Privacy notice
This notice explains what data the Juha Thai Club forum processes, why, and for how long. We collect as little as possible: there are no user accounts, no analytics and no advertising.
Controller and contact
Controller: the administrator of the Juha Thai Club forum. Contact: by email to juhathai@proton.me.
What data is processed
- Posts: the name you enter (optional; "Anonymous" by default), the subject, the message, the image you attach, and the time of posting. Posts are public.
- Images: metadata (EXIF data such as GPS location and camera details, XMP, IPTC and text fields) is removed automatically before the image is stored. Only the image orientation is kept.
- IP address: your IP address is not stored as such. A salted one-way hash (SHA-256) of it is stored with each post, report and failed admin login. The hash is pseudonymous personal data.
- Cookies: the forum sets no tracking or advertising cookies. A single technically necessary cookie is used only for the administrator's login.
- Bot protection: if Cloudflare Turnstile is enabled, Cloudflare processes technical data about your browser and connection to tell people apart from bots.
- Server logs: the hosting provider Cloudflare processes technical request data (such as IP address, time and page requested) in short-lived logs, used for troubleshooting and security.
Purpose and legal basis
The data is used to run the forum, show posts, prevent spam and abuse (rate limits, bans) and handle reports. The legal basis is the controller's legitimate interest in running a safe discussion forum (GDPR Art. 6(1)(f)). Publishing a post is your own choice.
Retention
- Posts, images and the IP hashes attached to them: until the post is deleted.
- Reports: until a moderator has dealt with them.
- Failed admin login attempts: 24 hours.
- Bans: until the moderators lift them.
- Cloudflare's technical logs: a few days.
Processors and data transfers
The forum runs on the Cloudflare platform (Workers, D1 database, R2 file storage). Data can be processed outside the EU/EEA as well: the primary location of the database is in the Asia-Pacific region. Cloudflare commits to EU data protection requirements through the European Commission's standard contractual clauses and the EU–US Data Privacy Framework. Data is not sold or disclosed for marketing.
Your rights
You have the right to access your data, to have it corrected or deleted, and to object to its processing. Because the forum is anonymous, we cannot identify you by name: to have your posts removed, give us the post numbers (#123) by email to juhathai@proton.me. You also have the right to lodge a complaint with a supervisory authority, in Finland the Data Protection Ombudsman.
Last updated 19.10.2026.