Cookie Policy
Effective 6 September 2026. The third-party and on-device lists below were last verified against the running code on 29 September 2026.
1. Do you need a consent banner?
No — and that is deliberate. LigtasPH sets only strictly-necessary cookies (below), runs no analytics, no advertising, and no cross-site trackers. Philippine law has no cookie-banner requirement, and consent banners for strictly-necessary storage would be pure friction on an emergency-information site. If tracking is ever added, this page and the site will gain an opt-in banner first.
2. Cookies this site sets
| Name | Purpose | When set | Expires |
|---|---|---|---|
session | Signed session: administrator sign-in state, CSRF protection, one-time notices. HttpOnly, SameSite=Lax, Secure on HTTPS deployments. | Staff sign-in, or any page that flashes a notice | 4 hours of inactivity |
That is the entire list. There are no analytics, advertising, or third-party tracking cookies.
3. On-device storage (not cookies, stays in your browser)
| Key | Purpose |
|---|---|
ligtasph_theme, ligtasph_lang, ligtasph_ann_city_v1, ligtasph_ann_pos_v1 | Theme, language, saved city, last known position for relevant lookups |
ligtasph_ann_ack_*, ligtasph_ann_cache_v1 | Which banners you dismissed; offline announcement cache |
ligtasph_splash_seen, ligtasph_build_id_v1, ligtasph_data_age_v1, ligtasph_dir_perpage, ligtasph_hl_perpage | Splash animation skip, detected build version, cached data-age stamp, remembered page sizes |
ligtasph_group_session_v1, ligtasph_group_rows_v1:*, ligtasph_member_token_v1:* | Only if you join an emergency group: the group code, your chosen display name, your edit token, and a snapshot of the roster last seen on this device. Removed when you stop sharing or clear site data |
| Service-Worker cache | Offline map shell, datasets, and tiles (never group live locations) |
4. Third parties
Map tiles (OpenStreetMap, CartoDB), the Leaflet map library (unpkg), and Mapbox (when configured) receive the standard technical data any web fetch reveals (IP address, requested URL) but set no cookies through our pages to our knowledge as of the date above. Fonts and icons are self-hosted and contact no third party. Outbound links (Google Maps, Waze, PAGASA) are governed by their own policies once you click through.
5. Managing this
Clear cookies and site data in your browser settings to sign out everywhere and erase on-device preferences. Blocking all cookies still lets you read every public page; only staff sign-in will stop working. Verify all of the above yourself in DevTools → Application → Cookies / Local Storage.