Privacy Policy
Effective 6 September 2026. This notice is required by the Philippine Data Privacy Act of 2012 (RA 10173).
1. What this service is
LigtasPH shows public evacuation-center listings, weather, hazards, hotlines, and emergency announcements for Metro Manila. There are no public accounts, no advertising, no analytics trackers, and no social-media widgets. Most pages work without giving us anything at all.
2. Data we process, and why
| Data | When | Purpose / basis | Kept for |
|---|---|---|---|
| Admin username + password hash | Staff sign-in only | Consent + legitimate operation of the service | Until an administrator removes the account |
| Page names you visit (no IP address, no user agent, no account link) | Every page view (server log table) | Legitimate interest: capacity planning and abuse detection | 30 days, then auto-deleted |
| Group display name + live coordinates | Only when you tap Share in an emergency group | Your explicit consent, given in the moment for rescue coordination | 2 hours, then expired automatically |
| City or coordinates you type or share | Weather / routing / announcement lookups | Consent; needed to answer the request | Temporarily cached server-side (weather cache, up to 1 hour) to avoid repeat upstream calls; never linked to identity or stored beyond the cache window |
| Rain intensity + optional city/coords | Only when you tap a rain-report button | Your explicit consent, to show community ground truth | Up to 24 hours (coordinates coarse-grained to ~100 m for city-level aggregation; only aggregate counts are ever displayed — no individual pins are shown or returned by the API; rows are pruned after 24 hours) |
| On-device preferences (theme, city, dismissed banners) | Stored in your browser only | Strictly necessary for the features to work | Until you clear site data; never sent to us except as above |
3. Who else sees data (third parties)
Depending on the page you open, your browser or our server contacts:
- Maps: Mapbox (only if configured), OpenStreetMap and CartoDB tiles — tile coordinates are inherent to loading a map.
- Weather/air/hazards: OpenWeather, Open-Meteo, USGS, NASA FIRMS (server-side; city or coordinates only).
- Libraries: unpkg (Leaflet map library only). Fonts and icons are self-hosted and served from this site, so no font or icon provider is contacted. No cookies are set by these on our pages.
- Outbound links you choose: Google Maps, Waze, PAGASA, Red Cross — their own policies apply once you leave.
No data is sold, rented, or shared for marketing. Ever.
4. Your rights (DPA 2012)
You may request access, correction, blocking, or deletion of your personal data, object to processing, and claim damages for violations. Contact the operator above; complaints may also go to the National Privacy Commission (privacy.gov.ph). Group pins delete themselves after 2 hours; anything else we hold about you is deleted on verified request.
5. Security and breaches
Passwords are hashed, admin sessions expire after 4 hours, traffic should run over HTTPS in production, and provider keys never reach the browser. If a breach poses real risk to you, we will notify you without delay and the NPC within 72 hours, as the law requires.
6. Children
This is general-audience emergency information with no age gate. Location sharing is strictly opt-in per tap — guardians should supervise minors using group sharing.
7. Changes
Material changes will be noted here with a new effective date. Continued use after changes means acceptance.