reports (CSP) — browsers may report content blocked by our security policy. We keep only aggregated counts (directive, blocked domain, page, count), never IP addresses, and delete entries not seen for 30 days.

Server logs — every request passes through Cloudflare (a network and security service) before reaching our server; Cloudflare processes it under Cloudflare’s policy. Our reverse proxy keeps an access log with the IP address, time, requested URL and browser (user agent) for security and troubleshooting. The log is kept under the system’s default settings, which currently have no scheduled automatic deletion, and is not used to identify individuals or analyse behaviour.

2. The Classroom (/learn)

The Classroom serves the courses we teach. It has its own sign-in (with a Google account) separate from the main site and is covered by this policy. It keeps:

  • the Google account used to sign in (name, email and account ID);
  • the course roster data (student ID, name, programme, cohort and roster email), enrolments and sections;
  • attendance check-ins (time and outcome);
  • quizzes: answers, scores, start and submit times, and events during a quiz such as leaving the page, copy/paste and device changes, for the instructor to review (clipboard contents are never recorded and nothing is deducted automatically);
  • optional satisfaction surveys, which do not affect scores;
  • an audit log of instructor and administrator actions.

A student’s data can be seen only by the student, the instructors and teaching assistants of that course, and system administrators. The Classroom chat assistant receives only a first name for greetings and has no access to scores, attendance or other student data. The Classroom shows no ads.

3. Cookies and browser storage

TypePurposeRequired?
Sign-in cookies (main site and Classroom)Keep you signed in and protect forms against forgeryEssential — only when signed in
Cookies and local storage: language, theme, chat visibilityRemember your choicesFunctional
Google and partner advertising cookiesServe and measure ads (see section 4)Not essential — subject to consent where the law requires it

4. Advertising

The site shows ads through Google AdSense on post and project pages.

  • Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this site or other websites.
  • Google’s use of advertising cookies enables it and its partners to serve ads based on your visits to this site and/or other sites on the Internet.
  • You can opt out of personalised advertising in Google Ads Settings, or opt out of third-party vendors’ cookies at aboutads.info.
  • See How Google uses information from sites that use its services.
  • Visitors from the EEA, the UK and Switzerland are asked for consent by Google before personalised ads, and can change or withdraw it at any time from the “Privacy settings” link at the foot of a post or project page.
  • No ads are shown in the Classroom (/learn) or in the site’s management areas.

5. Sharing

We do not sell personal data. Data reaches third parties only as follows: Google (sign-in and advertising), Cloudflare (delivering requests), LINE (when you use LINE), and where the law requires it.

6. Your rights

Under the PDPA you may request access to, a copy of, correction or deletion of your personal data, object to or restrict its use, and withdraw consent at any time, using the contacts in section 7. You may also complain to the Personal Data Protection Committee (PDPC).

7. Contact

8. Changes

We may update this policy; the date at the top shows the latest revision.