This Privacy Policy explains how Pastopia Learning Hub ("Pastopia", "we") collects, uses, and protects personal data when you sign up for the game service through LNV Thailand (Lifetime) ("Distribution Partner"). Pastopia is the data controller for the game service and learner account. LNV Thailand (Lifetime) acts as the payment processor and is the data controller for billing information.
| Data | Source | Why |
|---|---|---|
| Parent email | Signup form | Account login, transactional notifications |
| First name, last name | Signup form | Personalization, support |
| Consent timestamp | Signup form (PDPA/GDPR checkbox) | Regulatory compliance |
| Child's in-game progress | Gameplay | Skill tracking, save state |
| Distribution Partner order reference | Payment webhook from LNV Thailand (Lifetime) | Subscription reconciliation, refunds |
We do not collect from you: credit card numbers, CVV, billing address, or national ID. These stay with LNV Thailand (Lifetime)'s payment processor.
We do NOT sell your data. We do NOT use it for third-party advertising.
Active account data is retained while your account is active. If your account is closed, we retain account data for 30 days to support reactivation, then delete or anonymize. Aggregated, non-identifying learning progress data may be kept for service improvement.
You may request at any time to:
Requests: email august@quurk.xyz with subject "Data Request". We respond within 30 days.
Thai residents have additional rights under PDPA (Personal Data Protection Act B.E. 2562). Contact the Office of the PDPC if you believe we have not handled your data correctly.
EEA/UK residents have rights under GDPR. You may lodge a complaint with your local supervisory authority.
On coding.pastopia.io:
pastopia_partner — remembers which partner referred you (90-day retention)LNV Thailand (Lifetime)'s landing page may set its own conversion-tracking pixels (Meta, Google, TikTok, LINE) when you sign up. These are governed by LNV Thailand (Lifetime)'s own privacy policy.
The Pastopia service is designed for children under parental supervision. The parent provides consent at signup and is the legal account owner. We do not knowingly collect data directly from children without verified parental consent. If you believe we have collected data from a child under 13 (or your local age-of-consent) without permission, contact us and we will delete it immediately.
Data in transit is encrypted (HTTPS). Passwords are hashed. Access to production systems is limited to Pastopia engineering staff with audited logins. We notify affected users within 72 hours of discovering any breach of personal data.