Privacy Policy
The short version
- Visitors: you do not need an account. We set no cookies, run no analytics or advertising trackers, and do not ask for your name or email.
- Standard technical data: like any website, the services that deliver this site receive your IP address and browser details when your browser requests a page.
- Staff: the few people who sign in to manage content give us an email address and a password (stored only in scrambled form), and the entries they write are linked to their account.
- We do not sell personal data and we do not use it for marketing or profiling.
- Philippine residents have specific rights over their personal data. They are explained in our Data Privacy notice.
Who we are
Our Bohol is an independent guide to the towns, events, programs and places of Bohol, Philippines, published at ourbohol.com. It is not affiliated with any government office. “We”, “us” and “our” mean the people who run Our Bohol.
What we collect
When you browse the site
We do not collect personal information from you directly. Technical information is handled automatically by the services that host the site (see Who handles the data):
- your IP address, browser and device type, the page requested and the time of the request, kept in routine server logs;
- the same details are received by our database service when your browser loads the published listings shown on the map.
Everything else you do on the map, such as searching, filtering, rotating or selecting a town, happens inside your browser and is not sent to us. Fonts, images and map data are served from our own domain.
When you sign in to manage content (staff only)
Public sign-up is turned off. An administrator creates each account. For staff we process:
- email address, role (administrator or contributor), and the time of your last sign-in;
- your password, which is stored only as a one-way hash and cannot be read by us;
- the entries, photos and edits you submit, and a record of who made which change and when (the history shown in the content editor).
Content that is published
Entries and photos appear publicly. Photo credits show the creator’s name and licence, because the licences require it. If you submit a photo, make sure you have the right to share it, and do not upload pictures of identifiable people without their permission.
Cookies and similar technologies
Visiting the public site sets no cookies. When staff sign in, their browser keeps a sign-in session in its local storage so they stay signed in, plus a small display preference (whether the admin menu is collapsed). Neither is used for tracking, and both can be cleared by signing out or clearing site data.
Who handles the data
We use these service providers to run the site. They process data on our behalf under their own terms and security practices.
| Provider | What it does | Data involved |
|---|---|---|
| Vercel Inc. (United States, global network) | Hosts and delivers the website | IP address, browser details, requested pages |
| Supabase Inc. (database located in Tokyo, Japan) | Stores listings and photos, and handles staff sign-in | Published content; for staff, email, password hash, entries and edit history; IP address of requests |
We do not use advertising networks, analytics services, social-media pixels or embedded third-party widgets.
International transfers
The providers above operate outside the Philippines, so information handled by them may be processed in the United States, Japan or other countries where they operate. We choose providers that protect data in transit and at rest and give us contractual commitments about its handling.
How we use information
- to show and secure the website, and to find and fix technical problems;
- to let staff sign in, create and review listings, and keep an accurate edit history;
- to meet legal obligations and respond to requests about personal data.
We do not sell, rent or trade personal data, and we do not make automated decisions about people.
How long we keep it
- Server logs: kept by our hosting providers for the periods in their own policies.
- Staff accounts: kept while the person is helping run the site. When an administrator deletes an account, the email and sign-in details are removed and the person’s entries are no longer linked to them.
- Published entries and photo credits: kept for as long as they are published. A creator’s name stays in the credit while their photo is in use.
Security
The site is served only over HTTPS. Passwords are hashed. Access to the content system is limited by role, and the database enforces those limits itself, so the public cannot read staff information. No system is perfectly secure, so if a breach affecting personal data occurs we will notify affected people and the National Privacy Commission as the law requires.
Children
Our Bohol is a general travel guide and is not directed at children. We do not knowingly collect personal data from children. Staff accounts are for adults.
Your choices and rights
You can ask us to show, correct, delete or restrict the personal data we hold about you, and you can object to how it is used. The full list of rights and how to use them, including how to complain to the National Privacy Commission, is in our Data Privacy notice.
Changes to this policy
If we change how we handle information we will update this page and its effective date. Material changes affecting staff will also be communicated to them directly.
Contact
The email address of our data protection contact is being finalised and will be published here.
This policy describes how the site works today. It is a general description and not legal advice.