Controller and contact
The operator named below is DISIAR's data controller. This notice covers placement buyers, visitors and complainants. Contact the operator email for privacy questions, access, correction or complaints.
Privacy noticeEffective 6 September 2026 · Version 2026-09-07.1
Privacy
What DISIAR collects, why it is needed, who receives it, how long it is kept and the choices available to you.
Data we receive
We receive the submitted URL, category, public website or social profile metadata, authority confirmation, accepted document version and time, bot-verification result, payment amount and time, Stripe references and checkout email. We also receive aggregate site traffic data, DISIAR listing metrics, security logs and support messages.
Sources and purposes
Data comes from you, your browser, Stripe, the submitted public destination and our operational providers. We use it for checkout, 72 hour placement contributions, ranking, fraud and duplicate detection, complaints, security, audit, accounting and legal compliance.
Required data and choice
The URL, category, authority confirmation, current legal acceptance and bot verification are required to add a free listing. The amount and Stripe checkout data are required only for a score top-up. Checkout email is used for receipts and fulfilment. You can block or clear browser storage, but visitor estimates or saved preferences may then be unavailable or less accurate.
Public information
Listing name, URL, category, logo or avatar, preview, description, score, rank, time, amount, views, clicks and CTR may be public through pages, feeds, datasets, APIs, embeds, reports and verified event receipts. Checkout names and emails, access tokens, full Stripe IDs and card data are not public.
Cookies and measurement
A random DISIAR visitor identifier can last up to 12 months; the server stores a hash to deduplicate visitors and estimate who is online. GoatCounter measures aggregate visits, referrer domains, page paths and approximate country without analytics cookies, local storage, cross-site tracking or a persistent analytics identifier. Cloudflare Web Analytics measures aggregate page performance and Core Web Vitals through a browser beacon without cross-site tracking. Query strings, URL hashes, admin and API routes, localhost traffic and browsers that send Do Not Track are excluded by DISIAR where supported. DISIAR installs no tracker on listed websites.
Sharing and transfers
Data is shared as needed with Stripe for payments, GoatCounter for public aggregate analytics, Cloudflare for aggregate web performance, infrastructure providers for hosting and security, and authorities where required. Providers may process data outside Malaysia under their own contracts and safeguards. We do not sell buyer contact data.
Retention
Transaction, advertising, refund, dispute and provider event records are kept for at least three years, and longer where accounting, tax, claims, investigations or law require it. Click and view deduplication events are removed after about 45 days; pseudonymous visitor records are removed after 13 inactive months. Aggregate GoatCounter and Cloudflare Web Analytics statistics follow their service retention settings and policies. A lawful public record may remain as all time history.
Security and rights
We use HTTPS, hosted checkout, webhook signatures, hashed tokens, HttpOnly cookies, access controls and idempotency records. No system is risk-free. Subject to law, you may request access or correction, withdraw optional consent, object to certain processing, request eligible deletion, and complain to Malaysia's Personal Data Protection Commissioner.
Operator details
LH Tech Solution, registration 202603222669 (003882058-X). V2-02-13 Goodyear Court 9C, Persiaran Mulia, 47630 Subang Jaya, Selangor, Malaysia. Contact [email protected] or +60 13-782 6835.