Privacy & cookies

Controller and contact

Saboo (Thailand) Co., Ltd operates M31 NEWS. Address: 55/20 Moo 4, Bueng Khamploy, Lam Luk Ka, Pathum Thani, Thailand. Privacy and rights requests: poweryongin@gmail.com. Effective date / notice version: 17 October 2026 / 20261017.

Data and purposes

Optional analytics use a consenting browser’s random identifier, visit dates and recent activity, articles read and submitted search terms to measure visits, popular articles and search trends. Email-, URL- and phone-like queries are excluded from analytics; do not enter personal data in searches. Browser identifiers may remain personal data even without names. Network presence uses an IP masked before application storage, visible only to the verified super administrator.

Your choice

Visit, article and search analytics require prior opt-in consent. Declining does not prevent reading news. We record the choice, time and notice version. Use Cookie settings in the footer to allow or reject statistics later. Withdrawal stops new analytics and does not retrospectively invalidate lawful earlier processing. Request deletion of existing records through the contact above.

Necessary features and requests

Sign-in, security, remembering your consent, requested likes and sharing, and language or interest preferences support the features you request, separately from optional analytics. Where applicable we rely on contract performance or legitimate interests limited to those purposes. Newsletter requests include email, language, interests, frequency and subscription status. Advertising enquiries include company, contact, email and message. These serve the specific application, consent or enquiry, independently of analytics choice. Do not submit sensitive information in forms.

Browser storage

m31_consent and m31_consent_receipt remember the choice and reference evidence for up to 180 days. m31_visitor is an optional analytics identifier lasting up to one year and is cleared on rejection or withdrawal. m31_engagement supports requested likes/shares for up to one year. Accounts administrator cookies last up to one hour; sign-in flow state lasts five minutes. Language and interest preferences remain in browser local storage until you clear them.

Server retention

Per-browser article, opinion and search analytics are retained for up to one year; browser presence records for up to one year after last activity; consent evidence for up to one year from recording, followed by scheduled cleanup. These counts measure browsers, not people. Aggregate cumulative visit counts without browser identifiers may remain. Masked-IP results cover the last two minutes; records over ten minutes old are removed at the next consented visit or hourly cleanup and can remain longer between cleanup runs. Enquiry, subscription and delivery records remain while needed to handle the enquiry or subscription, then are reviewed for deletion. Minimum information needed for legal obligations or disputes may remain on an applicable basis for the necessary period. Existing analytics follow the same retention limits; no historical consent is fabricated.

Providers and international processing

Cloudflare processes data for delivery, security, D1 storage and R2 media; network infrastructure can process the original IP even though the application stores only a masked value. M31 Accounts handles sign-in and permission checks. Access is limited to administrators and providers that need it for the stated purposes. Optional site analytics do not embed Facebook or Threads advertising trackers. External services apply their own policies when you follow their links. Global infrastructure may involve processing outside Thailand. Applicable Thai PDPA transfer grounds and safeguards must be assessed and applied; this notice alone is not a guarantee of a specific storage country or the legality of every transfer.

Rights and requests

Subject to applicable conditions, you may request access/copies, correction, deletion, restriction, objection, portability or withdrawal. Email the service or article URL and your request. We may ask only for information reasonably needed to verify the requester; do not initially send passwords, tokens or a full identity document. We consider others’ rights and legal retention duties and respond under applicable statutory procedures and time limits. You may complain to Thailand’s Personal Data Protection Committee (PDPC). A parent or legal representative may contact us regarding a child or a person requiring representation.

Security and updates

We apply access controls, server validation and record cleanup. Material changes to purposes or collection receive a revised notice and renewed consent where required. This notice describes implementation and is not a legal compliance certificate.

poweryongin@gmail.com · PDPC

Anonymous visit totals

Each browser counts once per Bangkok calendar day; refreshing or returning on the same day adds no visit. A random daily token and date are kept in local storage (m31_daily_visit) and replaced on a later visit after the day changes. No IP or browser fingerprint is used as the counting identifier. Server token records are removed on a later visit after 24 hours of inactivity; aggregate counts remain. Active browsers means activity within five minutes, not unique people. Historical counts are preserved. When local storage is unavailable, uncertain duplicate visits are not added. Article, search and Google Analytics tracking retains its consent requirement.