What Room TBA is
Room TBA is a free campus map and schedule finder for UPLB students. It is not an official University of the Philippines Los Baños website. Class and room data are maintained by volunteers and may be incomplete or out of date.
Information we process
Browsing the map (no account)
- Usage analytics. We use Vercel Analytics on the public site to understand traffic patterns (page views, referrers). We do not intentionally collect your name or student number through analytics.
- Device storage. The app caches campus data in your browser (PGlite / IndexedDB) and may store preferences such as recent searches, term selection, and “don’t show again” for the welcome modal.
- In-app feedback (optional). If you send feedback from Settings, we store your message, the optional contact you typed, the screen you were on, the app version, and whether you were online. No email is required and your IP address is not stored.
- Location (optional). If you enable location on your device, the map may use your coordinates locally to show where you are. We do not persist your live GPS track on our servers.
- Online counter. To show how many people are using the map right now, your browser sends a random session id (kept only for the current tab) every 30 seconds. It is not linked to an account, and we store nothing else with it — no IP address, no user agent. The id is deleted once the session has been idle for 10 minutes.
Contributors and editors (signed in)
- Account identifiers. Editor/contributor accounts store a username, hashed password, role, and optional display name.
- Edit proposals and published changes. Suggestions and approved edits record who submitted or approved them (`edited_by` and related audit fields).
- Session cookies. Signed-in sessions use httpOnly cookies scoped to this site.
Server and hosting
- Campus data lives in a Postgres database (Supabase) accessed by our API routes. Hosting and logs are provided by Vercel and our database provider under their respective privacy policies.
- Optional event image uploads may be stored in Cloudflare R2 when configured.
What we do not sell
We do not sell your personal information. The interactive map runs no third-party ad networks.
Sponsored content
Room TBA displays curated sponsor promotions from local businesses. Sponsors are manually selected by our team. Sponsor placements use no ad networks, tracking pixels, or behavioral targeting. Sponsor images are hosted on our own servers. Clicking a sponsor link takes you to the sponsor's website; we do not share any of your data with sponsors.
Advertising on wiki pages
Wiki articles (pages under /wiki) may show ads served by
Google AdSense. Ads never appear on the interactive map or other app
screens. Google, as a third-party vendor, uses cookies to serve ads
based on your prior visits to this or other websites. You can opt out
of personalized advertising at
Google Ads Settings, and read how Google uses data from partner sites at
policies.google.com.
Community channels
If you contact us on Discord or Messenger, those platforms handle messages under their own policies. Do not send passwords or sensitive personal data in public channels.
Your choices
- Clear site data in your browser to remove local caches.
- Sign out of editor/contributor sessions when using shared devices.
- If you have an editor or contributor account, open Account settings (from the app menu) to change your display name, email, or password; connect or disconnect a Google sign-in; download a copy of your account data; or delete your account. Deleting an account removes your email, display name, and password; past proposals and edit history remain on record, attributed to a deleted user, so the audit trail for published changes stays intact.
Changes
We may update this policy as the app evolves. Material changes will be reflected on this page with an updated date.
Contact
Questions about privacy? Reach the team via Messenger or Discord.