TONY555 ACCOUNTS
Account Privacy Notice
Updated 14 September 2026
This notice covers the Tony555 account and book-access service at tony555.com/books/access/. For questions about your account or personal information, contact puttichai@ayathai.com.
Information used to sign in
If you choose Google, Google shares your account identity with this website after you approve sign-in. We use and store your email address and Google's unique account identifier to create or recognize your Tony555 account. We do not store your Google password, profile photo, or Google sign-in token. The sign-in integration does not request access to your Gmail messages, Drive files, or contacts.
If you choose email, we send a temporary six-digit code to your email address. The account stores your email and creation time. Codes are stored as keyed hashes, expire after 10 minutes, and cannot be reused after successful sign-in.
Setting a Tony555 password is optional. We store only a salted, one-way password hash, with a server-held key used before hashing; never the readable password. You can set or reset it after fresh Google or email-code verification, or change it using your current password. Saving a password invalidates other Tony555 sessions. Your account and book permissions stay the same.
Your books and payments
When book purchasing is available, your orders and reading permissions are linked to your Tony555 account. If you upload a bank slip for verification, the image is sent to EasySlip. The book-access application does not retain that image after the request. It retains the order, verification outcome, bank transaction reference, amount, and reading permission. Account registration alone does not make a purchase.
Cookies and security records
We use a necessary session cookie to keep you signed in and protect requests. The account application also records limited, keyed identifiers derived from email addresses and IP addresses to restrict repeated sign-in attempts. The hosting provider may maintain operational access logs.
Service providers
Hostinger hosts this service. Google handles Google sign-in if you select it. Email delivery uses the configured email service. EasySlip handles bank-slip verification when you submit a slip. These providers process information needed for their respective functions under their own terms and privacy notices. The account application has no advertising trackers and does not sell account information.
Keeping and removing your information
Account and reading-permission records are kept while needed to provide your account and purchased access. Payment records may also be needed for accounting, disputes, and applicable retention obligations. Contact the email above to request access, correction, or deletion of your account information. Requests are handled by the site owner; account deletion is not currently self-service.
You can sign out at any time. You can also remove Tony555's Google connection in your Google Account settings. Removing that connection does not by itself delete your Tony555 account or payment records.