Information this website handles
The public website and web games do not require a player account, accept payments, use advertising trackers, or set analytics cookies. Game settings and progress remain in browser storage as described inside each game.
If you email us, we receive the information you choose to include, such as your email address, name, and message. Our hosting and infrastructure providers may process limited technical information, such as IP addresses, request times, device or browser details, and security logs, to deliver and protect the service.
How we use information
We use information you send us to answer enquiries, provide support, handle privacy requests, prevent abuse, and meet legal obligations. Technical information may be processed to keep the service reliable and secure.
First-party aggregate analytics
When this feature is enabled, MXIA App may use a first-party analytics service on the same MXIA domain to understand in aggregate whether pages and games open, games start or complete, coarse application errors occur, and a new anonymous runtime session starts. We use these counts to improve reliability, understand which experiences are useful, and plan product improvements.
The allowlisted analytics fields are limited to the event name, website or game surface, an approved page or coarse error code where applicable, game ID, game version, and locale where required for validation. The server receive time determines the reporting day. We do not send names, email addresses, account IDs, precise location, advertising or device IDs, persistent analytics identifiers, browser fingerprints, raw URL or query data, free-form text, typed characters, custom words, detailed scores, reading results, audio, or identifiable gameplay content.
The analytics service does not set an analytics cookie or store a persistent analytics identifier in localStorage or IndexedDB. A runtime session count is not a count of unique people, children, users, households, devices, or reach. Analytics failure does not prevent or delay gameplay.
Short-lived validated product events are retained for no more than 48 hours. Daily aggregate reports are retained for no more than 13 months. A backup that contains deleted source data must expire no more than 30 days after the source is deleted. MXIA-controlled application and security logs are retained for no more than 90 days, and MXIA-controlled App Check operational logs for no more than 30 days. Provider-mandated audit logs may have fixed retention periods that MXIA cannot shorten.
Firebase App Check may process limited technical signals to protect the service from abuse. MXIA does not use those signals to create advertising or behavioral profiles and does not retain raw IP-address history as analytics. MXIA does not use third-party advertising trackers, behavioral advertising, or cross-site tracking for this product analytics.
For questions or privacy rights requests, contact the privacy email and postal address shown in the Contact section of this notice.
Sharing and international processing
We do not sell personal information. Information may be processed by service providers that host our website, security services, or email, or disclosed when required by law. Those providers may process information outside Thailand under their own safeguards and applicable terms.
Your choices and rights
Under Thailand's Personal Data Protection Act B.E. 2562 (2019), you may have rights to access, correct, delete, restrict, object to, or request transfer of your personal data, and to withdraw consent where consent is the legal basis. These rights may be subject to legal exceptions.
Changes
We may update this notice as the website changes. The effective date and version above identify the current notice.
Contact
Data Controller: Ekachai Wongsiri
Privacy email: privacy@mxiaapp.com
Postal address: Siriplace Ratchaphruek 345 No. 345/6 Moo. 1, Bangkuwat, Mueang, Pathum Thani 12000
For the separate Ruam Khon app, read the Ruam Khon Privacy Policy.