Privacy Policy

1. Who is responsible

The Site is operated by Nonnipat Tangrojjanakhajorn (Nont) as a personal portfolio. Privacy questions and requests: contact@pinont.me.

2. What we collect

We do not run user accounts, Sign in with ChatGPT, or marketing email lists on this Site.

• Browsing the portfolio. Like most sites, our host may process technical request data (for example IP address, user agent, URL, and timestamps) in server or CDN logs to deliver and secure the Site. We do not run advertising trackers or third-party analytics pixels on page views. Dave’s API may also use your IP (from proxy headers) only to rate-limit abuse — not as a profile or analytics identity.
• Theme preference. Stored in your browser as af-theme (localStorage) so light/dark mode sticks between visits.
• Dave chat consent. If you open Chat with Dave, we store your choice (af-twin-consent in localStorage) with a consent version string so we know whether you agreed to chat logging.
• Dave chat session id. An anonymous id in sessionStorage (af-twin-sid) so turns in the same browser tab can be grouped in our logs. It is not a login.
• Chat messages (only if you agree). After you tap Agree and chat, messages you send and Dave’s replies are processed to answer you and may be logged (see below). Do not put secrets, passwords, or sensitive personal data in the chat.
• Email you send us. If you write to contact@pinont.me (or another address we publish), we receive whatever you include in that message.

Content shown on the Site (projects, stack, WakaTime summaries, and similar) is curated or synced for the portfolio. That pipeline is not used to profile visitors.

3. Sign-in providers

Not applicable. The Site has no visitor accounts or OAuth sign-in.

4. Cookies and similar storage

We use browser storage rather than advertising cookies:

• af-theme — theme preference (localStorage).
• af-twin-consent — Dave chat consent choice (localStorage).
• af-twin-sid — anonymous chat session id for the tab (sessionStorage).

The footer includes a Ko-fi link so you can tip if you choose. We do not load Ko-fi’s widget script. If you follow the tip link, Ko-fi may set cookies or collect data under its own policies.

5. Why we use information

• To run and secure the Site (legitimate interest in operating a personal portfolio).
• To provide Chat with Dave when you ask for it (contract / service you request, and consent for logging described in the chat gate).
• To see how visitors interact with Dave, improve answers and useful information on the Site, and detect or harden against abuse of the chat feature (consent for chat logging; light redaction of emails and IP-like strings before some logs leave our servers).
• To reply if you email us.

You can refuse Dave chat before you start. Once you agree, turns are logged for the purposes above. Closing the panel does not delete logs already sent.

6. Who we share with

We share information only as needed to run the Site and Dave, or if the law requires it.

• Hosting. The Site is hosted on Vercel. Request and function logs may be processed by Vercel under their terms.
• Open Typhoon (AI inference). Chat with Dave uses the Open Typhoon API operated by SCB DataX Co., Ltd. When you chat after consent, we send conversation content (and related API fields such as model parameters) to Open Typhoon so a reply can be generated. Open Typhoon / SCB DataX process personal data under Thai PDPA and their own notice. Read their policy: opentyphoon.ai/privacy. Their notice also covers AI / generative AI use, possible international transfers, retention under their rules, and rights requests to their DPO (dpo@data-x.ai). We do not control Open Typhoon’s full retention or training practices; treat their notice as the source for how they handle data they receive.
• New Relic. For consented chat turns, we may send custom events (for example anonymized session id, path, message and reply text after light sanitization, timestamps, consent version) to New Relic’s Event API so Nont can study how people use Dave, improve the experience, and watch for abuse. Chat events go to New Relic’s EU Event API collector. Events are not sent if you never agree to chat, or if New Relic is not configured on the server.
• Ko-fi. If you follow the tip link to Ko-fi, Ko-fi’s privacy terms apply to that visit.

We do not sell your personal information.

7. Retention

• Theme and consent choices stay in your browser until you clear site data or reset consent.
• The tab session id lasts for the browser session (sessionStorage).
• Chat events in New Relic are kept according to that account’s retention settings and our need to review product questions — we aim to keep them only as long as useful for that purpose, then delete or stop relying on them. Exact New Relic retention may change with the product plan.
• Email correspondence is kept as long as needed to handle your request and ordinary records.
• Open Typhoon may retain API-related data under their privacy notice.

8. Where data is stored / transfers

Processing can involve servers outside Thailand (for example Vercel hosting, Open Typhoon / SCB DataX infrastructure and possible international transfers described in their notice, and New Relic collectors in the EU). By using Dave chat after consent, you understand messages are sent to these processors so the feature can work.

Precise hosting regions for every edge request are not listed here; ask contact@pinont.me if you need more detail for a specific request.

9. Your rights

Depending on where you live (for example Thailand PDPA, EU/UK GDPR, or other laws), you may have rights to access, correct, delete, restrict, or object to certain processing; to withdraw consent; to data portability where applicable; and to complain to a supervisory authority (in Thailand, the Personal Data Protection Committee; in the EU/UK, your local data protection authority).

Practically on this Site:

• Dave chat choice. Before chatting you can decline (“Not now”). If you already agreed, you can clear this site’s stored data in your browser, or email us to discuss your choice. Declining or clearing local storage does not by itself erase events already sent to New Relic or Open Typhoon. New messages are not accepted for chat until you agree again.
• Access / deletion of chat logs we hold. Email contact@pinont.me with enough detail (approximate time, what you asked) so we can find matching New Relic events if they still exist.
• Open Typhoon-held data. You may also need to contact SCB DataX / Open Typhoon under their notice for data processed on their systems.

10. Children

The Site is a professional portfolio, not directed at children. Do not use Dave chat if you are not allowed to consent to AI processing under the laws that apply to you.

11. Contact

Privacy questions and requests: contact@pinont.me.

Open Typhoon / SCB DataX (processor for model inference): see opentyphoon.ai/privacy and dpo@data-x.ai.

12. Changes

We may update this page when the Site’s collection or processors change. The “Last updated” date at the top will change. Material changes to Dave logging will also bump the in-chat consent version so you can choose again.