Privacy & Cookies Policy

We respect your privacy and handle personal data in line with the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable laws. This policy explains what we collect, how we use it, and how we use cookies.

What we collect

  • Account details - your name, email, password (stored encrypted) and profile details such as bio, website and avatar.
  • Google sign-in - if you sign in with Google, we receive your name, email and profile picture from Google.
  • Content - products, images, comments, upvotes, follows and support tickets you create.
  • Payments - the package purchased, amount and payment status. Payment details are handled by Bayarcash.
  • Contact messages - the name, email and message you send through our contact form.
  • Technical data - IP address, browser type and pages visited, used for security and to keep the platform running.

How we use it

  • To create and run your account.
  • To display your products, profile and activity to the community.
  • To review submissions and prevent spam, fraud and vote manipulation.
  • To send notifications about your products, comments and followers.
  • To send the newsletter if you subscribe.
  • To reply to your support tickets and contact messages.
We do not sell your personal data.

Sharing your data

We only share data with service providers that help us run the platform, such as Bayarcash for payments, Google for sign-in, and our hosting and email providers. They may only use it to provide their service to us. We may also disclose data where required by law.

Payments

Payments are handled by Bayarcash. We do not store your card or bank details.

Cookies

Cookies are small text files stored in your browser. We use only the cookies needed to run the platform:
  • Session cookie - keeps you logged in and remembers your session while you browse.
  • XSRF-TOKEN - protects forms against cross-site request forgery attacks.
  • Remember me - keeps you logged in between visits if you tick "Remember me" when logging in.
These cookies are essential, so they cannot be switched off without breaking parts of the site. You can block or delete cookies in your browser settings, but you may not be able to log in or submit forms.

Data retention

We keep your data for as long as your account is active. When you delete your account, your personal data and content are removed, except where we must keep certain records (such as payment records) to meet legal obligations.

Your rights

  • Access and update your personal data from your profile settings.
  • Delete your account at any time from your profile settings.
  • Unsubscribe from the newsletter using the link in every email.
  • Request a copy or correction of your data by contacting us.

Changes to this policy

We may update this policy from time to time. The date at the bottom of this page shows when it was last updated.

Contact

Questions about your privacy? Reach us through the contact form on the About page.

Last updated 27 September 2026