นโยบายคุกกี้ (Cookie Policy)

Cookie Policy

latest update 9 June 2026

AiRA uses cookies and similar technologies such as localStorage on its website and systems to keep the service functioning correctly, remember user settings, and analyze usage patterns in order to improve the service. Some cookies are necessary for system operation, while others are used for analytics and are only activated when the user gives explicit consent.

Users may reject or configure optional cookies at any time through the cookie settings panel. Data collected through cookies will not be used to identify individuals without authorization. Any disclosure of data to third parties must comply with the Personal Data Protection Act B.E. 2562 (PDPA).

1. Privacy by Design

AiRA considers data protection from the system design stage, following these principles:

• Data minimization — only data that is necessary and proportionate to a clearly defined purpose is collected.
• Purpose limitation — data is used only for the purpose for which it was collected, and no further.
• Data accuracy — data stored and processed is kept accurate, complete, and current.
• Erasure and anonymization — data is deleted or anonymized when it is no longer needed for its stated purpose.
• Defined retention periods — data is stored for the minimum period required by purpose and applicable law, as detailed in the tables in section 5.
• Secure data transfer — all data transmitted between systems uses HTTPS/TLS encryption end-to-end.

2. Data Security

Data stored via cookies and localStorage is kept secure and disclosed only to authorized systems or personnel. AiRA applies the following measures:

• All data transmission is encrypted with HTTPS.
• Session cookies are configured to prevent unauthorized cross-site access and script-based interception.
• Analytics cookies are immediately removed from the browser if the user withdraws consent.
• The website is configured with industry-standard security measures to protect against common web-based threats.

3. Third Parties

AiRA shares usage data with third parties only where necessary and where consent has been given. All disclosures must comply with PDPA requirements.

• Supabase Inc. — authentication and database provider acting as a Data Processor. See supabase.com/privacy
• Google LLC — analytics provider, only when the user consents. See policies.google.com/privacy

4. User Rights and Cookie Management

Users have the right to withdraw consent for analytics cookies at any time without affecting access to core features. This can be done by:

• Clicking "ตั้งค่าคุกกี้" (Cookie Settings) in the footer of any page to open the settings panel.
• Clearing localStorage via browser Developer Tools (F12 → Application → Local Storage).
• Configuring the browser to block or delete all cookies (some features may not function).

5. Cookie Types and Technical Details

5.1 Necessary Cookies

These cookies are essential for the basic operation of the system and cannot be disabled. Data from these cookies is not used for any purpose beyond what is described.

5.2 Analytics Cookies

These cookies help us understand aggregate usage patterns — pages visited, number of users, and errors — in order to improve AiRA. Analytics cookies are only loaded after the user gives explicit consent. Data collected through these cookies cannot directly identify individuals.

AiRA configures Google Analytics with IP Anonymization. Google automatically truncates the last portion of each IP address before storing any data, preventing location or identity inference.

6. Contact and Complaints

For questions, data deletion requests, or complaints regarding cookie usage, contact askmyaira@gmail.com. The team will respond within 7 business days.