Privacy

• Visitors don't need an account, and we don't set tracking cookies of our own.
• We count views and clicks for creators without storing your IP address or browser details — only a one-way code that changes every day.
• Free creators' pages can show one Google ad. Google's ad cookies load only if you press Accept.
• Payments go through Stripe. We never see or store card numbers.
• We don't sell your personal data, and we don't take a cut of creators' affiliate links.

You can browse any creator's page without signing in. When you do:

• Views and shop clicks are counted so creators can see what people look at. To avoid counting the same person twice in a day, we combine your IP address and browser user agent with the date and a secret key, and keep only the resulting one-way code. Your IP address and user agent themselves are not stored, and the code changes every day, so it can't follow you across days.
• Creators only ever see totals (for example “412 clicks”), never who you are.
• Our hosting provider keeps standard server logs (such as IP address and time of request) for security and troubleshooting, for a limited time.

• Sign-in: you sign in with Google. We receive your name, email address and Google profile picture. We don't receive your Google password.
• Session cookie: after you sign in we set a cookie that keeps you signed in. It's necessary for the studio to work and is not used for advertising.
• What you publish: your username, display name, bio, social links, items, lists, notes, photos and links. Anything you publish is public by design; drafts are visible only to you.
• Photos you upload are resized and re-encoded, which removes hidden photo metadata such as camera details and GPS location.
• Your plan: whether you're on Free or Pro, until when, and how you got it.
• Invites: if you open someone's invite link, we set a cookie for 30 days that remembers their code until you sign up; it's removed once used. We record who invited whom. The person who invited you sees only how many people joined and qualified — never your name, email or page. To keep the program fair we may compare the IP addresses of recent sign-ins between the two accounts; we keep only the result of the check, not a copy of the addresses.

We use this to run your page and studio, keep the service secure, and contact you about your account. We keep it while your account exists. If you ask us to delete your account, we delete your profile and content; we may keep payment records for as long as tax law requires.

Pages of creators on the Free plan can show one slim ad banner above their archive, served by Google AdSense. Pro creators' pages show no ads. Ads are never placed in item details or next to shop buttons.

• Before any ad loads, a cookie banner asks whether you accept ad cookies. If you choose Decline or don't answer, Google's ad script isn't loaded at all and you see a small useby.me card instead.
• If you choose Accept, Google and its partners may use cookies and similar technology to show ads and measure them, including ads based on your previous visits to this and other sites. Google explains this in How Google uses information from sites that use its services. You can turn off personalised ads in Google's ad settings.
• Your choice is saved in your browser's local storage on this device. You can change it any time with Cookie choice next to the ad.

Apart from the sign-in cookie, the invite cookie (only if you open an invite link) and the choices above, useby.me doesn't use cookies.

Pro is paid through Stripe (card or PromptPay). You enter payment details on Stripe's page, not ours. We keep only what we need to give you Pro and keep records: the product, amount, date, status and Stripe's reference numbers. We never receive or store full card numbers. Stripe's own handling is described in Stripe's privacy policy.

We share data with these services only so they can do their job for us:

• Vercel — hosting and serving the website.
• Neon — the database that stores accounts and content.
• Cloudflare R2 — storing and serving uploaded photos.
• Google — sign-in, and ads on Free pages when you allow them.
• Stripe — payments.

Some of them store data outside Thailand. We don't sell personal data, and we share it with authorities only when the law requires it.

Creators link to shops such as Shopee or Lazada, and some of those links are affiliate links (always labelled). When you click one, you leave useby.me and the shop's own privacy policy applies. The creator may earn a commission; useby.me doesn't take a share and doesn't rewrite the link.

Under Thailand's Personal Data Protection Act (PDPA) you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct it, or delete it;
• stop or limit using it, or object to how we use it;
• withdraw a consent you gave (for ad cookies, use Cookie choice next to the ad).

Email us and we'll reply within 30 days. You can also complain to Thailand's Personal Data Protection Committee.

Questions or requests: privacy@useby.me

If we change this policy in a way that matters, we'll update the date above and tell signed-in creators in the studio.