Privacy
Privacy Policy
This page explains what data is collected when you visit tax.atmo.co.id, why, how long it is stored, and what your rights are. It is written following Indonesia's Personal Data Protection Law (UU No.27/2022).
Site Operator
tax.atmo.co.id is operated personally by Vito Atmo, who acts as data controller for this site. Contact: hello@atmo.co.id.
Data We Collect
When you visit the site we collect: (1) Vercel Analytics: anonymised IP, device, browser, pages viewed. (2) Google Analytics: browsing activity, referral source, device, approximate city-level location. (3) Internal logs (search_log, page_views): search queries, page slugs, referrer, UTM, user-agent, session ID. (4) pv_sid cookie: a random session ID used to count unique sessions. We do not request your name, email, NPWP, or other identity data unless you email hello@atmo.co.id or fill in the partner form.
Purpose
Data is used to understand which content readers find relevant, improve writing quality, surface popular search topics for future content, and protect the site from abuse. We do not sell or rent your data.
Legal Basis
Processing relies on the operator's legitimate interest to run the site (Article 20 of UU PDP). For non-essential analytics cookies, consent is given by continuing to use the site after this notice.
Sharing With Third Parties
Analytics data is processed by Vercel Inc. (US) and Google LLC (US) as data processors. Internal data is stored on Supabase (Postgres) operated by Supabase Inc. We do not share data with advertisers or data brokers. Cross-border transfers are covered by standard contractual clauses.
Retention
Vercel & Google Analytics: per their respective policies (typically 14 to 26 months). Internal page_views and search_log: 24 months, then deleted or aggregated. pv_sid cookie: expires when the browser session ends.
Your Rights
Under UU PDP you have the right to: be informed about your data, access it, correct it, delete it, withdraw consent, and object to processing. Send requests to hello@atmo.co.id with enough information for us to verify your identity.
Security
Data is transmitted over HTTPS and stored on trusted provider infrastructure. Admin access is restricted to magic-link login. No system is fully risk-free; material incidents will be disclosed on this page.
Children
This site is not intended for children under 13. We do not knowingly collect data from children.
Changes
This policy may be updated to reflect practice or regulation. Material changes are marked by an updated date at the bottom of this page.
Contact
Privacy questions: hello@atmo.co.id.
Last updated: 2026-05-09