Back to Room TBA

Legal

Privacy Policy

Last updated: June 29, 2026. Room TBA is operated by UPLB Tools volunteers. This policy explains what we collect and why.

What Room TBA is

Room TBA is a free campus map and schedule finder for UPLB students. It is not an official University of the Philippines Los Baños website. Class and room data are maintained by volunteers and may be incomplete or out of date.

Information we process

Browsing the map (no account)

  • Usage analytics. We use Vercel Analytics on the public site to understand traffic patterns (page views, referrers). We do not intentionally collect your name or student number through analytics.
  • Device storage. The app caches campus data in your browser (PGlite / IndexedDB) and may store preferences such as recent searches, term selection, and “don’t show again” for the welcome modal.
  • Location (optional). If you enable location on your device, the map may use your coordinates locally to show where you are. We do not persist your live GPS track on our servers.

Contributors and editors (signed in)

  • Account identifiers. Editor/contributor accounts store a username, hashed password, role, and optional display name.
  • Edit proposals and published changes. Suggestions and approved edits record who submitted or approved them (`edited_by` and related audit fields).
  • Session cookies. Signed-in sessions use httpOnly cookies scoped to this site.

Server and hosting

  • Campus data lives in a Postgres database (Supabase) accessed by our API routes. Hosting and logs are provided by Vercel and our database provider under their respective privacy policies.
  • Optional event image uploads may be stored in Cloudflare R2 when configured.

What we do not sell

We do not sell your personal information. We do not run third-party ad networks on Room TBA.

Sponsored content

Room TBA displays curated sponsor promotions from local businesses. Sponsors are manually selected by our team. We do not use ad networks, tracking pixels, or behavioral targeting. Sponsor images are hosted on our own servers. Clicking a sponsor link takes you to the sponsor's website; we do not share any of your data with sponsors.

Community channels

If you contact us on Discord or Messenger, those platforms handle messages under their own policies. Do not send passwords or sensitive personal data in public channels.

Your choices

  • Clear site data in your browser to remove local caches.
  • Sign out of editor/contributor sessions when using shared devices.
  • If you have an editor or contributor account, open Account settings (from the app menu) to change your display name, email, or password; connect or disconnect a Google sign-in; download a copy of your account data; or delete your account. Deleting an account removes your email, display name, and password; past proposals and edit history remain on record, attributed to a deleted user, so the audit trail for published changes stays intact.

Changes

We may update this policy as the app evolves. Material changes will be reflected on this page with an updated date.

Contact

Questions about privacy? Reach the team via Messenger or Discord.