Your data, plainly.

You need no account, and the site never asks your name.

Visits are counted with Vercel Analytics, which uses no cookies and builds no profile of you.

To slow down attacks, the site counts repeated sign-in attempts from the same network. It keeps only a scrambled form of the network address, which cannot be turned back into the address, and deletes the count after a day.

Vercel, which hosts the site, keeps short technical records of requests, as every web host does.

What you type in the search or in Ask CCISKO is used only to find matches on the site and is not saved by the site. The chat stays in its window until you reload the page. Like any request, a search may show for a short time in Vercel's technical records.

The welcome screen shows once on each device. Your own browser remembers that it was shown; the site keeps nothing about it.

The site keeps your name and your email address as Google gives them. No password is ever kept, because there is none.

Supabase, the database service, also keeps what Google sends at sign-in (your name, email, profile picture link and Google account number) so it can recognize you next time.

A cookie keeps you signed in. It is used for nothing else, and the page's own scripts cannot read it.

When an account is made, the site writes one line in its history, which cannot be edited. That line holds an account number, not your name or email.

Right after signing in, every student finishes a short setup, officers included. Until it is finished, nothing that needs an account opens. Officers get a desk only when the Executive Board invites their Gmail address.

The setup asks your full name as it is on your school records, your type of student, and your block. You are counted in your block as soon as you choose it; past the block's class size, you wait for its officers to approve you. If you are not regular, you may add the other blocks you attend. Your block's officers see your name on the block's list and remove anyone who is not a blockmate.

Then seven more answers: the council and the organizations you belong to, your gender (from a list, or typed in under Others), whether you are a working student, whether you have your own laptop or computer, whether you have reliable internet at home, whether you have a scholarship or financial aid, and the city or province where you are settled. Most have Prefer not to say, and the form says why each one is asked.

Nothing else is ever asked: no student number, birthday, phone number, address, ID, documents, disability or health.

Belonging to a political party organization is sensitive personal information under the Data Privacy Act. It is kept with your other answers, seen only by you, and counted only in totals.

You can change any answer on My page at any time. An answer cannot be left empty once the setup is finished.

Only you see your answers. Nobody else, the Executive Board included, can read or change them.

Your block's officers and the Executive Board see your name on your block's list, whether you are counted or waiting for approval, and the word Irregular if you attend more than one block. They never see your exact type of student or any other answer. Each block's public page shows a count only.

The Executive Board, and STRAW for students' welfare, see counts for the whole college, never names. They see the real numbers, and are asked never to share them outside the council.

The site's history shows the Executive Board when you registered or changed your setup, with your name and the time, but never what you answered.

A concern needs no account. Sent anonymously, it keeps no name, no email and no account. Only STRAW, the President and the Vice President read it. Your tracking code is never kept in a form anyone can read.

A question is shown in public only if you allowed it and the officer who answered chose to show it, in general words, without your name. You can take your yes back with your code at any time.

STRAW, the President and the Vice President can remove a concern for good, with its replies and its public answer.

If you mark an answered question helpful or not, the site keeps that mark with your account so you can change it. Everyone else sees only the counts.

The council's own accounts, the Executive Board and STRAW make forms on the site. When one of the council's own two accounts makes a form required at sign-in, every student it is for answers it before anything else opens.

Your answers are kept without your name, your email or the time you sent them. Only your program and year level go with them, so results can be split by them; a group of fewer than five answers is never shown on its own. The site keeps a separate note that you answered, only so it stops asking you, and deletes that note when the form is closed for good.

A form that keeps names says so plainly before the first question. A form required at sign-in never keeps names.

The council's rule for every form: never ask about your health, religion, political views, a student number, a phone number or an address, and offer Prefer not to say on questions about you. If a form breaks it, tell the Help desk.

The results are read only by the council's own accounts, the Executive Board and STRAW. Every time they open or download them, it is written to the site's history.

A comment under a post is shown in public under your real name. Your one reaction to a post is kept with your account; everyone else sees only the counts. If someone reports a comment, the report keeps who sent it and why; MMAC and the Executive Board read reports and can hide the comment.

A vote in a poll or a signature on a petition is kept with your account only so you vote or sign once. The site shows counts, never who voted for what.

A post on the Speak up wall is kept with your account, so the site can hold you to three posts a day and handle reports, but it shows no name unless you chose to show yours. Your agrees and reports are kept with your account; everyone sees only the counts. MMAC and the Executive Board can hide a post, and say why.

If you ask to join an organization on its page, your name, Gmail, program, year and block (and your note, if you write one) go to that organization's own account, and to nobody else, the Executive Board included. Membership of a political party organization is sensitive personal information under the law, so it is never shown or counted anywhere. You can take your request back at any time, and it is deleted.

The handbook quiz keeps your best score, how many rounds you played and when, with your account.

The leaderboards count points from what you do on the site. The students' board names only those who said yes on My page, and only signed-in students see it. Concerns, form answers, setup answers and what anyone says are never counted or ranked.

Your name and position are shown on the public pages of the council, your committee, your block or your organization, as officers' names always are. Never your email or any setup answer.

A block's officers and the Executive Board put photos in the block's album for each school year. Past years' albums stay on the block's page as its remembrance; only the Executive Board removes a photo from one. Ask them to take down a photo of you, and its file is deleted.

A block's officers may each choose to show their Gmail address and a Facebook link to signed-in students, on the block's page. Nothing is shown until the officer turns it on, and it can be turned off at any time.

Officers who read a schedule or a curriculum from a picture do it in their own browser: the picture is read on the device and never sent anywhere.

The Executive Board and the council's own two accounts see every account, with warning marks that point out ones that look like bots or trolls (for example, a name with digits, a setup never finished, comments hidden or reported for red-tagging). Each mark says why. A person always decides; nothing is removed by a rule alone.

The look (dark or light), the sound, the motion, the welcome screen and the tutorial are remembered by your own browser. The site keeps nothing about them.

The Facebook posts on the site are fetched from the council's Facebook Page by the site itself. Their pictures load from Facebook's servers, so Facebook can see that a browser loaded them, as with any Facebook picture on the web. Nothing about your account is sent to Facebook.

Every school year you choose your block again. Until you do, last year's account still counts for 30 days after the school year starts. After that it sleeps: it cannot vote, sign, react or comment until you choose your block.

Graduates keep one alumni year: they can react, comment and join events, but not vote or sign.

Nothing is deleted on a timer. An account asleep for a year or more, or past its alumni year, is marked on the Executive Board's list of accounts, and a person decides whether to remove it.

When an account or anything else is removed, it is deleted from the database and from storage, not hidden.

The database is with Supabase, in Singapore. The site runs on Vercel, in Singapore. Google handles the sign-in itself.

Once a week, a copy of the database is made so nothing is lost if something breaks. The copy is locked with a passphrase only the council holds, kept on GitHub for 35 days, then deleted.

The keys belong to the council's own account, not to any one officer. Nothing is sold, and nothing is given to advertisers.

Under the Data Privacy Act of 2012 (Republic Act No. 10173) you may ask to see, correct or delete what the site keeps about you. Write to pupccissc@gmail.com from the email address you signed in with.

Deleting your account deletes your profile, your setup answers, your registration, your blocks, any desk you hold, and your comments, reactions, votes, Speak up posts and quiz score. The history keeps its lines, which then hold an account number only.