PRIVACY
What this gallery measures, and why
The KEYSTONE Apps Gallery counts how its pages are used so the Tech Team can make them better. It does not identify you, it does not follow you between visits, and nothing it records is sold or shared with anyone outside the school. It never has been.
Why anything is measured at all
One purpose: to understand which tools people actually need and where the gallery gets in the way. Which apps get opened, which pages people leave quickly, whether a phone layout is worth the work. That is what shapes the next redesign.
Under Thailand’s Personal Data Protection Act B.E. 2562 (PDPA), this is the school’s legitimate interest in running and improving its own systems. There is no marketing purpose, no advertising, no profiling, and no automated decision that affects anyone.
What is recorded
Each time a page is opened or an app is clicked:
- Which page, and which app was opened
- How long the tab was actually visible, and how far the page was scrolled
- Device type, operating system and browser — desktop or mobile, Chrome or Safari
- Country, region and city, worked out by Cloudflare at the edge
- The address the visit came from, and the address it went to
- Window size, so layouts can be checked against real screens
- A random session code that lasts until the browser is closed
What is never recorded
- No IP addresses. Cloudflare uses one to work out the country, then it is gone. It is never written down.
- No names, usernames or email addresses.
- No tracking cookies, and no advertising or analytics service from any other company.
- No profile that survives your visit. The session code is a random number held in the browser tab and thrown away when the browser session ends. Come back tomorrow and there is nothing connecting the two visits.
Signing in to an individual KEYSTONE app is separate, and covered by that app’s own arrangements. This page is about the gallery.
How long it is kept
Individual records are deleted after 90 days, automatically. What survives is a daily total — how many views, how many sessions, how many app clicks on a given date. Those totals cannot be traced to a person, a device or a place, because none of that is carried over.
Where it is held
On Cloudflare, in the school’s own account, reachable only by the Tech Team through a password-protected admin area. It is not shared with any third party, and it is not used for any purpose other than the one above.
Your rights, and who to ask
The PDPA gives you rights over personal data about you — to see it, to correct it, to have it erased, and to object to it being used. Because nothing here identifies an individual, there is usually no record that could be found and returned for any one person. If you want to ask anyway, or you think something on this page is wrong, contact the WASBKK Tech Team and we will look into it properly.