Summary
You can browse MetroPH without an account. An account is needed to submit ratings, website feedback, or community place recommendations. MetroPH does not sell personal information and does not use precise browser location for advertising.
Transit guidance, favorites, and theme settings may be handled on your device. Community and account features use Supabase so they can work across sessions and be moderated safely.
Information MetroPH uses
- Browser preferences: theme and supported saved-item preferences may be kept in browser storage on your device.
- Account information: email address, authentication records, optional display name, account role, and security/session metadata.
- Community activity: ratings, private feedback, recommendations, moderation status, submission dates, and optional public credit.
- Photos and place details: uploaded image files, alt text, proposed coordinates, address, category, and rights confirmation.
- Technical protection data: CAPTCHA verification and limited request metadata needed to prevent abuse.
MetroPH does not ask for a full legal name, home address, phone number, or payment information for ordinary browsing and contributions.
Your location
MetroPH asks before using browser geolocation. If you choose “Use my location,” the current route and nearby-place features process the coordinates in your browser to calculate nearby stations and routes. The current location service does not write your precise location to Supabase, browser storage, or analytics.
When the map recentres, OpenStreetMap tile requests correspond to the area being viewed. The tile provider can receive ordinary request information such as an IP address even though MetroPH does not send a separate geolocation record to its database.
You can deny or dismiss permission and use manual station selection instead. Your browser and device control location permission. A coordinate deliberately submitted as part of a place recommendation is community content, not background location tracking.
Accounts and authentication
Supabase provides email/password authentication and stores the records required to create and secure your account. MetroPH stores an associated profile with an optional display name and a member or administrator role. Email addresses are not shown publicly.
Administrative access requires server-enforced authorization. A hidden page or interface element is not treated as security.
Ratings, recommendations, and photos
Written website recommendations remain private to authorized administrators. Approved place reviews may be displayed publicly using your chosen public credit or “MetroPH traveler.” Hidden Gem recommendations under review and rejected recommendations are not public.
Recommendation photos are initially stored privately for moderation. If approved, MetroPH may create smaller web-ready versions, remove embedded image metadata, and publish the image with the reviewed credit and licence information. Do not upload a photo unless you have permission to share it.
Third-party services
- Supabase: database, authentication, server functions, and file storage.
- Cloudflare Turnstile: anti-abuse verification on protected forms when configured.
- OpenStreetMap: map tiles and geographic context; tile requests may receive standard connection information such as your IP address.
- Google Fonts: typefaces loaded by the current public interface.
- Deployment provider: the production host processes ordinary web requests and operational logs.
Each provider handles information under its own terms and privacy practices. See Data Sources for content provenance.
MetroPH currently has no external product-analytics provider. Its analytics adapter emits a small set of page-memory events only and deliberately excludes coordinates, email addresses, account IDs, and free-text form content.
Retention and your choices
Account and contribution records are kept while needed to provide the service, prevent abuse, preserve moderation decisions, or meet legitimate legal and security needs. Uploads for recommendations under review should be removed when withdrawn, rejected, or no longer needed. Approved place information may remain as curated content, but personal attribution can be removed where the applicable permission allows.
You may review your contributions from your account. Use Contact and Report an Issue to request account or personal-data deletion. MetroPH may need to confirm control of the account before completing a request.
Security and limitations
MetroPH uses Supabase Row Level Security, separate administrator authorization, private moderation storage, file validation, and rate limits where supported. No internet service can promise absolute security. Please use a unique password and report suspected account misuse promptly.
Never send passwords, government identifiers, financial details, or another person’s private information through a recommendation or report.
Questions or requests
Submit a privacy question, correction, or deletion request through the Contact and Report an Issue page. The project does not publish a support email until an owner-controlled address is configured.
Policy owner: Ivan Joshua Toribio / IJ Tech.