Data Policy
GovCheck PH is a civic transparency project. This policy explains what data we collect, how we use it, and your rights as a user.
Last updated: May 2025
What we monitor
GovCheck PH sends automated HTTP requests to publicly accessible Philippine government websites (.gov.ph) and records:
- HTTP response status code (e.g. 200, 404, 503)
- Response time in milliseconds
- Whether the request succeeded, timed out, or failed
- Weekly Lighthouse scores: performance, accessibility, SEO, best practices, and mobile-friendliness
We use HEAD requests where possible — we do not download, store, or analyze the content of any government website.
What we do not collect
- No cookies or persistent tracking on visitors
- No personal information unless you voluntarily submit a report
- No browsing history or behavior analytics
- No advertising identifiers or third-party ad scripts
Anonymous issue reports
When you submit a report about a government website, GovCheck PH may store:
- The selected agency, issue category, and optional description you provide
- A short fingerprint derived from a one-way hash of your IP address and browser User-Agent string — used only to prevent duplicate submissions and never used to identify you
- Your Supabase anonymous session ID, if you are signed in anonymously at submission time
Raw IP addresses and User-Agent strings are not stored. The fingerprint is a 64-character hex string that cannot be reversed to recover your IP.
If you choose to sign in with Google, your Google account ID is linked to your reports so you can track their status. We do not receive your email address through the anonymous flow.
Data license
All monitoring data published on GovCheck PH — including uptime records, response times, and Lighthouse scores — is released under the CC0 1.0 Universal (Public Domain Dedication). You may copy, modify, distribute, and use this data for any purpose without asking permission.
User-submitted reports are not part of the CC0 dataset. They are moderated and may be removed at any time.
Data retention
- Uptime check results — retained for 90 days, then automatically deleted
- Lighthouse scores — retained indefinitely (one score per agency per weekly run)
- Issue reports — retained indefinitely unless removed by a moderator
Third-party services
GovCheck PH uses the following services, each with their own privacy policies:
- Supabase — database and authentication. Data is stored in Supabase-hosted PostgreSQL. See supabase.com/privacy
- Vercel — web hosting. Access logs may be retained by Vercel per their policy. See vercel.com/legal/privacy-policy
- GitHub Actions — automated monitoring jobs. The monitor and Lighthouse scripts run as GitHub Actions workflows. See GitHub's privacy statement
Contact
Questions about this policy or requests to remove a report you submitted? Open an issue on GitHub.