Privacy notice · Notis privasi
We collect as little as we can.
This notice explains, in plain words, what personal data TepStat handles and why, in line with Malaysia’s Personal Data Protection Act 2010 (PDPA). Last updated: 13 October 2026.
Who we are
TepStat, a sole proprietorship registered in Malaysia [SSM-NO], run by KD (Kasturi). Contact for privacy questions: privacy@tepstat.com.
What we collect
| What | Why | How long |
|---|---|---|
| Nothing to read the site. No account, no sign-up, no advertising or tracking cookies. | — | — |
| Page-view counts (Cloudflare Web Analytics: no cookies, no fingerprinting, no personal profile) | To know which pages are useful | Aggregated by Cloudflare |
| Technical logs (IP address, browser, time) kept by our host Cloudflare for security | To keep the site safe and working | Short-term, per Cloudflare’s policy |
| Your email and what you write, if you email us | To reply and fix errors you report | Up to 24 months, then deleted |
| Your email, if you subscribe to the newsletter (when it opens) | To send the newsletter you asked for | Until you unsubscribe |
What we never do
- Sell or rent personal data.
- Show ads or let advertisers track you.
- Publish data about individuals. Our maps and stories use only grouped (aggregate) statistics.
Who processes data for us
Cloudflare, Inc. (hosting, security, analytics) and our email provider. They may process data outside Malaysia under their own safeguards. We share personal data with no one else unless the law requires it.
Your rights under the PDPA
You can ask to see the personal data we hold about you, correct it, or withdraw consent and have it deleted. Email privacy@tepstat.com. We will reply within 21 days. Notices are available in English and Bahasa Melayu.
Security
The site is served over HTTPS only. Access to our email and hosting accounts uses strong passwords and two-factor authentication.
Changes
If this notice changes, we update the date at the top and describe the change here.