Privacy Policy – EduArtStories
Last updated: 22 October 2026
Effective date: 22 October 2026
Who we are
Our website address is: https://eduartstories.com.
EduArtStories is a personal website managed by Edu Mungan. The site exists to introduce and digitally archive Dayak-rooted stories and culture from Sejiram, Kapuas Hulu, West Kalimantan. Monetization is not the primary purpose.
Data Controller (Pengendali Data Pribadi):
Edu Mungan
Contact: contact@eduartstories.com
What personal data we collect and why
Comments
When visitors leave comments on the site we collect:
- The data shown in the comments form (name, email address, website if provided)
- Visitor’s IP address and browser user agent string (for spam detection)
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Contact form submissions
Data submitted through the contact form (name, email, message content) is used solely for responding to your inquiry. We do not store this data beyond what is necessary for communication, except when you explicitly request ongoing correspondence or newsletter subscription.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for one year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
We also use cookies and similar technologies for analytics via WordPress.com Stats (Jetpack Stats) to understand how visitors use the site. These help us improve performance and content. You can control or delete cookies through your browser settings.
Newsletter subscriptions
Email addresses collected for the newsletter are retained while you remain subscribed and may be sent periodic story updates via WordPress.com Newsletter / Subscriptions. You can unsubscribe at any time using the link in every email.
Embedded content from other websites
Articles on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and logged in to that website.
Legal basis for processing
Under Indonesia’s Personal Data Protection Law (UU No. 27 Tahun 2022), we process your data based on:
- Consent (persetujuan): Newsletter subscriptions, comment cookies
- Legitimate interest (kepentingan sah): Comment moderation, spam prevention, site analytics to improve content
- Legal obligation (kewajiban hukum): Responding to data subject requests, record-keeping if required by law
For data processing requiring consent, we obtain it freely, knowingly, specifically, and unambiguously before collecting the data.
Who we share your data with
We do not sell, rent, or trade your personal data. We only share data with service providers necessary to operate the website, and only to the extent required for those services to function:
- Hosting provider: WordPress.com (Automattic Inc.)
- Spam detection: Akismet (WordPress.com spam filtering)
- Gravatar: Profile pictures for approved comments (hash only)
- Analytics: WordPress.com Stats (Jetpack Stats)
- Newsletter: WordPress.com Newsletter / Subscriptions
We may also share data if required by Indonesian law or a valid legal request.
International transfers
Some of our service providers (hosting, analytics, email, Gravatar) are located outside Indonesia. By using this site you acknowledge that your data may be processed in other countries. We choose providers that maintain appropriate data protection standards.
How long we retain your data
| Data Type | Retention Period |
| Comments | While the article remains published. Deleted if article is removed or upon request by the commenter. |
| User profile data | Until user deletes account or requests deletion (administrative/legal exceptions apply) |
| Newsletter emails | While actively subscribed. Deleted shortly after unsubscribe request. |
| Analytics data | Typically 14–26 months in aggregated form |
| Login cookies | 2 days (2 weeks if “Remember Me” selected) |
| Comment cookies | 1 year |
Your rights over your data
You have the following rights regarding your personal data:
- Right to access
- Right to correct
- Right to delete
- Right to restrict processing
- Right to withdraw consent
- Right to object
- Right to data portability
Under Indonesia’s Personal Data Protection Law (UU No. 27 Tahun 2022), you also have these rights. To exercise any of them, please contact us using the details below. We will respond within the statutory timeframe.
Children’s data
Important notice regarding minors:
This website is primarily intended for adult readers and educators. Material suitable for younger readers (ages 4–17) is provided for use by parents, teachers, or guardians—not directly to children themselves.
We do not knowingly collect personal data directly from children under 18. If material on this site is used in educational settings involving minors, such use should occur under adult supervision and without direct data collection from children on this platform.
If you believe a child has provided us with personal data, please contact us immediately so we can delete it.
Data security
We use HTTPS and take reasonable technical and organizational measures to protect your data, including:
- Secure connection (HTTPS/TLS encryption)
- Regular platform security updates via WordPress.com
- Password protection for admin access
- Limiting data collection to what is necessary
No method of transmission or storage is completely secure. We cannot guarantee absolute security.
Data breach notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we are obligated under Article 46 of Indonesia’s Personal Data Protection Law to notify affected individuals and the relevant supervisory institution within 3 × 24 hours (72 hours) of discovery.
Notification will include:
- Description of the data involved
- Consequences of the breach
- Remedial measures taken or proposed
- Contact information for further information
If you are affected by such a breach, you will be notified directly via the email address we have on file.
Changes to this Privacy Policy
We may update this policy from time to time. The latest version will always be posted on this page with an updated date. Continued use of the site after changes means you accept the revised policy. We will notify registered subscribers of material changes.
Contact us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact:
Edu Mungan
Website: https://eduartstories.com
Email: contact@eduartstories.com
You may also file complaints with:
- Indonesia Data Protection Authority (Lembaga Pelindungan Data Pribadi)
- EU data subjects: Your local data protection authority under GDPR
We will respond to all inquiries within 3 × 24 hours as required by applicable law.
Version history 22 October 2026: Initial publication aligned with UU PDP No. 27/2022 and PP 33/2026 requirements