The Intervenor is the official student publication of Colegio de San Gabriel Arcangel. This notice explains what personal information this website collects, why, how long it is kept, and what you can ask us to do with it.
Who is responsible
The Intervenor holds this information. Questions about it, and any request described below, go to the publication through its adviser at the College.
What is collected, and why
If you only read
You do not need an account to read anything here, and we do not ask for your name or your email address to do so.
When you open an article, the site records that the article was read, so the front page can show which stories are being read most. It does not record who read it. To avoid counting the same person twice, your browser is given a small cookie holding a list of article numbers you have already opened; it contains no name, no email address and no identifier that points back to you.
If you register as a reader
Registration collects your name, your email address and a password. The name is shown beside anything you post. The email address is used to confirm the address is yours, to let you reset a forgotten password, and for nothing else — we do not send newsletters and we do not give it to anyone.
Your password is stored only as a cryptographic hash. Nobody at the publication can read it, including administrators.
If you turn on two-step sign-in, you may choose to have its codes sent to a second email address instead of your account's. That address is used only to send those codes, and it is deleted when you turn two-step sign-in off.
If you choose an authenticator app instead, we keep a secret key shared with that app, encrypted, so we can check the codes it shows. The QR code you scan is drawn on our own server; the key is never sent to anybody else. The key is deleted when you turn two-step sign-in off.
You may also add a recovery email address. It is used only to send you a password reset link when you ask for one with it, the code that confirms it, and warnings about your account. It is never shown to anyone else, you can remove it at any time, and it is deleted with your account.
Changes to an account's standing — its role, whether it can sign in, its email address, its two-step sign-in — are recorded in an administration log, with who made the change and when. Only the publication's administrator can read it, and entries are deleted after a year. If your account is erased, your name and email addresses are removed from the log; the record that a change happened stays.
Every attempt to sign in — successful or not — is recorded in the same log with the email address tried, the IP address it came from and the browser's description of itself, so that somebody guessing passwords can be noticed. Your password is never recorded. These entries are kept for a year, read only by the administrator, and removed from your account's record if it is erased.
If you comment
Before your first comment you are asked to accept the community guidelines. Your account records which version you accepted and when, so that you are asked again only when they change. That record is deleted with your account.
The publication records the IP address your comment was sent from, and keeps it. It is not shown publicly and is not visible to other readers. It exists so that abuse, threats and impersonation can be investigated, which is a duty the publication has to the people it writes about. Editors moderating comments see the comment, its author and its history; the address is available to administrators only.
A comment appears as soon as you post it, unless it contains wording the publication has chosen to hold for review — that is checked automatically, and a held comment appears only once an editor has read it. Editors can hide any comment after it appears, and can turn comments off across the site; turning them off hides comments without deleting them.
If you like a comment, the publication records that you did, so that you can take it back and cannot count twice. Readers see how many people liked a comment, never who. Your likes are deleted with your account, and with the comment.
If you post on the freedom wall
The freedom wall keeps what a comment keeps: your post, your account, and the IP address it was sent from — the address kept for the same reason, and seen by administrators only. It is checked against the same list of held words, and editors can hide any post.
Posting as Anonymous hides your name from readers, not from the editors. The publication may stop offering Anonymous for new posts; a post you already made anonymously stays anonymous. Readers see “Anonymous” and nothing else about you — no name, picture or link. The editors who look after the wall can still see which account wrote it, because a wall where nobody can be held to what they write invites harassment.
You can delete your own posts. Deleting your account deletes them too, with any reports you made.
Following, notifications and your reading
If you follow a writer, the publication keeps that you follow them, so it can tell you — in the bell at the top of the page, and by email only if you ask for it — when they publish. Writers can see how many people follow them, not who.
While you are signed in, the stories you open are kept as your “Recently read” list on your profile page, newest first: which story, and when. Only you can see it. You can remove a story or clear the whole list at any time; the publication keeps at most the last hundred, for up to ninety days. Nothing is kept for a visitor who is not signed in.
Your profile page (/me) is private to you. A reader has no public page unless they choose to make one there: it then shows your display name, your picture if you added one, and when you joined — never your email, your comments, what you read or whom you follow — and search engines are asked not to list it. Turning it off removes it at once.
Writers’ pages
Every member of staff has a public page at /writers/ followed by their name, linked from their bylines. It shows what the masthead already shows — their picture, their name or pen name, their position, their biography and the sections they cover — with their published stories and their number of followers. It never shows their email address, student number, gender, birthday, course or year level.
Reward points
While the reward shop is open, a reader account earns points for reacting, commenting, reading while signed in and posting on the freedom wall. The publication keeps a record of each point — what earned or spent it, on which story, comment or post, and when — and the items you buy and wear. Only you see your points and that record, on your profile page; an administrator can see and correct a balance, and a correction is shown to you with its reason. What you wear on your name is public wherever your name is. Points have no money value, cannot be bought, and are deleted with your account.
If you are not signed in
The publication may ask visitors to create a free account to play a video, and may ask them to sign in partway through a story. A video shown that way sends nothing to YouTube until you can play it. If a sign-in prompt can be closed and you close it, your browser remembers that for the tab you have open (session storage, not a cookie), so it does not ask again on every page.
If you are on the staff
Staff accounts additionally hold a pen name, course, year level, a short biography and, if you upload one, a photograph. These appear on the published masthead and beside your byline. You may also enter your student number; it is kept for the publication's staff records and is not published.
A staff profile may also record gender and date of birth. Both are optional — you may leave either blank, and "prefer not to say" is offered — and both are held only in the publication's internal staff records. Neither is shown anywhere on this website, neither appears on the masthead or beside a byline, and nothing in the system requires either to be filled in. You can change or clear them at any time from your profile page.
Staff who record their class hours do so themselves, and nobody else can edit them. They are used for one purpose: so that field assignments are not given to somebody who is timetabled to be in class. They are not visible on the public site.
Your positions on the editorial board — Photojournalist, Sports Writer and the like — are public: one is printed beside your name on each story you are credited on, as it was when that story was published, and the newsroom shows all of them. Your access role, which decides what you may do in the newsroom, is not published.
When a colleague invites you to work on a story, the newsroom records that you were invited, whether you may read or also edit it, and who invited you, and tells you in your notifications. This is never shown on the public site and never appears on a byline. It is removed when you are taken off the story, when the story is deleted for good, or when your account is deleted.
A photograph you upload is re-encoded by the system before it is stored. That process deliberately discards the metadata a camera or phone attaches to an image, including the GPS coordinates where it was taken. We do this because the masthead is a public page and a phone photograph can otherwise disclose where a student lives. You may replace or remove your photograph at any time from your profile page; removing it deletes the file, not merely the link to it.
The system also keeps an editorial record: which articles you wrote or edited, each saved revision, and every review decision with its timestamp and its author. This is what makes the publication accountable for what it prints, and it is the one thing that cannot simply be deleted on request — see below.
Cookies
This site sets a session cookie, a security cookie that protects forms against forgery, and the read-counting cookie described above. There is no analytics service, no tracking pixel and no third-party script that follows you between sites.
Advertisements, when there are any, are images kept on this site with a plain link to the sponsor. Showing one sends nothing to anybody; only pressing it takes you to the sponsor’s site, in a new tab. The publication does not record who sees or presses an advertisement.
The text size and colour theme you choose are kept by your own browser and never sent to us.
For staff: the newsroom’s media library remembers in your browser whether you last used its folders or its list, and photographs you drag onto a folder from your computer are held by your browser only until the upload form opens, then removed. From there they are handled exactly like files you choose in the form yourself: nothing is added to the library until you press Create.
Typefaces are served from a privacy-preserving mirror that does not set cookies and does not log visitor addresses.
How long information is kept
Account details are kept while the account exists. Comments are kept while they are published. The editorial record — bylines, revisions and review decisions — is kept permanently, because it is the publication's archive of its own work.
Your rights under RA 10173
You may ask to see the information held about you, to correct anything inaccurate, to object to how it is used, and to have it erased. Most of these you can act on yourself from your profile page.
There is one honest limit on erasure. If you have written, edited or reviewed anything published here, deleting your account would destroy the record of who did that work — including other people's. In that case the publication will refuse the deletion and explain why, and will instead close the account so it can no longer sign in, while the byline and the editorial trail remain. A reader who has only commented has no such record, and their account can be deleted outright, taking their comments and reactions with it.
Complaints
If you believe this publication has mishandled your information, raise it with the publication first. You may also complain to the National Privacy Commission, which regulates RA 10173.