Privacy Policy

This policy explains how GB Meka collects, uses, and looks after personal data under Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA).

You can use the website without signing in, except for the “My portfolio” feature, which requires signing in with a Google account (optional) · There are no ads or tools that track you across websites.

Technical data: when you open the website, our hosting provider (Vercel) automatically logs access data, such as IP address, browser type, and pages visited, to provide the service and keep it secure.

Visit statistics: we use Vercel Web Analytics to count visits to each page, referral sources (e.g. TikTok), country, and device type, without cookies and without collecting personally identifiable data (a temporary hash that resets daily is used instead of identifying users), to improve the website and its content.

Settings and on-device cache: your light/dark mode choice, stocks you follow when not signed in (localStorage), and copies of pages you have opened for offline use (the app's service worker) are stored only on your device and are not sent to the operator. You can delete them by clearing this site's data in your browser.

My portfolio (signed-in users only): your Google account ID, name, and email received from Google when you sign in; the stock trades you record yourself (ticker, quantity, price, fees, date, notes); the stocks and whales you follow; and the time you last used the service · The website never receives your Google password and does not connect to your brokerage or bank accounts · The sign-in cookie is a strictly necessary cookie that lasts 30 days.

Support: if you transfer money via PromptPay (Thai QR payment), the operator will see the sender's name and amount as shown by the bank. If you use Buy Me a Coffee / Ko-fi, your data is subject to that provider's policy. · For Ko-fi, this site receives and stores the display name, message, amount and a hash of the email address (not the email itself) to list supporters who chose to be shown and to add a supporter badge to a site account with the same email.

Contact: if you contact the operator by email or social media, we receive the information you send, such as your name and email.

Notifications (only if you turn them on in the “Alerts” page): your browser's push notification address (push subscription) linked to your account, the topics you chose, and a record of what has already been sent (to avoid duplicates) · Sent through browser notification services (e.g. Google, Apple, Mozilla) · You can turn them off or revoke permission in your browser at any time, and they are deleted when you delete your account.

Comments and star ratings on stock pages (only if you write them): these are public and visible to all visitors, shown with a shortened name from your Google account (first name + initial of last name); your email is not shown · You can edit or delete your own comments at any time, and all of them are deleted when you delete your account · The operator may hide comments that violate the terms of use.

Portfolio data is used only to display your portfolio and calculate your profit/loss for you (contractual basis — you requested the service yourself). Other users cannot see it, and the operator does not analyze, disclose, or use it for marketing.

To provide the website, prevent abnormal use, reply to inquiries, and keep income records as required by tax law, based on legitimate interests, performance of a contract, and legal obligations, as applicable.

The operator does not sell or rent personal data to third parties.

Vercel (hosting, USA — processed in the Singapore region), Google (sign-in), Neon (database — stores stock market data and signed-in users' portfolio data), TradingView (charts and intraday prices, which may use its own cookies), Logo.dev (company logos — your browser loads the images directly from the provider), and links to TikTok or news websites, which have their own privacy policies.

Using these services may cause technical data to be sent for processing outside Thailand, under each provider's own protection measures.

Portfolio data is kept until you delete your account — tap “Delete account and all data” on the My portfolio page and the system will immediately and permanently delete your account and all records. You can also download your data as a CSV file at any time (right to a copy/data portability).

Technical data is kept for the hosting provider's retention period · Contact data is kept only as long as needed to reply · Income records are kept for the period required by tax law.

You have the right to access, obtain a copy of, correct, delete, restrict the use of, object to the processing of, and transfer your data, and to withdraw consent (if any), as well as to file a complaint with Thailand's Personal Data Protection Committee (PDPC).

To exercise your rights, contact us by the contact channels on the About us page

If we launch membership plans, a notification system, analytics tools that use cookies, or use portfolio data for other purposes in the future, this policy will be updated before any additional data is collected, and we will ask for consent where required by law.