Cookie & Browser Storage Policy
A clear inventory of cookies, browser storage, and application caching used by this service.
1. What this policy covers
Cookies are small values stored by a browser and sent with requests to a website. Web applications may also use local storage, session storage, and service-worker caches. Those are not all cookies, but they are described here because they can store information on your device. This policy applies to The College of Maasin Official Website at www.cm.edu.ph.
2. Inventory
The following inventory reflects the source or public information available for this patch:
The public website source repository and CMS/plugin configuration were not provided. The exact cookies, session storage, analytics tags, embedded media, and CDN dependencies could not be verified from the publicly rendered page alone. No claim that cookies or trackers are absent should be made until the owner inspects browser storage/network traffic and the deployed source/CMS configuration.
The exact cookie names, host/domain/path, expiry, SameSite and Secure flags, local/session storage entries, cache behavior, script providers, and purposes must be added to the table below after inspecting the deployed service.
| Technology/provider | Purpose | Duration / category | Required or optional |
|---|---|---|---|
| To be confirmed from production | Do not infer from the public login page. | Capture from browser and response headers. | Determine after assessment. |
3. Essential technologies
Essential technologies support functions you specifically request, such as secure sign-in, maintaining your session, validating protected actions, and serving required application resources. If these are disabled, the service may not work or may require you to sign in again. Their use is not presented as consent to unrelated tracking.
4. Analytics, advertising, and third-party content
This privacy widget does not load analytics, marketing, or advertising technology. The source repository for some deployments was not supplied, so the full live inventory remains to be verified. Before enabling analytics, advertising, session replay, external widgets, or other non-essential storage, the College must document the provider and purpose, update this policy, and implement an appropriate opt-in where required. Optional scripts must not be downloaded or initialized before the necessary choice is recorded. If third-party content is embedded, its provider may receive technical request data when the content loads.
5. Notice preference
This notice widget uses a first-party browser local-storage preference to remember that the notice has been dismissed and whether the small privacy shortcut has been hidden. The value is scoped to this browser and this site origin, is not used to identify you across websites, and is not evidence of consent to optional tracking. You can reopen the information using a “Privacy details” link in the site footer. Clearing browser storage may cause the notice to appear again.
6. How to manage storage
You can control cookies and storage through browser settings, clear existing site data, and use private browsing modes. Blocking essential storage may prevent login or other core features from operating. Browser controls differ by browser and version; consult your browser’s help documentation. Hiding the privacy shortcut does not disable cookies, change your privacy rights, or withdraw consent from a separate process.
7. External links and changes
Links to other College systems and external sites may be subject to separate policies. This policy should be reviewed whenever the app, service worker, analytics configuration, CMS plug-ins, hosting, or embedded content changes.
8. Contact
Data controller: The College of Maasin, Inc., R. Kangleon Street, Tunga-Tunga, Maasin City, Southern Leyte 6600, Philippines.
General contact: College contact page, telephone (053) 570 8671, or collegeofmaasin1925@yahoo.com. Please identify your request as a data privacy matter and ask to be referred to the College’s designated Data Protection Officer (DPO).
Before the College approves this draft, the system owner should add the current DPO’s direct, monitored contact information and confirm that the official contact routes can receive and route data-subject requests.
9. Applicable guidance
The College should apply the Data Privacy Act of 2012 and relevant National Privacy Commission guidance alongside applicable rules in jurisdictions that apply to a visitor or processing activity. See the NPC’s Data Privacy Act resource.