Introduction
Hello, welcome to another official page of Thăng Long IT!
Lately, I have been spending a ridiculous amount of time staring at the backend code of this website. If you read my recent posts about the custom Blogspot Admin Dashboard I built using Cloudflare Workers and D1 SQL databases, you probably noticed something intense. I created a feature that tracks incoming traffic in real-time. I could see IP addresses, device fingerprints, whether someone was on Wi-Fi or a 5G network, and even their battery percentage. Watching that raw data flow into my custom Telegram bot was fascinating, but a cold shiver went down my spine shortly after. I suddenly realized just how transparent and vulnerable we all are on the internet.
Holding that much information about you guys—my readers, my fellow coders, my friends—felt like holding a loaded weapon. I knew right then that I could not just operate this blog like a rogue developer doing whatever he wants. Balancing my heavy study schedule for the upcoming 2027 national high school exams (THPTQG) with running a tech platform means I do not have the time or the tolerance for legal grey areas. I need things to be crystal clear, highly secure, and fiercely protective of your identity.
I needed a rock-solid, transparent privacy policy. I needed to look you directly in the eye (virtually, at least) and tell you exactly what happens under the hood when you click on a Thăng Long IT link, download a template, or leave a comment complaining about a broken code snippet.
The Wake-Up Call: A Personal Reality Check
Just like the unpredictable and devastating typhoons that battered Northern Vietnam over the past two years, the internet can transform into a highly hostile environment overnight. A few months ago, I was reviewing our server logs and noticed a massive spike in automated traffic. A botnet was aggressively trying to scrape all our custom Lantro UI and T-Plus UI templates. My firewall had to block over 50,000 malicious requests in a matter of minutes.
To defend against that, I needed to log IP addresses and analyze behavioral patterns. But where do we draw the line between necessary security tracking and creepy, invasive surveillance? That exact question forced me to completely rebuild the way Thăng Long IT handles your data. I refuse to be part of the dark data-broker economy where your email addresses are sold for pennies to spam marketers. You come here to learn, to read my late-night rants, and to grab free code. The absolute least I can do is build a digital fortress around your identity while you are here.
The Ironclad Legal Foundation (Updated for 2026)
Vietnam’s digital landscape has shifted aggressively. Back in 2024, data privacy was treated like a suggestion. Websites tracked everything, and nobody cared. But sitting here in late 2026, the game has fundamentally changed. The government dropped a heavy hammer on data brokers and reckless webmasters. I spent the last three weeks burying my head in legal documents just to make sure Thăng Long IT is not only morally sound but legally bulletproof.
Let me break down the exact legislative frameworks I am binding this blog to. I am not hiding behind dense, unreadable legal jargon. Here is the raw truth about the laws governing your data on this site.
Luật Bảo vệ dữ liệu cá nhân 91/2025/QH15
This is the absolute core foundation of our privacy commitment. The Luật Bảo vệ dữ liệu cá nhân 91/2025/QH15 (Law on Personal Data Protection) treats your digital footprint as your fundamental personal property. As a website that collects and processes personal data—which happens the second you leave a comment, subscribe to notifications, or trigger our security firewall—this law represents my highest operational priority.
Under this law, I am legally obligated to practice "Data Minimization." This means I only collect the absolute bare minimum required to keep this site functioning. I do not ask for your phone number. I do not track your physical home address. I do not run invasive scripts to see what other tabs you have open. I collect exactly what is needed to serve you a webpage and nothing more. Furthermore, this law mandates explicit consent. By continuing to browse Thăng Long IT, leaving comments, and interacting with our custom API tools, you are giving informed consent for the specific, limited data processing outlined on this very page.
Nghị định 356/2025/NĐ-CP
This decree sent shockwaves through the Vietnamese blogging community, and for good reason. Nghị định 356/2025/NĐ-CP outlines brutal administrative sanctions and financial penalties for the unauthorized sharing, leaking, or mishandling of user data. A guy I know who runs a local news aggregate site got slapped with a devastating fine because a rogue third-party WordPress plugin he installed was silently scraping his users' email addresses and selling them to a marketing agency.
Hearing that story made me audit every single line of JavaScript running on Thăng Long IT. It completely changed how I configure Google Analytics and Cloudflare. Because of this decree, I actively strip out third-party trackers that do not meet my strict security standards. I am legally accountable for the tools I plug into this site, and I take that financial and moral liability incredibly seriously.
Nghị định 330/2026/NĐ-CP
This is the newest piece of legislation, fresh off the press in 2026. Nghị định 330/2026/NĐ-CP deals directly with cross-border data transfers and automated data processing. Why does this matter to a simple blog? Because Thăng Long IT runs on Google's Blogger platform. Our images are hosted on Google's global servers. Our DNS routing and DDoS protection are handled by Cloudflare, a global network. My custom API management tools utilize Cloudflare Workers, hitting servers all around the world.
This decree dictates that I must guarantee that the foreign platforms I use adhere to security standards equivalent to Vietnam's domestic laws. I spent sleepless nights verifying the compliance certificates, Standard Contractual Clauses (SCCs), and data routing policies of Google and Cloudflare. I configured our Cloudflare edge servers to prioritize routing through regional data centers, ensuring your connection remains as localized and secure as technically possible.
Demystifying Our Data Collection: What You Expose
So, what exactly am I hoarding from you? Let's trace the exact journey of your data when you type thanglongit.com into your browser. I hate websites that act like they do not track you while secretly running twenty hidden scripts. Here is the unfiltered reality.
1. Infrastructure and Security Logs (The Cloudflare Layer)
Before your browser even sees the design of my blog, your request hits our Cloudflare firewall. Cloudflare acts as a massive bouncer for Thăng Long IT. To determine if you are a real human studying for an IT exam or a malicious bot trying to crash my server, Cloudflare logs specific technical details.
This includes your IP address, your browser type (User-Agent), the specific page you requested, and the timestamp of your visit. I use this data strictly for threat mitigation. Remember my custom dashboard that tracks battery percentages and 5G connections? I deliberately hardcoded restrictions into my Worker scripts to anonymize the last octet of your IP address before it ever hits my D1 SQL database. I do not need to know the exact street you live on in Hanoi or Ho Chi Minh City. I only need to know if a synchronized DDoS attack is originating from a specific ASN. Once the security threat is evaluated, the raw granular data is automatically purged.
2. User-Provided Information (Comments and Interactions)
When you scroll down to the bottom of a post to ask a question about a tricky CSS bug, you interact directly with the Blogger API comment system. You provide a display name, potentially an email address linked to your Google account, and the text of your comment.
This information is processed and stored on Google's secure servers. I read every single comment. I reply to them. But I absolutely do not harvest your email addresses to build a spam list. Your public profile and the content you write are visible to anyone visiting the site, so I highly recommend you do not post sensitive personal information, phone numbers, or passwords in the comment section. Once you hit publish, it becomes part of the public domain of this blog.
3. Custom API and Tool Usage
Thăng Long IT is famous for sharing unique tools—like the Blogspot Info Extractor or the Sitemap URL Grabber. When you input a target URL into these tools, the request is processed client-side (in your own browser) or routed through our secure API endpoints. I do not log the specific URLs you are researching. If you are using my tool to analyze a competitor's blog, your secret is safe. The tools are built for utility, not for data harvesting.
Cookies, AdSense, and the Third-Party Web
Let's talk about the elephant in the room: Cookies and Advertisements. Servers are not free. Domain names cost money. The late nights I spend writing thousands of lines of code require a lot of coffee. To keep Thăng Long IT entirely free for you, I run Google AdSense.
Google AdSense uses cookies—tiny text files stored in your browser—to serve advertisements. Historically, these cookies tracked your browsing habits across the internet to show you "personalized" ads. If you looked at a pair of sneakers on an e-commerce site, AdSense would show you ads for those exact sneakers here on Thăng Long IT.
However, strictly complying with the 2025 and 2026 privacy decrees, I have overhauled our consent framework. When you visit Thăng Long IT for the first time, you have absolute control over this. If you opt-out of personalized tracking, you will still see advertisements (which keeps the blog alive), but they will be contextual. That means the ads will be based on the article you are currently reading—like tech gadgets on a coding post—rather than your secret browsing history. Google uses the _ga cookie for basic analytics (counting how many people visit a page), but it is configured to anonymize IP addresses by default.
The External Wilderness: Third-Party Links
I share a massive amount of external resources. I link to Github repositories, download servers for templates, news articles about Youtubers, and official documentation. The moment you click one of those links and leave thanglongit.com, you are stepping back into the wild west of the internet.
My privacy policy stops at the border of my domain. I cannot control what a third-party file-hosting site does with your data. I cannot guarantee that a random news site won't inject invasive trackers into your session. While I try my best to only link to reputable, safe sources, you must exercise your own digital street smarts. Always check the privacy policies of the sites you visit. Do not blindly trust a link just because it was posted on Thăng Long IT; verify it yourself.
Your Arsenal of Rights
Under the heavy protection of the new Vietnamese legal frameworks, you are no longer a passive consumer. You are the undisputed boss of your own data. I respect that hierarchy. Here is what you can demand from me at any time:
- The Right to Access: You want to know exactly what footprint you have left on Thăng Long IT? Send me an email. I will query the backend databases, pull your comment history, and send you a transparent log of your interactions.
- The Right to be Forgotten (Erasure): If you decide you no longer want to be associated with this blog, just say the word. I will run a script to scrub your name, your comments, and your identity from our Blogger backend. You have the right to vanish without a trace.
- The Right to Restrict Processing: You can block cookies via your browser settings at any time. You can use ad-blockers. (Though I did write a script to counter ad-blockers recently to protect the site's revenue, you still retain the technical right to try!). I will never force you to hand over personal data just to read a standard blog post.
Our Security Infrastructure: The Fortress
Security is my personal obsession. I do not just rely on Blogger’s default, out-of-the-box settings. I actively implement strict Content Security Policies (CSP) to prevent cross-site scripting (XSS) attacks. I enforce strict HTTPS encryption so that your connection to Thăng Long IT cannot be intercepted by someone sitting on the same public Wi-Fi network at a cafe.
The APIs I use for notifications—like the Resend email integrations and Telegram webhooks I showcased in previous tutorials—utilize highly encrypted tokens. These tokens are securely stored as environmental variables in Cloudflare Workers. If you press F12 and inspect the source code of this page, you will not find a single hardcoded API key or database password. I learned my lesson early on in my coding journey when a careless mistake compromised a small project. That will never happen on the main Thăng Long IT platform.
In the highly unlikely event of a catastrophic data breach where our Cloudflare or Google infrastructure is compromised, I have a strict 72-hour protocol in place. I will immediately post a public notification on the homepage detailing exactly what happened, what data was exposed, and what steps you need to take to protect yourselves, fulfilling the exact breach-notification requirements mandated by the 2026 decrees.
The AI Scraping Threat
As someone who writes passionately about technology and the evolution of AI, I have watched massive corporations scrape the internet dry to train their Large Language Models. You might wonder if the comments you leave here, or the personal stories we share, are being sucked into a machine learning algorithm.
Thăng Long IT takes a firm, aggressive stance on protecting user-generated content. I have configured our robots.txt file and implemented Cloudflare Bot Management rules specifically designed to block unauthorized AI crawlers from scraping this site. Your comments and interactions belong to you and this community, not to a billion-dollar tech company looking for free training data.
Future Changes and Final Thoughts
Updating this privacy policy is not a "set-it-and-forget-it" chore for me. As the Vietnamese legal framework continues to evolve, so will this page. If the National Assembly passes another decree next month, I will be back here, rewriting these sections to ensure total compliance. However, I promise I will not spam your inbox or ruin your reading experience with massive, annoying pop-ups about "Updates to our Privacy Policy" unless there is a fundamental, massive shift in how I handle your actual data.
Writing this document was not easy. It took hours of research, translating rigid legal Vietnamese frameworks into plain, honest English. But I respect you too much to just copy and paste a generic, soulless template from a free generator website. You spend your valuable time reading my deep dives into the downfall of early YouTubers, downloading my CSS tweaks, and commenting on my late-night coding struggles. The absolute least I can do is protect your digital identity while you are here.
If you have any questions, any doubts, or if you just want to geek out and chat about web security, drop a comment below or use the contact form. I read everything. I respond to everything.
Thank you for being here, and thank you for trusting Thăng Long IT. Remember to hit the green bell icon in the bottom right corner to get the latest notifications!
Copyright © Thăng Long IT