Privacy Policy

01 · WHO IS RESPONSIBLE

The HitsBay operator

Sami Suonsivu, a private individual based in Thailand, operates hitsbay.com and is responsible for the personal information processed for the purposes described here. In this policy, “we” and “us” mean that operator.

This notice covers the HitsBay website, member accounts, community, directory, creative tools and hosted member pages. Independent websites reached through referral or advertising links have their own practices.

For questions or requests, use our Contact page and put Privacy request in the subject. Identify the relevant account or page and what you would like us to do. Do not send your password.

02 · INFORMATION WE HANDLE

Information you provide and technical records

Information may also come from someone publishing content about you—for example, a review, comment or uploaded screenshot. Contact us if a submission exposes your private information.

Account and contact fields marked required are needed to provide that feature. Without them, account creation or a reply may not be possible. Profile content, custom images and publication are choices you make; do not provide unnecessary sensitive information.

03 · WHY WE USE IT

Running the features you choose to use

• Provide accounts, sign-in, saved designs, publishing and other requested services.
• Display member submissions, deliver referral redirects and show content performance.
• Handle enquiries, complaints, moderation and privacy requests.
• Protect accounts, limit abuse, diagnose faults and maintain the website.
• Understand visits and use of features, and meet applicable legal duties.

Depending on the processing and applicable law, the relevant basis may be providing a requested service or contract, a legal obligation, legitimate interests balanced against your rights, or consent where required. Consent is not assumed for all processing merely because you read this notice.

Where processing relies on consent, withdrawal does not affect earlier lawful processing. Questions about a particular use or its basis can be sent through Contact.

04 · PUBLIC CONTENT

Publishing makes information visible to others

Published pages, banners, posts, reviews, comments, profile/promoter details and approved directory submissions may be visible to visitors. Your chosen name, avatar, offer details and referral links may appear with that content. Search engines and other people may copy or index public material.

Inspect files before uploading. In particular, redact bank or payment identifiers, addresses, names you are not entitled to publish and other unnecessary details from payment screenshots. Files can contain metadata as well as visible content.

Removing material from HitsBay does not automatically remove copies, screenshots or cached versions controlled by others. Use available account controls or Contact to ask for help with the original material.

05 · COOKIES & BROWSER STORAGE

Some information stays in your browser

You can manage cookies, site storage and tracking protection in your browser. Clearing storage can sign you out, reset preferences and delete local recovery copies. Save important work separately first.

06 · ANALYTICS & VISITS

How visits and campaign activity are measured

The site uses first-party visitor and content analytics. Visitor records can contain an identifier hashed from network/browser information, a page identifier and timestamps. Some splashpage view/click records also store a hashed IP identifier, browser/user-agent text and a referring URL. Hashing makes these identifiers less direct; it does not guarantee anonymity.

Other features use aggregate daily counters or broad source categories, such as direct, search, social or referral visits. Page owners can see performance information for their content, and the operator can use analytics to administer the site.

The shared site footer includes Histats code, which can load as a page opens. Histats may receive request and device information and use its own analytics technologies. Its practices are described in Histats’ privacy information. Not every HitsBay page uses that shared footer.

07 · SERVICE PROVIDERS & DISCLOSURE

Providers involved in delivering the site

• Namecheap: the provider identified for the site’s infrastructure. Hosting and email systems process website records and enquiry messages as needed to deliver those services. See Namecheap’s privacy information.
• Histats: third-party visit analytics on pages carrying its code, as described above.
• Gravatar / Automattic: where Gravatar avatars are used, the image request includes a hash derived from the relevant email address. The image provider receives that hash and ordinary network/request details. See Gravatar’s privacy explanation and Automattic’s Privacy Policy.
• Advertising or embedded content: if included on a page, third-party resources can receive request details or use their own storage technologies. Their notices and the page’s configuration determine the particular processing.
• Member-selected resources: remotely hosted images, media or linked services can receive request details when loaded or visited. Their operators control their own processing.

Information can be accessed by the operator and people assisting with hosting, maintenance, support or moderation as needed for their tasks. It may also be disclosed when lawfully required, or when necessary and lawful to address security incidents, protect rights or resolve claims.

Referral destinations receive information associated with visiting their site, including referral details carried in the URL. This notice does not replace an independent provider’s own notice.

08 · INTERNATIONAL PROCESSING

Information may be processed outside Thailand

The operator is based in Thailand, but hosting, email, analytics, avatars and other remote resources can involve providers or servers in other countries. A provider’s name alone does not establish where a particular record is stored.

Applicable transfer requirements depend on the destination, provider arrangements and the laws that apply to the processing. Contact us for information about the providers and arrangements relevant to your information. We do not represent that all processing takes place in Thailand.

09 · RETENTION

How long information is kept

Account details and saved or published content are retained while needed to provide the account or content service, handle requests and disputes, secure the website or meet legal duties. After removal or account closure, some records may remain in recovery copies, backups or records needed for those purposes.

Contact correspondence is retained for dealing with the enquiry and related follow-up, complaints or legal needs. Browser storage remains until the relevant feature or browser clears it. Independent providers apply their own retention practices.

Visitor cleanup is a maintenance task rather than automatic deletion on every visit. Cleanup routines target online-visitor rows older than 30 minutes and visitor-day rows older than 30 days, but records can remain longer if maintenance has not run or has a backlog. These thresholds do not describe the retention of all analytics or other records.

There is no single deletion period covering every record type. The actual period depends on its purpose, account/content status, unresolved matters, applicable legal duties and backup arrangements. Contact us about a particular record or a deletion request.

10 · YOUR CHOICES & RIGHTS

Ask about your information

Depending on applicable law and the circumstances, you may request access or a copy, correction, deletion, restricted processing or portability; object to certain processing; or withdraw consent where it is the basis. These rights can have conditions or exceptions.

Use Contact with the subject Privacy request. We may need proportionate information to verify your identity. We will handle the request within the applicable legal requirements and explain a refusal where required. Do not send a password or unnecessary identity documents.

You can also raise a concern with the relevant data-protection authority, including Thailand’s Personal Data Protection Committee (PDPC) where applicable. Contacting HitsBay first is encouraged but does not remove that right.

11 · SECURITY & MINORS

Protecting account and submission information

The site uses measures such as member password hashing, session/security tokens and access checks. No website, email delivery system or storage method can be guaranteed completely secure. Keep your password private and contact us if you suspect unauthorised access or an exposed submission.

Do not provide a child’s information or use an account where a parent or guardian’s permission is required without the appropriate authority. If you believe a child’s information was submitted improperly, contact the operator for review. This notice does not set a single age threshold for every jurisdiction.

12 · UPDATES & CONTACT

Questions or changes to this notice

We may update this notice when the website’s processing or legal requirements change. We will revise the date and provide any further notice required for a material change. A policy update is not a substitute for obtaining consent where consent is required.