Privacy Policy & Data Protection
Last updated: September 16, 2026 • Effective Date: September 2026
1. Our Commitment to Your Privacy
ReviewTayo is dedicated to safeguarding your personal data in accordance with the provisions of Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA) of the Republic of the Philippines, and international transparency standards.
We operate under the fundamental principle that preparing for the Philippine Civil Service Exam should be barrier-free and privacy-respecting. We do not require mandatory registration or personal data collection to access practice questions, mock tests, or syllabus study guides.
2. Third-Party Advertising & Google AdSense Disclosures
To provide free, high-quality civil service review materials to all Filipinos without mandatory subscription fees, we partner with third-party vendors, including Google, to serve advertisements when you visit our website.
- Google Advertising Cookies: Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites on the Internet.
- DoubleClick / DART Cookie: Google's use of advertising cookies enables it and its partners to serve ads to our users based on their visits to our platform and/or other sites across the World Wide Web.
- Opting Out of Personalized Advertising: Users may opt out of personalized advertising by visiting Google's Ads Settings at https://www.google.com/settings/ads or alternatively by visiting www.aboutads.info.
- EEA, UK, and Switzerland Visitors (Google-Certified CMP): For visitors accessing ReviewTayo from the European Economic Area (EEA), United Kingdom, or Switzerland, advertising consent is managed in accordance with Google's Certified CMP requirements under the IAB Transparency and Consent Framework (TCF v2.3) via Google Privacy & Messaging or a certified partner CMP.
- Distraction-Free Examinations: In strict compliance with our platform design principles, advertisements are strictly prohibited within active timed examination rooms, over exam questions, over multiple-choice options, or near examination navigation controls.
3. Information We Collect
A. Guest Practice & Browser Local Storage (Offline-First)
By default, ReviewTayo does not require you to create an account or provide identifying personal information to practice. Your test attempts, question bookmarks, study streak, and Mistake Bank entries are stored locally on your device in your browser's localStorage. This data never leaves your device unless you choose to export it.
B. Registered Account Data (When Enabled)
If you choose to register an account, we may collect your email address, display name, and authentication identifiers through Better Auth. We collect only what is strictly necessary to save your multi-device progress.
C. Contact & Feedback Submissions (90-Day Retention Limit)
When you submit an inquiry, question correction, or privacy request through our contact form, we collect your name, email address, inquiry category, and message text. We also store a salted, one-way hash of the submitting IP address for abuse prevention; the raw IP address is not stored with the inquiry. This information is processed exclusively to investigate reported typos, deliver technical support, answer user questions, and enforce submission limits. Submissions are retained for a maximum of 90 days, after which an authenticated daily cleanup permanently deletes them. If operator notifications are configured, only the inquiry reference number and category are sent to the notification service; the operator must use the protected review endpoint to access the inquiry itself. We do not sell or use contact form information for marketing or advertising.
D. System & Diagnostic Logs
We collect aggregated, anonymized technical telemetry (browser type, device screen resolution, page loading latency, error reports via Sentry) to fix bugs and optimize mobile responsiveness.
4. Your Rights Under the Philippine Data Privacy Act
Under Section 16 of Republic Act No. 10173, examinees and users possess statutory data subject rights:
5. Data Security & Storage Controls
We implement industry-standard cryptographic and architectural measures to safeguard data:
- Transport Layer Security (HTTPS/TLS) across all routes.
- Strict Content Security Policy (CSP) and HTTP security headers (HSTS, nosniff, frame-ancestors).
- No automated selling, renting, or unauthorized trading of examinee data with third-party brokers.
6. Contact Our Data Protection Officer (DPO)
For inquiries, privacy concerns, or requests to exercise your data subject rights under RA 10173, please contact our designated Data Protection Officer:
Entity: ReviewTayo Data Privacy Team
Email: privacy@reviewtayo.online
Jurisdiction: Republic of the Philippines (National Privacy Commission compliance)