Privacy notice

What data is stored

• Your username, your name if entered in your profile, and a password hash.
• IP address, browser and device details, sign-in times, sessions and application activity.
• Work data you create, including favorites, saved searches, shortlists and notes.

How data is used

Account data is needed to provide access and save your work and preferences. Security and activity records help protect access and investigate errors. These purposes rely on legitimate interests where permitted under the PDPA. Without the account and security data needed to operate the service, access cannot be provided.

Work information is visible within each user’s permissions. The administrator manages accounts and can review security records. Hosting and backup providers process data to run the service. Data is stored and processed on secure servers located in Singapore.

Opening the project map requests map tiles from OpenStreetMap. This provider receives your IP address and request details.

Cookies and browser storage

First-party cookies support sign-in and form security. Language and appearance settings remember choices you make. Browser storage keeps selected comparison items, interface settings and scroll position. There are no advertising cookies or third-party analytics trackers in the application.

The sign-in cookie lasts until logout or session expiry (up to 8 hours). The form-security cookie can last up to 364 days. Language and appearance cookies can last up to one year after being updated.

You can clear these values in your browser. Blocking sign-in or security cookies may prevent the application from working. Browser storage for a tab ends with that tab’s session; saved comparison selections remain until you change them or clear site data.

How long data is kept

Your profile and personal work are kept while your account exists. Disabling an account blocks access but does not delete its data.

Sign-in, security and general activity records in the working database become eligible for deletion after 90 days and are removed during the next successful daily maintenance run. Completed or revoked browser-session records follow the same period from expiry or revocation. Inventory status history follows the account-deletion rules below.

Technical server logs and backup archives have separate rotation and retention rules. Account deletion does not rewrite existing copies. Access to these copies is restricted, and a restored backup must have confirmed deletion requests reapplied before general access is reopened.

Your rights and account deletion

Contact the administrator through the channel used to give you access. You can request access to your data, correction or deletion, and ask about restriction, objection or portability where applicable. Where processing relies on consent, you can withdraw that consent. You may also complain to Thailand’s Personal Data Protection Committee (PDPC).

To delete your account, send a request through that channel. The administrator confirms the request and removes the account, personal lists, notes, sessions, sign-in and activity records from the working database. Shared projects, price lists and current inventory remain. Unit status events and dates remain with the author shown as “Deleted user”, without the former author’s name, username or notes.