Legal
Privacy Policy.
Last updated: 16 October 2026
Exenova ("we", "us") runs exenova.is-local.host. This policy explains what personal information the site collects, why, and the choices you have. We follow the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
What we collect
When you contact us — your name, email address, the service you're asking about and your message.
When you apply to join — your name, email, discipline, the role you're applying for, a link to your portfolio and your message.
When you subscribe to updates — your email address.
When a team member signs in — their email address, name and profile picture from the sign-in method they use (an emailed password link, GitHub, Google or Discord). Passwords are stored only as one-way hashes; we never see or store them in plain text. Password links are stored as hashes too and stop working after one use.
When you browse — a simple visit counter records the page path, your browser's user-agent string and the website that referred you (the hostname only, not the full address). We don't store your IP address with these records, we don't use advertising or third-party tracking cookies, and we don't build profiles of visitors.
On your device — the site remembers your theme (light or dark) and language in your browser. Signing in sets a session cookie that keeps you signed in. These are needed for the site to work and aren't used for tracking.
How we use it
- To reply to your message or project enquiry.
- To review applications and contact applicants.
- To send updates you asked for (you can unsubscribe at any time).
- To let members sign in and edit their own pages.
- To understand which pages are visited, so we can improve the site.
- To keep the site secure, for example by limiting repeated form submissions.
We don't sell or rent your information, and we don't use it for automated decisions about you.
Who handles it for us
We use a small number of services to run the site. They process data on our behalf and only as needed to provide their service:
- Vercel — hosting and file storage (servers in Singapore).
- Supabase — the database (servers in Singapore).
- GitHub, Google and Discord — only if a member chooses to sign in with them.
- Our email provider — to send password links and replies.
Some of these services are based outside the Philippines; we rely on their contractual and security commitments to protect your data.
How long we keep it
- Messages: up to 2 years, or until the enquiry is finished and no longer needed.
- Applications: up to 12 months, unless you join the team.
- Newsletter emails: until you unsubscribe.
- Member accounts: while the person is a member, and removed on request after they leave.
- Visit records: up to 24 months.
Your rights
Under the Data Privacy Act you can ask to be told what we hold about you, get a copy of it, correct it, object to its use, or have it deleted or blocked. You can also withdraw consent at any time. Email exenovaph@gmail.com and we'll respond within a reasonable time — usually within 15 days. If you're not satisfied, you can complain to the National Privacy Commission (privacy.gov.ph).
Security
Data is sent over HTTPS, admin and member areas require sign-in, and access to the database is limited to the people who run the site. No system is perfectly secure, but we'll tell affected people and the National Privacy Commission promptly if a breach puts personal data at real risk.
Children
The site isn't aimed at children under 13, and we don't knowingly collect their information. Applicants under 18 should have a parent's or guardian's consent.
Changes
If we change this policy, we'll update the date at the top. Significant changes will be noted on the site.
Contact
Exenova · exenovaph@gmail.com
See also our Terms of Service.