Last updated: September 2026
Unikorn (unikorn.vn) processes personal data in line with Vietnam's Decree 13/2023/ND-CP on personal data protection. Below is the data we keep, why we keep it, the services that process it with us, and how you exercise your rights.
1. Data we collect
Data you give us
- Account: name, email, password (stored as a one-way hash) and avatar. When you sign in with Google or GitHub, we receive your name, email and avatar from that account.
- Profile: the username, bio, website and social links you fill in.
- Content: products, comments, reviews, Talks, collections, changelogs, feedback and messages sent through the contact form.
- Buy a coffee: when you support a maker, we store the amount, payment method, transaction status and your message if you add one. Card details are handled by SePay; Unikorn does not store card numbers.
- Withdrawal details: if you are a maker receiving support, we store your bank name, account number and account holder name so we can pay out when you withdraw from your Unikorn wallet.
- Connected metrics: when a maker connects Google Analytics, GitHub, Stripe or Polar to a product, we store an encrypted access token and the metrics read from those services.
Data collected automatically
- Sign-in log: IP address, browser (user agent), country and time of each sign-up or sign-in, used to detect unusual sign-ins and spam accounts.
- Page views: a random visitor ID stored in a cookie, used to count views and unique visitors.
- Referral source: the UTM parameters of the link that brought you to Unikorn, saved to your account when you sign up.
- Activity: upvotes, points, level, badges and activity streaks.
- Cookies: see the Cookie Policy.
2. How we use it
- Running your account, signing you in, and showing your profile and the content you publish.
- Calculating points, levels, vote weight and rankings.
- Processing coffee payments and paying out withdrawals to makers' bank accounts.
- Sending verification emails, notifications and newsletters. You can turn off optional emails in your notification settings.
- Fighting spam, vote manipulation and abuse.
- Generating AI content: tips from the Uni assistant, AI product reviews, translations and email summaries.
- Measuring traffic to improve Unikorn.
- Meeting legal obligations.
3. Services that process data with us
Unikorn runs its own application servers and database. The external services below receive only the data their job needs:
| Service | Purpose | Data involved |
|---|---|---|
| Anthropic (Claude) | AI content for Uni, product reviews, translations and summary emails. If an administrator switches AI provider, OpenAI or Google may do this work instead. | Product information, post content and the context needed to generate a reply |
| Resend | Sending email and managing the newsletter list | Email, name, email content |
| Cloudflare R2 (S3-compatible storage) | Storing avatars, product images and files you upload | Files you upload |
| Cloudflare Turnstile | Blocking bots on forms such as product submission, contact, reviews and Talks | IP address, browser signals |
| SePay | Coffee payments by VietQR bank transfer, card and NAPAS | Amount, order code, transaction details |
| Google, GitHub | Signing in with an existing account | Name, email, avatar |
| Google Analytics, Microsoft Clarity, Meta Pixel | Traffic analytics, active only when an administrator enables them | Cookies, pages viewed, browser information |
| Scout QA | Quality checks on a product when its maker opts in | Product name and link |
| Google Analytics, GitHub, Stripe, Polar | Reading product metrics when a maker connects them | Encrypted access token, product metrics |
Some of these services run servers outside Vietnam, so data may be transferred abroad for processing. We send only the data each task needs.
4. Public data and sharing
- Profiles, products, comments, Talks and upvotes are public. In your privacy settings you can hide your profile, keep your name off leaderboards and hide your online status.
- Unikorn does not sell personal data.
- We provide data to competent authorities when the law requires it.
5. Security
- Connections are encrypted with HTTPS.
- Passwords are hashed and tokens for external services are encrypted.
- Only authorised administrators can access internal data.
- Data is backed up regularly.
6. Retention
We keep data while your account is active. When you email us to delete your account, we delete or anonymise your personal data, except payment and withdrawal records that accounting and tax rules require us to keep.
7. Your rights
Under Decree 13/2023/ND-CP you have the following rights over your personal data:
- To be informed that your data is being processed.
- To consent or refuse consent to processing.
- To access your data to view and correct it.
- To withdraw consent you have given.
- To erasure of your data.
- To restrict processing.
- To receive a copy of your data.
- To object to processing, including for marketing.
- To complain, denounce or sue as provided by law.
- To claim damages for a data protection breach.
- To self-protection as provided by law.
You can edit your profile, privacy and notification settings yourself in your account settings. To delete your account, get a copy of your data or exercise any other right, email [email protected] from the address linked to your account. We confirm that you own the account before acting on the request. Withdrawing consent or deleting data may stop some features from working for your account.
8. Minors
If you are under the age of majority under Vietnamese law, you need consent from a parent or guardian before creating an account.
9. Changes
When the policy changes, we update the date at the top. For significant changes, we notify you by email or with a notice on Unikorn.
10. Contact
For questions about personal data, write to [email protected].
