Privacy: Qube Vote
Last updated 19 October 2026
1.Who is responsible for your data
ExtraQube Systems, contact [email protected].
2.What we collect
- Data
- Activity: voter identity, votes, keyed hash of the IP address
- Purpose
- Count one vote per eligible voter: a random token in anonymous campaigns, the roster key (for example a student ID) checked read-only against the organiser's list in roster campaigns; the IP is kept only as an HMAC keyed by a secret pepper, which is pseudonymous and still personal data
- Legal basis
- Legitimate interest (PDPA section 24(5))
- Kept for
- Not yet decided
- Data
- Logs: audit log
- Purpose
- Audit admin and voter actions; a voter appears only as a short hash of the identity
- Legal basis
- Legitimate interest (PDPA section 24(5))
- Kept for
- Not yet decided
3.Who receives it
- Cloudflare, Inc. (United States (processing at its global edge)): DNS, TLS termination, DDoS and WAF, tunnel to the cluster: sees every request to a public name, including the visitor IP and the page in transit
4.Your rights and how to use them
Under Thailand's Personal Data Protection Act B.E. 2562 (sections 30 to 36) you may ask for access to and a copy of your data, ask us to send it to another organisation, object to its use, ask us to delete or destroy it, ask us to restrict its use, ask us to correct it, and withdraw consent where we rely on consent.
Send a request by email to [email protected]. You may also make a request in person or by post: email us first and we will arrange a time or give you the postal address. We will tell you within 15 days if a request is incomplete, and answer within 30 days of a complete request. Electronic copies are free.
If you believe we process your data unlawfully, you may complain to the Office of the Personal Data Protection Committee (www.pdpc.or.th).