Privacy notice

What we keep, and why

Thai Loops is run by Turtla Co. Ltd., Phuket, Thailand (the same company behind Phuket Garage). This notice covers thailoops.com and its API under the Thai Personal Data Protection Act (PDPA) and, for visitors from the EU, the GDPR.

Reading the site

Browsing the loops, places and maps needs no account and sets no tracking cookies. Map tiles are loaded from OpenFreeMap; the request carries your IP address to them as any web request does. We run no advertising trackers.

Your account

Downloading a GPX file needs a free account. For it we store: your e-mail address, a password hash (argon2id, never the password itself), the date you confirmed the address, your sign-ins, and a log of which GPX files you downloaded and when. Purpose: running the account and the download gate (legitimate interest / contract).

The account uses one cookie, the session cookie (tl_member), which is strictly necessary and expires after 30 days or when you sign out.

Marketing consent

If you tick the box, we also store the time of consent and the loop you were looking at. We may then send a few e-mails a year about new loops and rental offers from Thai Loops and Phuket Garage. The box is off by default; you can switch it off any time on your account page. We do not sell or share the list.

Deleting

On your account page you can delete the account yourself: the e-mail and consent are removed immediately and the record is anonymised. Mail [email protected] for anything else, including a copy of your data.

Where the data lives

On our own server in Germany (Hetzner) and, for the static pages, on Cloudflare's network. Account mails are sent through Resend.