Privacy Policy

Effective 19 October 2026

1. 1.Data controller#

   Bebetter provides itsme. and is the data controller under this policy. For anything about your personal data, contact bebetter.th.official@gmail.com.

2. 2.What we collect#

   Account data, when you sign up or log in:

   • Email, display name, username and profile picture (as an image URL)
   • Your password, stored only as a one-way hash. We never see your actual password
   • If you log in with GitHub: your GitHub account ID, name, email and avatar as provided by GitHub

   Content you create on your profile:

   • Bio, occupation, location (if you add them), tags and welcome message
   • Links (URL, title, icon/emoji) and widgets such as Spotify or YouTube links
   • Appearance settings such as colours, fonts, themes and layout
   • Uploaded files such as your avatar, banner, background image or video, music, link thumbnails and a custom walking character

   Profile visit statistics (about visitors, not the page owner): time of the visit or click, a salted hash of the IP address (we do not store the raw IP), the random ID from the v_id cookie, the referring website (domain only) and device type (mobile, tablet or desktop).

3. 3.How we use data and our legal basis#

   • Performing our contract with you: creating and maintaining your account, logging you in, showing your public profile and storing your uploads
   • Legitimate interests: counting views and clicks to show statistics to the page owner, filtering bots, preventing abuse and keeping the service secure
   • Legal obligations: when a competent authority lawfully requests it

   We do not use your data for advertising, we do not track visitors across other websites, and we do not sell data to anyone.

4. 4.What is public#

   Your profile at itsme.media/your-name can be viewed by anyone, including search engines and apps that show link previews. Everything you put on your profile (name, picture, bio, links, uploaded files) is therefore public. Your email and password are never shown on your profile.

5. 5.Cookies#

   We set only two first-party cookies and no advertising cookies:

   • Login cookie (from NextAuth): needed to keep you logged in; removed when you log out
   • v_id cookie: a random ID not linked to your identity, used to count unique visitors and to avoid counting the same visitor again within 30 minutes. It lasts 1 year and cannot be read by scripts on the page (HttpOnly)

   If a page owner embeds video or music from another service (such as YouTube or Spotify), that service may set its own cookies under its own policy. You can delete or block cookies in your browser settings; if you block the login cookie, the dashboard will not work.

6. 6.For visitors of profile pages#

   When you open an itsme. profile, we record one view per page load (not again within 30 minutes) and record clicks on its links, using the data described under "What we collect". Bots and link-preview fetchers are not counted.

   The page owner only sees totals such as views, unique visitors and clicks. They cannot see who you are and cannot see your IP address.

   Clicking a link takes you to someone else's website, which has its own policies. We are not responsible for the content or data practices of those websites.

7. 7.Sharing and processors#

   We use service providers that process data on our behalf so the service can run:

   • Vercel: hosts the website and handles requests (it may keep technical access logs, including IP addresses, under Vercel's policy)
   • Supabase: database and storage for uploaded files
   • GitHub: only when you choose to log in with GitHub

   Otherwise we disclose data only when the law requires it, to protect the rights or safety of users and the service, or if the service is transferred to a new provider, in which case we will tell you in advance.

8. 8.International transfers#

   The providers above may store or process data on servers outside Thailand. We choose providers with internationally recognised data protection safeguards and send only the data needed to provide the service.

9. 9.How long we keep data#

   • Account data and profile content: until you delete your account
   • View and click statistics: up to 24 months, and deleted immediately when the page owner deletes their account
   • Uploaded files: deleted when you delete your account. Files you no longer use may remain in storage until then
   • Backups or logs held by our providers may persist for a short time according to their deletion cycles

10. 10.Your rights#

    Under the PDPA you have the right to:

    • Access your data and obtain a copy
    • Correct your data (most of it you can edit yourself in Settings)
    • Ask us to delete your data — you can delete your account yourself under Settings → Delete account
    • Object to or restrict processing, and withdraw consent (where processing relies on consent)
    • Receive your data in a machine-readable format
    • Complain to the Office of the Personal Data Protection Committee (PDPC)

    Send requests to bebetter.th.official@gmail.com from the email you signed up with. We will reply within 30 days and may ask for more information to verify your identity. Visitors who want to exercise rights over visit data should tell us which profile and when they visited, since we do not store data that directly identifies visitors.

11. 11.Security#

    We use encrypted connections (HTTPS), store passwords as hashes, never store visitors' raw IP addresses, and limit access to data to what is necessary. No system is 100% secure. If a data breach is likely to put your rights at risk, we will notify the relevant authority and you as required by law.

12. 12.Age requirement#

    You must be at least 18 years old to create an itsme. account. We do not knowingly collect data from anyone younger. If we find an account belonging to a minor, we may delete it. If you are a parent or guardian and find such an account, please email us.

13. 13.Changes to this policy#

    We may update this policy from time to time and will show the effective date at the top. For significant changes, we will give advance notice on the website or by email to the address you signed up with.

14. 14.Contact us#

    Bebetter · Email bebetter.th.official@gmail.com