Privacy Policy

We collect as little as we can, keep it briefly, and never sell it or use it for ads. This policy follows Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

1. Data controller. The data controller is Tantam Aueng, an individual based in Bangkok, Thailand, who operates lowmana. Contact: support@lowmana.club. If you exercise your rights under the PDPA, we will give a full mailing address on request.

2. What we collect.

Data Examples Where it comes from
Account Made-up name, avatar, country, guilds, email (if you sign in with email or Google), sign-in method You, Google
Content Messages, room posts, threads, replies, images, guestbook notes, votes, mana given You
Safety records Reports, blocks, moderation actions, copies of reported content You, other users, us
Traffic log IP address, browser type, time and type of action (sign-in, post, upload, report) Your device
Device settings Theme and layout choices stored in your browser Your device

We do not ask for your real name, phone number, birth date or location beyond country. Please do not share them in chat.

3. Why we use it, and our legal basis.

Purpose Legal basis (PDPA s.24)
Run lowmana: accounts, chat, rooms, profiles Contract (s.24(3))
Keep it safe: spam and abuse filters, reports, moderation Legitimate interests (s.24(5))
Keep traffic logs and respond to lawful requests Legal obligation (s.24(6)), Computer Crime Act s.26
Fix bugs and keep the service running Legitimate interests (s.24(5))

We do not use your data for advertising, profiling for marketing, or training AI models.

4. How long we keep it.

Data Kept for
Public chat (World, country, city, guild, club) About 24 hours
Room messages and images About 30 days
Threads with no replies 30 days; active threads stay until you delete them or they are archived
Traffic log 90 days, as required by the Computer Crime Act
Copies of reported content Until the report is resolved, longer if needed for a legal claim or a request by authorities
Account data Until you delete your account

5. Who we share it with. Other users see what you post publicly and your public profile. We never sell personal data. We use these service providers to run lowmana:

We disclose data to authorities only when Thai law requires it.

6. Transfers outside Thailand. Some providers process data outside Thailand, including in Singapore and the United States. We use providers that apply appropriate data-protection safeguards, as allowed under PDPA sections 28 and 29.

7. Cookies and browser storage. We use only what lowmana needs to work: your sign-in session and your display settings. We do not use advertising or tracking cookies. Cloudflare Turnstile runs a security check to tell people from bots.

8. Your rights. Under the PDPA you can ask to access, get a copy of, correct, delete, or restrict use of your data, object to its use, and withdraw consent where we rely on it. You can download your data and delete your account any time in Account & privacy. For anything else, email support@lowmana.club. We reply within 30 days. You can also complain to the Office of the Personal Data Protection Committee.

9. Security. Data is encrypted in transit. Access rules in our database stop users from seeing private-room content or other people's private data. No system is perfect; if a breach is likely to affect your rights, we will notify the regulator and, where required, you.

10. Age. lowmana is for people 20 and older. If we learn that an account belongs to someone younger, we delete it.

11. Changes. We will post updates here with the date, and show a notice on the site for material changes.

12. Google user data. If you sign in with Google, we receive only your name, email address and profile picture from your Google account. We use the email address only to identify your lowmana account and to contact you about it; we do not show it to other users, and we do not use your profile picture or name. We do not sell Google user data, use it for ads, share it with third parties except the providers that run lowmana, or use it to train or improve AI or machine-learning models. lowmana's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Version 2026-10.