Privacy Policy
Last updated: 2026-05-27
lingorm.fans is an anonymous messaging platform for LingOrm fans. This policy explains what data we collect, how we use it, and your rights. We've kept it short and plain — no legalese.
1. Who We Are
lingorm.fans ("we", "us", "the platform") is an independent, unofficial fan project — not affiliated with, endorsed by, sponsored by, authorized by, or in any way representative of Sirilak Kwong (known professionally as Lingling Kwong), Kornnaphat Sethratanapong (known professionally as Orm Kornnaphat), or any of their management companies, talent agencies, or affiliated organizations.
You can reach us at support@lingorm.fans.
2. What Data We Collect
Account holders (recipients)
- Email address and hashed password (for sign-in and account recovery)
- Optional: username, display name, bio, profile avatar
- Subscription status if you subscribe to Purple — payment is processed by Stripe; we never see your card number or billing details
Message senders
When an anonymous message is sent through the platform, we store alongside the message:
- A one-way hash of your IP address (not the raw IP)
- A one-way hash of your browser's user-agent string
These hashes cannot be reversed to identify you under normal circumstances. They exist solely to detect and prevent abuse — spam, coordinated harassment, ban evasion. We do not attempt to re-identify senders, and we never offer sender-identification as a product feature.
Analytics
We use Pirsch Analytics — a privacy-friendly, cookie-free analytics service made and hosted in Germany, fully compliant with GDPR, CCPA, and PECR. Pirsch collects aggregate data only: page URLs, referrers, device types, and approximate geographic region (country level). No cookies are set. No personal data is stored or linked to analytics.
Infrastructure providers
- Cloudflare sits in front of our servers for DDoS protection and content delivery. They may temporarily process your IP address as part of normal traffic routing.
- AWS SES processes outbound transactional emails (signup confirmation, password reset). Your email address is transmitted to AWS for this purpose only.
- Cloudflare R2 stores uploaded files (e.g. profile avatars).
3. How We Use Your Data
| Data | Purpose |
|---|---|
| Email + password hash | Sign-in, account recovery |
| Username / display name / bio / avatar | Your public profile |
| IP hash + user-agent hash (on messages) | Abuse detection and ban enforcement |
| Stripe data | Purple subscription billing — processed entirely by Stripe under their own privacy policy |
| Pirsch Analytics | Understanding traffic patterns to improve the platform |
We do not sell your data. We do not share your data with advertisers. We do not run ads. Ever.
4. Data Retention
| Data | Retained until |
|---|---|
| Account data (email, profile) | You delete your account |
| Messages (including sender hashes) | The message is deleted by the recipient or sender |
| Pirsch Analytics | Aggregate only — no individual records; Pirsch's own retention policy applies |
| Stripe billing records | As required by Stripe's terms and applicable financial regulations |
Because sender hashes are stored as part of the message record, deleting a message also removes its associated hashes.
5. Anonymity — What It Means Here
Senders are anonymous to recipients and to the public. We store hashed sender metadata as described above. A few caveats to be aware of:
- Legal orders. We may be required to respond to a valid legal order (court order, law enforcement request). If this occurs, we will disclose only what we are legally compelled to disclose.
- Abuse enforcement. We may use hashed sender data to enforce bans or block abuse. This does not involve revealing any identity to the recipient.
- No sender hints. We never offer, sell, or hint at sender identity as a product feature. This is a deliberate, permanent choice.
6. Your Rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, or to object to certain processing. To exercise any of these rights, email us at support@lingorm.fans. We will respond within 30 days.
Note for senders: because messages are anonymous, we cannot link sender hashes to a specific individual by design. If you sent a message and wish to have it deleted, you may ask the recipient to delete it, or contact us with sufficient context for us to investigate.
7. Children
lingorm.fans is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, please contact us at support@lingorm.fans and we will delete the account promptly.
8. Changes to This Policy
We may update this policy from time to time. The "last updated" date at the top reflects the most recent revision. Continued use of the platform after a change constitutes acceptance of the updated policy.
9. Contact
Questions about this Privacy Policy: support@lingorm.fans