Easy CMS v1.48
esc
    ไทยGitHub

    Privacy policy

    What easycms.dev keeps, why, and where. Last updated 13 November 2026.

    easycms.dev is the website of Easy CMS, an open-source project run personally by Kanawut K. This page says what the site and its admin keep.

    Visitors

    • There are no visitor accounts or newsletters.
    • The contact form (the button in the bottom-right corner) keeps the type, the question, your email, your name if you give it and the page you sent it from, only to reply. It keeps no IP address, and messages are deleted after 365 days. Maintainers are told by email and Telegram (who sent it, not the question), and when Cloudflare Turnstile is on, Cloudflare checks that the sender isn’t a bot.
    • Visits are counted with Umami Cloud, which uses no cookies and keeps nothing that identifies you: the pages opened, the referring site, the country and the kind of device.
    • The site is hosted on Vercel, which keeps request logs (IP addresses included) for a short time to run the service.

    Maintainers (the admin)

    • Only invited maintainers can open /admin, signing in with Google. The site keeps their email address, name and Google account ID to know who they are, and a session cookie needed to stay signed in.
    • The admin’s emails, such as invitations, are sent through Resend. The email log keeps the recipient and subject for 30 days, never the content.
    • When a maintainer uses an AI feature, the text they chose is sent to the AI provider set up.

    Data from Google

    • Google Sign-In: the email address, name and account ID, only to sign maintainers in.
    • Google Drive (the drive.file scope): to store backups of the site’s database in a folder the app creates in the connected maintainer’s Drive. The app can see and change only the files it created, nothing else in the Drive.
    • Data from Google is not sold, used for advertising, used to train AI, or shared with anyone. Easy CMS’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
    • Access can be removed at any time at myaccount.google.com/permissions, or by disconnecting in the admin.

    Where it is kept

    The database is on Turso, uploaded files on Vercel Blob, and backups in the connected Google Drive. Secrets entered in the admin, such as API keys, are encrypted before they are stored.

    Contact

    Questions or requests to delete data: GitHub Issues. Thai: /th/privacy.