The whole policy still fits on one screen because there is almost nothing to disclose. A short, named list of things needs your permission, and every one of them stays off until you give it.
Last updated: 4 September 2026
01What cookies are
A cookie is a small text file a website asks your browser to keep, so the site can recognise the same browser later. Some are needed for a site to work; others exist only to track people across the web.
02Our position
We use no advertising or tracking cookies, and we do not sell or share your browsing data. Cloudflare Web Analytics measures aggregate visits and page performance without cookies, local storage, session storage or IndexedDB. Cloudflare states that Web Analytics does not store visitor IP addresses and does not follow people across sites. It runs for everyone, before and after any choice you make here, because it cannot identify anyone.
One thing does go further, and only if you say yes. PostHog, hosted in the European Union (Frankfurt), builds heatmaps of which parts of a page get read, clicked and scrolled, and records browsing sessions so we can see where people get stuck. Every word of text and every form field is masked in your browser before anything is sent, and the enquiry form is not recorded at all. Recordings are deleted after 30 days. It is off until you accept it on the banner, it never sets a cookie, and you can withdraw at any time from the “Cookie settings” control in the footer of every page.
One more thing loads only if you say yes. Google Analytics 4, run by Google LLC (United States), counts visits to this site and where they came from. It is off until you accept it on the banner, and once it loads it runs with advertising storage denied and your IP address anonymised before Google ever sees it — nothing is shared with any Google advertising product. Withdrawing erases its cookies, named below, from your browser.
Microsoft Clarity, run by Microsoft Corporation (United States), builds the same kind of masked heatmap and session recording described above, with the enquiry form and your name on the confirmation page masked in the browser before anything is sent and recordings kept for 30 days. It is off until you accept it on the banner, it loads with advertising storage denied so no advertising cookie is ever set. Withdrawing erases the two cookies it sets on this site's own domain. The third, named below, is set by Microsoft on Microsoft's own domain, and neither we nor this page can reach it — only your browser can clear that one.
03What we store in your browser
On the day this policy was last checked, the site itself set no cookies at all, on any page, including after sending the enquiry form. That is still true of the site itself. What has changed is that a visitor who answers the consent banner leaves one entry in their browser's local storage — the answer itself — and a visitor who accepts leaves a second one, belonging to PostHog. A visitor who has not answered yet has neither: nothing at all is stored until you choose. Neither of those two entries is a cookie either. Accepting also sets one or more cookies, from the vendor(s) named below — listed by name, purpose and lifetime in the table, and the only cookies this site or its vendors ever set after any choice you make.
Separately from that local storage entry — this one is not a cookie either, and it is not stored in your browser at all — we keep a short record on our own server of the choice itself: which option, which categories, when, a daily-rotating one-way hash of your IP address rather than the address itself, and your browser family only (e.g. “Chrome”). It exists so we can prove, if ever asked, that consent was genuinely given. Kept for 12 months; see our privacy notice for the full detail.
Cookies this site may set: name, who sets it, purpose, category, duration, and whether it leaves Thailand
Name
Set by
Purpose
Category
Duration
Leaves Thailand?
none
this site
The pages and the form work without storing anything in your browser.
—
—
—
cc_cookie (local storage, not a cookie)
this site
Remembers your answer to the consent banner so we do not ask you again. Written only once you answer.
strictly necessary
until you clear site data or withdraw
no — it never leaves your browser
ph_… (local storage, not a cookie)
PostHog, Inc.
Groups the pages you view into one visit so a heatmap and a recording make sense. Written only if you accept, erased when you withdraw.
analytics — opt-in
until you withdraw or clear site data
yes — European Union (Frankfurt)
_ga
Google Analytics 4 (Google LLC, United States)
Distinguishes visitors between visits so traffic and behaviour can be measured in aggregate. Written only if you accept, erased when you withdraw.
analytics — opt-in
2 years
yes — United States
_ga_<container>
Google Analytics 4 (Google LLC, United States)
Persists session state for this property's own Google Analytics container. Written only if you accept, erased when you withdraw.
analytics — opt-in
2 years
yes — United States
_clck
Microsoft Clarity (Microsoft Corporation, United States)
Persists your Clarity user id across visits so a session and a heatmap can be attributed to the same browser. Written only if you accept, erased when you withdraw.
analytics — opt-in
1 year
yes — United States
_clsk
Microsoft Clarity (Microsoft Corporation, United States)
Connects the multiple pages you view in one visit into a single Clarity session. Written only if you accept, erased when you withdraw.
analytics — opt-in
1 day
yes — United States
CLID
Microsoft Clarity (Microsoft Corporation, United States) — set on Microsoft's own domain, www.clarity.ms, not on ours
Lets Clarity recognise the same browser on its own side. Microsoft's server sets it when your browser fetches the Clarity script, which only happens once you accept. Because it sits on Microsoft's domain, and is set so that no script on this page can read it, we can neither read nor erase it: withdrawing stops Clarity and erases the two cookies above, but this one stays until it expires or you clear cookies for clarity.ms in your browser. Safari blocks it outright and never stores it at all. Other browsers that block or partition third-party cookies limit what it can do in their own ways.
analytics — opt-in
1 year
yes — United States
bot-protection cookie (e.g. __cf_bm)
our hosting/CDN provider: Cloudflare, Inc. (United States) — Cloudflare Workers and Cloudflare's content delivery network; pages are served from the Cloudflare data centre nearest to you, normally inside Thailand for visitors in Thailand, and the application runs on Cloudflare's global network rather than in one fixed country
Tells automated traffic from people so the site stays up. May be set only when the provider's protection is active.
strictly necessary
under 30 minutes
depends on the provider's edge location; see the privacy notice
04Categories and consent
Under Thailand's PDPA, strictly necessary storage may operate without consent. Anything that measures how you behave needs your prior opt-in, with an equally prominent way to say no — which is why the banner's Accept all and Essential only buttons are the same size, the same weight and on the same layer, why nothing is pre-ticked, and why closing the banner without answering is not consent.
There are two categories, and only one of them is yours to decide:
Strictly necessary — your answer to this banner, and our host's short-lived bot-protection cookie. Cloudflare's cookieless, storage-free visit count sits here too: it keeps no identifier and no IP address, so there is nothing to consent to. Always on.
Behavioural measurement and session recording — PostHog heatmaps and masked session replay, Google Analytics 4's visit measurement, and Microsoft Clarity's masked session replay, described above. Off unless you turn it on.
05How to control cookies
Your browser lets you view, block and delete cookies and site storage for any site, including this one; blocking them will not break this site. Withdrawing is as easy as giving: the “Cookie settings” control sits in the footer of every page, and here.
If your browser sends a Global Privacy Control signal we take it as a refusal without asking, and behavioural measurement stays off whatever the panel says. When you withdraw, we stop sending immediately and erase what PostHog, Google Analytics, and Microsoft Clarity kept in your browser, cookies included, and tell you here if any of it could not be erased. One thing sits outside that promise, and outside the sweep: Microsoft's CLID cookie, on Microsoft's own domain. This page cannot see it, so it can neither erase it nor report on it — it is named in the table above instead, and only your browser can clear it.
06Third-party embeds
We do not embed video players, maps, chat widgets or social feeds on this site, and our fonts are served from our own domain. Cloudflare's analytics beacon loads from static.cloudflareinsights.com, described under Our position. PostHog loads no third-party script at all: its code is served from this domain like the rest of the site, and if you accept, what it measures is sent to posthog.com in the region named above. Nothing is sent before you accept. Google Analytics 4 loads its tag from googletagmanager.com only if you accept; nothing is sent to Google before then. Microsoft Clarity loads its tag from clarity.ms only if you accept; nothing is sent to Microsoft before then. Links to LINE and to the websites we have built open those sites in your browser; each is governed by its own policy.
07Changes and contact
We will update this page before we change what the site stores. Last checked: 4 September 2026. Questions: privacy@1percentevo.com. Our full privacy notice covers everything else.