Privacy Policy

Civil Service Exam Review Platform (“the Platform,” “we,” “us,” or “our”) is an independent online study platform for Filipinos preparing for the Civil Service Commission (CSC) exam. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the choices available to you.

By using our website and services, you agree to the practices described here. If you do not agree, please discontinue use of the platform. This policy should be read together with our Terms of Service and Cookies Policy, which explain how cookies and similar technologies are used.

Important: Civil Service Exam Review Platform is not affiliated with, endorsed by, or operated by the Civil Service Commission (CSC). We are a private review and practice tool.

We collect information in the following ways depending on how you use the platform:

1. Anonymous visitor analytics

• A randomly generated visitor ID stored in your browser's local storage to recognize returning sessions on the same device.
• Live presence signals sent periodically while you browse (about every 30 seconds) so we can show how many reviewers are active right now.
• When your live session ends, that session is counted once toward our total active reviewers community metric.
• Daily unique visitor counts using Philippine time (Asia/Manila) for community statistics displayed on the site.

2. Optional account information

• If you create an account, we collect your email address, display name, and authentication details through Firebase Authentication (email/password or Google sign-in).
• If you sign in with Google, we may receive your name and profile photo URL as provided by Google.

3. Study and performance data

• Quiz answers, scores, categories, exam levels, and session history.
• Progress summaries and performance analytics when you are signed in.
• Leaderboard submissions including display name, score, test details, and optional account linkage.
• Shared score cards and export data you choose to generate or share.

4. Feedback and community input

• Star ratings and optional comments about the platform.
• Messages you send to our in-app help assistant.

5. Notifications (optional)

• If you opt in to push notifications, we store a device messaging token (FCM) linked to your account or visitor session so reminders can be delivered.

6. Payments (if applicable)

• If premium or exam-access features require payment, we may process payment references, proof-of-payment uploads you submit for verification, and access-grant records linked to your account. We do not store full payment card numbers on our servers.
• If an administrator suspends an account for policy or security reasons, we may retain suspension status, related audit notes, and notification records needed to enforce that action.

7. Technical and usage data

• Basic analytics through Vercel Analytics (such as page views and performance metrics).
• Server logs, IP-derived region data, browser type, device type, and timestamps needed for security and reliability.
• Theme preference, tour completion, and UI dismissal flags stored locally.

We use collected information to:

• Deliver quizzes, flashcards, full-exam simulations, and review content.
• Save your progress, scores, and personalized study history.
• Display leaderboards, shared results, and community reviewer statistics.
• Authenticate accounts, verify email addresses, and secure access.
• Send optional study reminders and platform announcements you opt into.
• Improve question quality, caching, performance, and user experience.
• Respond to feedback, support requests, and abuse reports.
• Protect the platform against fraud, spam, unauthorized access, and account abuse.
• Comply with legal obligations when required.

We do not sell your personal information. We do not use your data for third-party advertising profiles.

We process information based on one or more of the following, consistent with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules:

• Consent — for optional features such as accounts, notifications, leaderboard display names, ratings, and payment submissions.
• Legitimate interest — for essential site operation, security, anonymous community metrics, and service improvement, balanced against your privacy rights.
• Contractual necessity — to provide features you actively request, such as saving progress to your account.
• Legal obligation — when retention or disclosure is required by law.

As a personal information controller for this platform, Micho A. Robledo is responsible for ensuring that processing is transparent, secure, and proportionate to the purpose.

We may share information only in these limited circumstances:

• Service providers that help us run the platform, including Google Firebase (authentication, database, storage, cloud messaging), Vercel (hosting and analytics), and AI providers used to generate practice questions. These providers process data on our behalf under their own privacy terms.
• Public features you choose, such as leaderboard entries, public rating comments, or score links you share.
• Legal and safety when disclosure is necessary to comply with law, enforce our terms, or protect users and the platform.
• Business changes such as a merger or acquisition, with notice where required.

We do not share your email address publicly on leaderboards or community widgets.

We keep information only as long as needed for the purposes above:

• Visitor presence records are retained to compute live and historical community metrics; expired sessions are marked as credited and no longer counted as live.
• Account and progress data is kept while your account remains active. You may request deletion of your account data by contacting us.
• Leaderboard entries may remain visible until removed by you (where supported) or by an administrator for moderation.
• Local browser data (visitor ID, theme, dismiss flags) stays on your device until you clear site data.
• Server logs and backups are retained for a limited period for security and disaster recovery.

We use industry-standard safeguards including encrypted connections (HTTPS), Firebase security rules, server-side validation, and access controls for administrative functions. No method of transmission or storage is 100% secure, but we work to protect your information against unauthorized access, alteration, and loss.

You are responsible for keeping your account credentials confidential and for signing out on shared devices.

Depending on applicable law, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion or restriction of certain processing.
• Withdraw consent for optional features (such as notifications).
• Object to processing based on legitimate interest.
• Lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

You can also:

• Use the platform without creating an account for many features.
• Clear your browser's local storage and cookies to reset anonymous identifiers.
• Decline browser notification permission when prompted.
• Contact us at michorobledo25@gmail.com for privacy requests.

We will respond to verified requests within a reasonable timeframe.

Civil Service Exam Review Platform is intended for exam takers, including young adults preparing for civil service careers. We do not knowingly collect personal information from children under 13 without appropriate parental consent. If you believe a child has provided personal data without consent, please contact us and we will take steps to remove it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes may also be highlighted on the website. Continued use after changes means you accept the updated policy.