Stored in your browser, not submitted to a Sendtau database.
LEGAL / DOCUMENT ST-PRIV-001Privacy &
Privacy &
soul fragments.
A serious explanation of the ordinary data behind an unserious supernatural logistics company.
Effective 1 August 2026 · Version 1.0Page traffic and device categories, without advertising cookies.
The buttons perform comedy, not commerce.
This notice is written in plain English because legal clarity should not require a séance.
What this site actually is
Sendtau is a fictional parody website created for entertainment. It is not a registered supernatural logistics company, does not employ spirits, and does not sell curses, rituals, deliveries, subscriptions, financial products, or professional services.
All products, staff, customer reviews, order statuses, prices, testimonials, corporate claims, and “soul fragments” are invented. If a ghost claims otherwise, please ask to see its employment contract.
Information handled on your device
The cart stores product names, delivery tiers, and quantities in your browser’s local storage so they remain available when you return. The newcomer guide stores one timestamp locally for 30 days, solely so the Pocong does not repeat the same orientation speech on every visit. Weekly Haunting is a pre-written public schedule and stores no visit history or streak. Spiritdex stores which fictional spirits appeared, first and latest sighting dates, and the number of sightings on that device. Text entered into the Customer Case Generator is processed only in the open browser tab, is not transmitted, and is not retained by the generator after the page closes or reloads. The ghost personality quiz processes answers in the browser and stores only the final fictional ghost type and match score locally so a visitor can revisit their result. When launched, Build-a-Hantu will render character choices and exported PNGs entirely in the browser; remix links contain only the fictional configuration a visitor chooses to share. The fictional checkout temporarily stores the name, email address, recipient name, and order total you type in session storage so the fake payment screen can display a pretend receipt.
This browser-stored information is not submitted to Sendtau, a payment processor, a bomoh, or any server operated for this parody. Checkout details are removed when the fictional payment completes and are ordinarily cleared when the browser session ends.
Analytics and technical records
The site may use privacy-focused web analytics to understand aggregate visits, popular pages, referrers, approximate region, browser, operating system, and device type. The configured analytics service does not use advertising cookies and is designed to avoid identifying visitors across websites.
Hosting and security providers may also process ordinary technical request information—such as IP address, user agent, timestamps, and requested pages—to deliver the site, prevent abuse, diagnose failures, and keep dimensional gateways from becoming actual security incidents.
Forms, newsletters, and investor alerts
The newsletter, newsroom, investor-alert, checkout, and payment interfaces are demonstrations. They do not create accounts, send emails, take payments, subscribe you to a list, or transmit form entries to a Sendtau database.
Newsletter entries are deliberately discarded in the browser. Until a real function is introduced with a proper consent flow and updated notice, your inbox remains unhexed and your email remains unemployed.
Sharing and generated images
The Track Order page and, after launch, Build-a-Hantu can generate shareable parody images in your browser. Image creation happens locally on your device. If you use your browser or operating system’s share function, the destination service you choose handles the content under its own privacy terms.
Public designs intentionally omit recipient names, exact locations, payment details, ritual inputs, and private messages. Build-a-Hantu employee names are user-chosen and should remain fictional. The haunting may be fictional; oversharing is unfortunately real.
What we do not collect
We do not intentionally collect identity documents, card numbers, bank details, passwords, precise location, biometric data, religious beliefs, medical information, contact lists, private messages, supernatural affiliations, ancestral debts, or fragments of your soul.
Please do not enter sensitive or real third-party information into any parody form. There is no operational reason to tell a fictional courier your MyKad number, blood type, or neighbour’s full legal name.
Your choices and controls
You can remove cart information through the cart page or clear this site’s local and session storage in your browser settings. Browser privacy controls, content blockers, and “Do Not Track” features may also affect analytics and storage behaviour.
If Sendtau ever introduces real accounts, mailing lists, payments, or user submissions, this notice will be updated before those features begin collecting information, with appropriate choices, retention limits, security controls, and access or correction procedures.
Retention, disclosure, and transfers
Browser-stored demo data remains under your device’s control. Aggregate analytics and technical security records may be retained by infrastructure providers according to their documented settings and policies. Sendtau does not sell personal data or provide it to advertisers.
Infrastructure providers may process technical information outside Malaysia. Where real personal-data processing is introduced, applicable notice, security, retention, access, and cross-border requirements will be assessed properly—not by asking an intern to light a candle near the router.
REGULATORY CONTEXT
Built around real privacy principles.
This parody notice follows the practical themes of Malaysia’s Personal Data Protection Act 2010: notice and choice, purpose-limited disclosure, security, retention, data integrity, and access. It describes the site as it operates today and is not a substitute for legal advice.
QUESTIONS / CORRECTIONS
Contact the project →Found a privacy concern?
For this fictional project, use the site’s support contact. Do not send passwords, financial information, identity documents, ritual ingredients, or evidence from your family WhatsApp group.