The whole policy still fits on one screen because there is almost nothing to disclose. One thing needs your permission, it is named below, and it stays off until you give it.
Last updated: 4 September 2026
01What cookies are
A cookie is a small text file a website asks your browser to keep, so the site can recognise the same browser later. Some are needed for a site to work; others exist only to track people across the web.
02Our position
We use no advertising or tracking cookies, and we do not sell or share your browsing data. Cloudflare Web Analytics measures aggregate visits and page performance without cookies, local storage, session storage or IndexedDB. Cloudflare states that Web Analytics does not store visitor IP addresses and does not follow people across sites. It runs for everyone, before and after any choice you make here, because it cannot identify anyone.
One thing does go further, and only if you say yes. PostHog, hosted in the European Union (Frankfurt), builds heatmaps of which parts of a page get read, clicked and scrolled, and records browsing sessions so we can see where people get stuck. Every word of text and every form field is masked in your browser before anything is sent, and the enquiry form is not recorded at all. Recordings are deleted after 30 days. It is off until you accept iton the banner, it never sets a cookie, and you can withdraw at any time from the “Cookie settings” control in the footer of every page.
03What we store in your browser
On the day this policy was last checked, the site itself set no cookies at all, on any page, including after sending the enquiry form. That is still true. What has changed is that a visitor who answers the consent banner leaves one entry in their browser's local storage — the answer itself — and a visitor who accepts leaves a second one, belonging to PostHog. A visitor who has not answered yet has neither: nothing at all is stored until you choose. None of these is a cookie, so none of them is ever sent to a server with a request.
Separately from that local storage entry — this one is not a cookie either, and it is not stored in your browser at all — we keep a short record on our own server of the choice itself: which option, which categories, when, a daily-rotating one-way hash of your IP address rather than the address itself, and your browser family only (e.g. “Chrome”). It exists so we can prove, if ever asked, that consent was genuinely given. Kept for 12 months; see our privacy notice for the full detail.
Cookies this site may set: name, who sets it, purpose, category, duration, and whether it leaves Thailand
Name
Set by
Purpose
Category
Duration
Leaves Thailand?
none
this site
The pages and the form work without storing anything in your browser.
—
—
—
cc_cookie (local storage, not a cookie)
this site
Remembers your answer to the consent banner so we do not ask you again. Written only once you answer.
strictly necessary
until you clear site data or withdraw
no — it never leaves your browser
ph_… (local storage, not a cookie)
PostHog, Inc.
Groups the pages you view into one visit so a heatmap and a recording make sense. Written only if you accept, erased when you withdraw.
analytics — opt-in
until you withdraw or clear site data
yes — European Union (Frankfurt)
bot-protection cookie (e.g. __cf_bm)
our hosting/CDN provider: Cloudflare, Inc. (United States) — Cloudflare Workers and Cloudflare's content delivery network; pages are served from the Cloudflare data centre nearest to you, normally inside Thailand for visitors in Thailand, and the application runs on Cloudflare's global network rather than in one fixed country
Tells automated traffic from people so the site stays up. May be set only when the provider's protection is active.
strictly necessary
under 30 minutes
depends on the provider's edge location; see the privacy notice
04Categories and consent
Under Thailand's PDPA, strictly necessary storage may operate without consent. Anything that measures how you behave needs your prior opt-in, with an equally prominent way to say no — which is why the banner's Accept and Reject buttons are the same size, the same weight and on the same layer, why nothing is pre-ticked, and why closing the banner without answering is not consent.
There are two categories, and only one of them is yours to decide:
Strictly necessary— your answer to this banner, and our host's short-lived bot-protection cookie. Cloudflare's cookieless, storage-free visit count sits here too: it keeps no identifier and no IP address, so there is nothing to consent to. Always on.
Behavioural measurement and session recording — PostHog heatmaps and masked session replay, described above. Off unless you turn it on.
05How to control cookies
Your browser lets you view, block and delete cookies and site storage for any site, including this one; blocking them will not break this site. Withdrawing is as easy as giving: the “Cookie settings” control sits in the footer of every page, and here.
If your browser sends a Global Privacy Control signal we take it as a refusal without asking, and behavioural measurement stays off whatever the panel says. When you withdraw, we stop sending immediately and erase what PostHog kept in your browser.
06Third-party embeds
We do not embed video players, maps, chat widgets or social feeds on this site, and our fonts are served from our own domain. One third-party script loads: Cloudflare's analytics beacon from static.cloudflareinsights.com, described under Our position. PostHog loads no third-party script at all: its code is served from this domain like the rest of the site, and if you accept, what it measures is sent to posthog.com in the region named above. Nothing is sent before you accept. Links to LINE and to the websites we have built open those sites in your browser; each is governed by its own policy.
07Changes and contact
We will update this page before we change what the site stores. Last checked: 4 September 2026. Questions: privacy@1percentevo.com. Our full privacy notice covers everything else.