Privacy Policy

This website is an independent, non-partisan public-information project. It is an unofficial presentation of public audit reports, not an official website of the Municipality of Basey, Samar, or of the Commission on Audit (COA).

For the limited personal data this site processes, the site operator acts as the personal information controller under the Data Privacy Act.

This is a read-only, informational website. It has no accounts, forms, or payments, so we do not collect your name, email address, or any information you submit.

We do collect the following automatically:

• Cloudflare Analytics: the pages you visit, the approximate country or city you browse from, your browser and device type, the page you arrived from, and the time of your visit. This data is aggregated and Cloudflare Analytics does not use cookies.
• Hosting and network logs: your IP address and standard request details, kept briefly by Cloudflare and Vercel for security and reliability.
• Theme preference: your chosen light or dark theme is saved in your browser’s local storage, on your device only.

Public officers acting in an official capacity (for example, elected officials and officers identified as accountable in an audit observation) may be named when the source report names them and the name is relevant to the audit record. Publication here does not imply wrongdoing or liability.

To reduce privacy risk, the app-facing dataset excludes or redacts private home addresses, personal telephone numbers, full bank or account numbers (shown only in masked form with only the last four digits visible), names of private individuals appearing as payees or personnel, and names of private aid or disaster-relief recipients. If you find personal data that should not be displayed, contact the operator at support@basey.app for prompt review.

Masked account numbers and omitted payee and personnel names remain fully identifiable in the official COA PDF. Use the original report on the Audit Report PDFs page for an authoritative record.

We use analytics to understand which pages people read, so we can keep the presentation accurate and useful. Network logs protect the site against abuse. We do not use this data to identify you, build a profile, or market to you.

Under the Data Privacy Act, this processing rests on our legitimate interests as the site operator (Section 12(f) of the Act and Rule V of its Implementing Rules and Regulations): maintaining a public-information reference site and keeping it secure.

This site does not set cookies. Cloudflare Analytics is cookieless, and your theme choice is stored locally in your browser rather than in a cookie.

We do not sell, rent, or trade personal data. We rely on a small set of service providers that act as personal information processors on our instructions:

• Cloudflare, for content delivery, protection, and Web Analytics.
• Vercel, which hosts the application and serves pages.
• GitHub, which hosts the private source code of this site.

These providers may process data outside the Philippines. Where they do, the transfer follows the accountability and cross-border safeguards of the Data Privacy Act, and we require comparable protection through their data-processing terms.

Cloudflare Analytics keeps aggregated reports and does not retain data in a form that identifies you. Network logs are kept only as long as needed for security. If you contact us, we keep your message only as long as needed to respond.

We apply reasonable organizational, physical, and technical measures under Section 20 of the Act: HTTPS encryption in transit, Cloudflare’s network protection, restricted access to the site’s administration, and routine updates to its software.

Under the Data Privacy Act you have the right to be informed, to object, to access and correct your data, to suspend, withdraw, or block processing of your data, to data portability, and to damages for unlawful processing.

Because we collect so little, most of these rights rarely apply in practice. If you believe any personal data of yours was processed, contact us and we will respond within the period set by the Act.

Should a security breach put your personal data at risk, we will notify the National Privacy Commission and affected individuals as required by Section 20(f) of the Act, within seventy-two (72) hours of knowledge of the breach.

This site is general-audience and does not knowingly collect information from children.

We may update this policy as the site changes. The date at the top of this page reflects the latest revision.

For questions, concerns, or requests about your personal data, contact the site operator at support@basey.app.