Effective 2026-10-03
Publisher
Phạm Quang Huy publishes this portal under A81mation while the studio is being formed. A81mation is not an incorporated legal entity.
Information and purpose
Invited members and authorized administrators provide names, member codes, access levels and language preferences. The service stores passkey credential identifiers, public keys and device/security metadata, account locks, invitation and session records, hashed recovery codes and security events to provide member access and protect accounts.
Passkeys and access
Fingerprint, face and device PIN verification stay with your authenticator; this portal does not receive them. Raw session tokens stay in HttpOnly cookies. Recovery codes appear once and only their hashes are stored. Administrators can access internal information according to their access level.
Browser storage
First-party Secure, SameSite=Strict cookies provide the session, CSRF protection, a two-minute passkey ceremony binding and a one-year language choice. The session cookie ends with your browser session. Server access expires after 15 minutes idle or eight hours total; recovery access lasts at most 15 minutes. The CSRF cookie lasts up to eight hours or the issued session expiry. No visitor analytics, advertising trackers or external fonts are used.
Hosting and recipients
The selected application and database hosting region is Render Singapore. Render Services, Inc. is the hosting provider. Provider support, usage processing and subprocessors may process information in the United States or elsewhere; processing is not limited to Singapore. Current provider information is linked below.
Render privacy policyData processing agreementSecurity and subprocessors
Retention
Authentication and security records currently have no automatic deletion schedule. Invitation, challenge and session expiry limits their use; it does not automatically delete stored records. Retention of provider logs and backups depends on the configured provider service.
Requests
Contact the publisher to request information, access, correction, a copy or deletion of your data, or to raise a privacy concern. Identity may need to be verified before an account request is handled.