Legal
Privacy Policy
Last updated: June 2026
PRASM respects your privacy. This site is a simple, mostly static website with no account system. This page explains the little data that is involved.
What we collect
We do not require you to create an account or log in. If you contact us or subscribe to updates, we receive the details you choose to send: typically your name, email, and message.
If you make a donation, the payment is handled entirely by the provider you choose (such as Stripe, PayPal, or Patreon). We never see or store your card details.
Analytics
If analytics are enabled, we use a privacy-friendly, cookieless analytics service to understand which pages are visited. It does not track you across other websites and does not build an advertising profile of you.
Cookies
This site does not use advertising or tracking cookies, and our analytics (when enabled) are cookieless. We may use a small amount of local browser storage for essentials, such as remembering your light/dark theme and whether you've already seen the intro. That stays on your device and isn't shared with us. Because we don't set tracking cookies, you won't see a cookie-consent banner.
Third-party services
Donation links take you to third-party providers (Stripe, PayPal, Patreon) and crypto wallets. Those services have their own privacy policies, which govern any data you share with them.
Our contact and newsletter forms may be handled by a third-party form or email provider. They process your submission solely to deliver it to us.
How we use your information
We use what you send only to respond to you, coordinate support, and (if you ask for it) keep you updated. We do not sell your information, ever.
Photos & stories of the community
The people in our photos and stories are real. We share their images and words only with informed consent, and we protect identities wherever there's any risk: we use first names or none, and we never publish details that could locate or endanger an undocumented community. Anyone featured can ask us to stop using their image or story at any time. For more, see our Safeguarding policy.
Your rights & Thailand's PDPA
We operate in Thailand and aim to handle personal data in line with Thailand's Personal Data Protection Act (PDPA). We collect only what we need, for the purposes described here, and keep it no longer than necessary.
You can ask us to access, correct, or delete the personal data you've shared, withdraw consent, or object to a particular use. Just contact us and we'll respond. If we ever handle sensitive information (for example, in our identity or medical work in the community), we treat it with extra care and additional consent.
How long we keep information
Only as long as it's useful for the purpose you gave it to us: contact messages while we're corresponding with you, newsletter details until you unsubscribe, and basic donation records as long as good accounting requires. When information stops being needed, we delete it, and you can ask us to delete yours at any time.
Records from our field work in the community (medical histories, identity documentation) are a separate matter entirely: they're held under much stricter controls, are never part of this website, and are governed by our Safeguarding policy and consent practices.
Contact
Questions about privacy, or want your information removed? Just contact us and we'll take care of it.