PRIVACY
POLICY.
Last Updated: October 2026 • Chillax Studio Co., Ltd.
Who We Are & Scope
Welcome to Chillax Studio! We are Chillax Studio Co., Ltd., a game development studio incorporated under the laws of the Kingdom of Thailand and located in Hua Hin, Prachuap Khiri Khan, Thailand. We act as the Data Controller under Thailand's Personal Data Protection Act (PDPA) B.E. 2562 (2019).
This Privacy Policy outlines how we collect, process, protect, and handle data across all of our digital touchpoints: our official website (chillax.studio), our email newsletters, our Web-based games (e.g., Daily Rankings), our mobile games for iOS and Android (e.g., Yum Yum Mania), our PC games distributed via platforms like Steam (e.g., Chillax Yum Yum), and our upcoming games and experiences hosted on the Roblox platform.
What Data We Collect
We collect information to provide better services, sync game progress, secure leaderboards, and communicate with you. The types of data we collect include:
1. Information You Provide to Us
Your email address when you voluntarily sign up for our newsletter, register for playtesting (beta access), or send support inquiries directly to our team.
2. Automatically Collected Gameplay Data
Game state information, progress records, high scores, levels unlocked, and in-game purchase receipts. We also collect device specs, operating system versions, IP addresses, approximate geographic location (country level), and unique device advertising identifiers (such as Apple's IDFA or Google's GAID).
3. Third-Party Platform Data
- Steam: We access your Steam ID, account avatar, achievements, and session metadata required for PC matchmaking and telemetry.
- iOS & Android: We access unique secure identifiers from Apple Game Center or Google Play Games to authenticate player profiles and load cloud saves.
- Roblox: When playing Chillax Roblox experiences, we may log Roblox User IDs, in-game purchase states (Robux assets), and session analytics via Roblox's standard developer APIs.
Website Analytics & Cookies
We use first-party analytics to improve our website: pages viewed, approximate active time, sections visited, outbound link clicks, referral websites, broad browser/device details and estimated country. Random cookie identifiers are stored as hashes; we do not use device fingerprinting or advertising cookies for this measurement.
No raw IP addresses are stored in our analytics database. Your IP is processed temporarily for security and a local country lookup. We do not record precise locations, full referral URLs or URL query strings. Essential hosting and security processing is separate from this setting.
Browser identification cookies last up to 90 days; visit cookies last 30 minutes after the last pageview. Analytics records are kept for up to one year. Analytics starts enabled. Save your choice below to turn it off or on for this browser; the preference cookie lasts six months. Turning it off stops measurement, removes analytics cookies and deletes analytics linked to this browser.
We honour Do Not Track and Global Privacy Control. Hidden, unfocused or idle pages do not add active time. Admin browsers are excluded, with a separate exclusion marker lasting up to 100 days. Essential cookies for security, sign-in and remembering your choice remain available. For access or deletion requests, contact hello@chillax.studio.
Purposes & Legal Bases Under PDPA
Under Thailand's PDPA, we process your personal data under the following legitimate grounds:
- Consent: For email newsletter subscription and promotional updates. You have the right to withdraw your consent at any time by clicking the "unsubscribe" link.
- Contractual Performance: To maintain and sync game progress, enable multiplayer matchmaking, manage leaderboard scores, verify virtual purchases, and deliver core gaming features.
- Legitimate Interests: To troubleshoot bugs, optimize server resources, detect and prevent cheaters (anti-cheat verification on Steam/PC), analyze website traffic, and answer customer support requests.
- Legal Obligation: To comply with applicable tax, financial reporting, and security laws of the Kingdom of Thailand.
Your Rights Under Thailand's PDPA
As a data subject under Thailand's Personal Data Protection Act, you possess statutory rights over your personal data. You may contact us at any time to exercise these rights:
Right to Access
Obtain copies of all personal data we process about you.
Right to Portability
Receive your personal data in a structured, electronic format.
Right to Erasure
Request that we delete your data (also known as the "Right to be Forgotten").
Right to Object
Object to how your data is processed, particularly for marketing.
Right to Restrict
Temporarily or permanently restrict processing under certain conditions.
Right to Rectification
Update or correct inaccurate or outdated information.
Note: You also have the right to withdraw your consent at any time, and the right to lodge a complaint with the Thailand Personal Data Protection Committee (PDPC) if you believe we have violated the PDPA.
Children's Safety & Roblox
Protecting young gamers is a core priority. Under Thai PDPA rules, processing children's data under a certain age (under 10 for absolute restrictions, or under 20 in general) may require verified consent from a parent or legal guardian.
We do not knowingly collect personal data from kids under 13. If we find that we have inadvertently gathered data from a child under 13, we purge it immediately from our active databases.
Roblox Integration Details: Our upcoming Roblox experiences adhere strictly to the Roblox Developer Terms of Service and Child Safety Regulations. Roblox user IDs and in-experience states are processed exclusively to run the gameplay experience inside the Roblox platform, and are never shared outside Roblox for profiling or ad-targeting.
Data Transfers & Security
Our databases and hosting providers (such as Vercel, Supabase, and Amazon Web Services) are located in the United States, Singapore, and Europe. By playing our games or using our site, you acknowledge that your information will be transferred internationally outside the Kingdom of Thailand. We apply industry-standard SSL encryption and strict database access controls to safeguard all data transfers.
Get in Touch
If you have any questions about this Privacy Policy, wish to request account deletion, or want to exercise your rights under the Thailand PDPA, please contact us at: