freesabaiPrivacy policy
Last updated: 5 Oct 2026
This page explains what freesabai's programs and this website collect, what it is used for, how long it is kept, who can see it, and how you can see, correct or delete your data, under Thailand's Personal Data Protection Act B.E. 2562 (PDPA). The Thai version is the original; this is a translation.
In short
- Your notes, tasks and files stay on your computer. We never receive them.
- The programs send usage statistics at most once a day. They carry a random ID for the installation but no name or content of yours, and you can switch them off in the program.
- Our database doesn't keep your IP address. We only use it to see your country and province, to choose ads and count statistics. Server logs keep shortened IP addresses, except error logs, which may hold full ones; all logs are kept 15 days at most.
- If you buy an ad-removal key, we keep your name and contact details for 5 years, or until you ask us to delete them.
- We don't sell personal data. Advertisers only see totals.
- This website uses no cookies and no trackers.
What this policy covers
The Windows programs LeafNote and ShareLocal, the website freesabai.com, the back-office service these programs contact (api.freesabai.com), and buying ad-removal keys. Programs or services not named here have their own policies.
Who is the data controller
Data controller: freesabai (the operator of the website and programs under this name)
Postal address: available on request by e-mail below
E-mail: contact@freesabai.com
There is no data protection officer (DPO) at present, because the legal threshold for one is not met. Contact us about personal data at the e-mail address above.
What we collect, by what happens
1. Data on your computer
Notes, tasks and settings (LeafNote) and shared files (ShareLocal) exist only on your computer. The programs never send them to us. Files the programs keep on your computer, such as the random installation ID (install-id.txt), the latest ads and any key you entered, can be deleted by you at any time. Where they are is explained on each program's page.
2. The programs download ads and holiday data
| When | When the program starts and every few hours while it runs (LeafNote fetches the holiday calendar once a day). This also happens with usage statistics off or with an ad-removal key, because the list of cancelled keys comes with the ads. |
|---|---|
| Data | Your IP address, the program name (User-Agent) and the time, which come with every internet connection. The program sends nothing else with these requests. |
| Why | To deliver the latest ads and holiday data, choosing ads for your country and province, which Cloudflare works out from your IP address. |
| Lawful basis | Legitimate interest (section 24(5)) in offering a free program funded by ads. |
| How long | The location is not recorded. The server's access log keeps a shortened IP address (e.g. 203.0.113.0) for 15 days at most; see Server logs. |
3. Usage statistics (on by default, can be switched off)
| When | Successfully sent at most once a day, while the program is running and statistics are on; the first time about 30 seconds after the program starts (LeafNote explains this in its welcome note; ShareLocal sends its first report only after showing a notice about it in its window). If sending fails because there is no internet or the server has a problem, it tries again every hour; if the server refuses it, it waits until the next day. |
|---|---|
| Data sent | A random ID for this installation (made by the program, not taken from the hardware, and not tied to any name or account), the program name, its version, the Windows version, the Windows language setting (e.g. th-TH: LeafNote sends the display language, ShareLocal the language and region format), whether an ad-removal key is in use, and how often each ad was shown each day, plus the IP address that comes with the connection. No notes, file names, computer name, user name or e-mail. |
| What we keep |
|
| Why | To know how many people use the programs, which versions and where; to tell the program about new versions; to report ad showings to advertisers accurately; and to filter out fake counts. |
| Lawful basis | Legitimate interest (section 24(5)). The data is limited to what is needed, and you can object simply by switching statistics off. |
| How long | An installation's record is deleted when we haven't heard from it for 13 months. Per-installation daily showings are deleted after 16 days. Daily totals without installation IDs are kept as statistics. |
| Switching off | LeafNote: right-click the icon and untick ส่งสถิติการใช้งาน (send usage statistics). ShareLocal: click สถิติการใช้งาน: เปิด (usage statistics: on) in the middle of the bar at the very bottom of the window to turn it off. The program keeps working as usual, but you won't be told about new versions (that information comes back with the report). Switching off stops future reports; to have an existing record deleted, see Your rights. |
4. When you click an ad
Ad links go through api.freesabai.com before taking you to the advertiser's site. Your browser sends its IP address and browser details as usual. We count one click per day, ad, program, country and province, as a total with no installation ID. Meanwhile the IP address is used in memory to filter repeated and fake clicks (transformed with a random value that changes every day, and gone when the day changes). This counting happens on the server, so it happens whether statistics are on or off. Lawful basis: legitimate interest (section 24(5)). The advertiser's site has its own privacy policy.
5. When you buy an ad-removal key
| Data | The name to put in the key, the contact channel used to send it (such as e-mail, LINE, Telegram or phone), the key's serial number, the purchase date, the price, the payment channel, and related notes. |
|---|---|
| Why | To issue and send your key, help with it, cancel keys that are misused, and keep records of income. |
| Lawful basis | Performance of the sales contract (section 24(3)), and legal obligation (section 24(6)) where tax or accounting law requires records to be kept. |
| Do you have to give it? | We need a name and a contact channel to issue and send a key; without them we can't issue one. The name in the key can be a nickname or a shop name. |
| Good to know | The name in a key can be read by anyone who has the key. Keys are checked on your computer and never sent to us. When a key is cancelled, its serial number (without the name) goes into a list every program downloads, so the programs stop accepting it. |
| How long | 5 years from the purchase, after which the system deletes the name, contact, price and notes itself and keeps only the serial number and status so the key can still be cancelled; or earlier if you ask (the key keeps working), unless the law requires keeping them longer. The conversation about the purchase also exists in the channel you used (such as LINE, Telegram or e-mail); we delete those chats or e-mails when you ask us to delete your data. |
6. When you visit this website
freesabai.com uses no cookies, no visitor analytics and no ads, and loads no fonts or scripts from anywhere else. The server keeps an access log with shortened IP addresses for 15 days at most, as in point 2. Lawful basis: legitimate interest (section 24(5)) in running the website and keeping it secure.
7. When you e-mail us
We receive your e-mail address, the name you send from and your message, to answer and follow up (legitimate interest, or steps before a contract when it's about buying a key). Mail to contact@freesabai.com is forwarded through Cloudflare to the operator's Gmail mailbox at Google. We keep it no longer than 2 years after the last contact, except mail about buying a key, which is kept as in point 5.
8. What you send yourself through the programs
- Google Calendar (LeafNote): when you add an item to Google Calendar, the program opens Google's page in your browser with the note's first line and text, the date and time, and the repeat rule. Google receives this as soon as the page opens; it falls under Google's policy and stays in your browser history. We don't receive it.
- On your local network (ShareLocal): ShareLocal announces your computer's name on the local network every 2 seconds so other computers can find it. Every device on that network can receive the announcement, and computers in the same group can see the names of files you share and download them. All of this stays on your network and never passes through us.
Server logs and backups
Lawful basis for everything in this section: legitimate interest (section 24(5)) in keeping the service running and secure and preventing abuse.
- freesabai's access logs keep shortened IP addresses (IPv4 cut to the first three parts, IPv6 to the first three groups), the time, the address of the page requested (without search terms or anything after a ?) and the program or browser name, for 15 days at most.
- Error logs may contain the full IP address of requests that failed or were rate-limited, kept 15 days at most.
- Rate limiting (against floods of requests and password guessing) holds IP addresses in memory for about 15 minutes at most and writes them nowhere.
- The database is backed up once a day on the same server and backups are kept no longer than 15 days, so deleted data may remain in backups for up to 15 days.
Who sees or receives data
- Cloudflare, Inc. provides DNS and sits in front of our server for security and speed. Encrypted connections are decrypted at Cloudflare, so it sees full IP addresses and the content of requests (such as usage reports), and it works out country and province from IP addresses. It also forwards mail sent to contact@freesabai.com.
- Hetzner Online GmbH rents us the server, located in Helsinki, Finland, which holds the database, logs and backups.
- Google (Gmail) provides the mailbox that receives your e-mail.
- The channels you use to buy a key, such as banks, PromptPay, LINE or Telegram, receive data under their own terms.
- Advertisers receive only totals of showings and clicks per ad, program, day, country and province, which don't identify anyone.
We don't sell, rent or trade your personal data, and disclose it to authorities only when the law requires.
Transfers abroad
Data is stored at or passes through providers outside Thailand:
- Our server (Hetzner) is in Finland, in the European Union.
- Cloudflare handles requests through data centres worldwide, normally the one nearest to you.
- E-mail you send us is kept in Google's Gmail, which stores data in the United States and other countries.
Thailand's Personal Data Protection Committee has not yet declared any country to have adequate protection, so transfers happen as follows:
- Key purchases and e-mail you send us: necessary to perform a contract with you or to act on your request before one (section 28(3)).
- Usage statistics, ad downloads and server logs: sent to providers bound by the EU's data protection law (GDPR) that have data processing agreements with us (Hetzner's and Cloudflare's). These agreements are not yet safeguards specifically approved by the Committee. If you don't want your usage statistics to go abroad, switch statistics off in the program.
How we protect data
All connections use HTTPS. The database holds no IP addresses and keeps installation IDs only in one-way transformed form. Deleted data is overwritten in the database file within an hour (backups expire as described under Server logs and backups). The admin pages require a password plus two-step verification, and keep a log of changes that holds no customer names or contact details. If a data breach poses a risk, we will notify the Office of the Personal Data Protection Committee within 72 hours where feasible, and the people affected when the risk is high.
Your rights
You have the right to access and get a copy of your data, to receive it in a machine-readable form, to object to its collection or use, to have it deleted or made anonymous, to restrict its use, to have it corrected, and to withdraw consent where we asked for consent. Send requests to contact@freesabai.com; we answer within 30 days.
- Statistics from the programs: we can't tell which record is yours. To see it or have it deleted, send us the text in install-id.txt (LeafNote: in the data folder next to the program, or %APPDATA%\LeafNote if the program sits in a folder it can't write to, such as Program Files; ShareLocal: %LOCALAPPDATA%\ShareLocal), then switch statistics off in the program, or delete that file to start with a new ID; otherwise the next report creates a new record.
- Key purchases: tell us the name or the key's serial number. We can delete the name, contact, price and the chats or e-mails about the purchase; the key keeps working. Parts the law requires us to keep are excepted.
- Minors and persons under guardianship can exercise their rights through their parent, guardian or curator.
If you think we are not following the law, you can complain to the Office of the Personal Data Protection Committee (PDPC): pdpc.or.th, online complaints at complaint.pdpc.or.th, phone +66 2 111 8800.
Minors
Our programs are for all ages and don't ask for anything that reveals age. Anyone under 20 should have a parent buy a key for them. Parents can see or delete a child's data as described under Your rights.
Changes to this policy
When a program or the service changes how data is collected or used, we update this policy and the date at the top. Significant changes are announced on this website before they take effect.