Privacy Policy
Last updated: September 2026 - Your privacy and data security are our highest commitments.
1. Information We Collect
We collect only the essential information required to operate the Kaeosopha platform securely and efficiently:
- Account Information: Username, email address, avatar image, and optional bio details.
- OAuth Sign-in Data: When authenticating via Google, GitHub, or Discord, we receive your verified account ID and email without accessing your third-party credentials.
- Published Content: Project metadata, repository links, uploaded preview images, and community interactions.
- Technical Logs: IP addresses, browser agent strings, and audit logs utilized exclusively for intrusion detection and service reliability.
2. How We Use Your Information
All information collected is used exclusively for the following operational purposes:
- Authenticating your identity and managing your user profile.
- Displaying and categorizing your open-source projects for community exploration.
- Dispatching critical transactional communications (such as secure OTP codes and moderation updates).
- Detecting fraud, malware, abusive behavior, and unauthorized access attempts.
- We never sell, rent, or trade your personal data to third-party advertising networks.
3. Data Security & OTP Protection
We implement industry-leading technical and organizational safeguards to ensure data integrity and confidentiality:
All credentials are cryptographic one-way hashes. Transmission is strictly protected via end-to-end HTTPS/TLS.
Administrators cannot arbitrarily reset user credentials. Account recovery requires real-time 6-digit OTP authorization dispatched to the user’s inbox.
4. Your Privacy Rights
In alignment with global data privacy frameworks (including PDPA and GDPR), you retain full sovereignty over your information:
- Access & Rectification: Edit your profile, account preferences, and project listings anytime via the user settings dashboard.
- Data Portability: Request an export of your personal profile and submitted repository metadata.
- Right to Erasure: Request permanent deletion of your account and related records by contacting our support team.
5. Cookies & Local Storage
We use strictly essential cookies and local storage tokens solely for session authentication, security verifications, and your preferred language state (Thai / English). We do not deploy cross-site tracking or advertising cookies.
6. Contact Us
If you have questions, feedback, or wish to exercise any of your statutory privacy rights, please contact our data team at: