Cybercode.ph respects the privacy of its visitors and collects only the information reasonably needed to operate, measure, secure and improve the website. We do not sell personal information.
This Privacy Policy explains what may be processed when you visit Cybercode.ph or contact us, the basis on which it is processed, and the rights you have under Republic Act No. 10173, the Data Privacy Act of 2012. It should be read together with our Terms & Disclaimer.
Who Operates Cybercode.ph
Cybercode.ph is an independent Philippine technology-law, privacy, cybersecurity and digital-compliance information platform created and managed by Anton Sheker and Marjo Villarosa. For the purposes of the Data Privacy Act, Cybercode.ph acts as the personal information controller for information processed through this website, and can be reached through the Contact page.
Information You Provide Directly
If you contact Cybercode by email or another communication channel, we may receive information you choose to provide, such as your name, email address, message, organization, page URL, correction details or other information contained in your communication.
Please do not send passwords, one-time codes, private encryption keys, full payment-card details or other credentials through ordinary email. If you are reporting a security incident, send only what is needed to describe it — not live credentials, personal data belonging to other people, or copies of a breached dataset.
Website and Technical Information
Like most websites, the site’s hosting, security and web infrastructure may automatically process technical information such as IP address, browser type, device information, requested URL, timestamps, referring page, response status and similar server or security logs. This information may be used to deliver the site, prevent abuse, investigate errors and protect website security.
Analytics and Google Services
Cybercode uses Site Kit by Google to connect supported Google website services. Depending on the services configured and active at a given time, this may include measurement or search-performance services such as Google Analytics and Google Search Console.
Analytics tools may process information about how visitors reach and use the site, such as pages viewed, approximate location, device or browser information, referral source and interaction data. Search Console primarily provides aggregated information about how the site appears in Google Search. We do not use analytics to identify individual readers, and we do not run advertising on this site.
Third-party services process data under their own terms and privacy policies. Their features and data practices may change independently of Cybercode.
Cookies and Similar Technologies
Cybercode and services used by the site may use cookies, local storage or similar technologies for essential website operation, security, preferences, analytics or other enabled functionality.
Not every cookie has the same purpose, and the legal basis for processing can depend on the technology and how it is used. Where consent is legally required for a particular non-essential technology, the site should obtain it before that technology is used in the manner requiring consent. You can block or delete cookies in your browser settings; essential ones cannot be refused without affecting how the site works.
Why Information May Be Processed
- to deliver and maintain the website;
- to protect the site against abuse, spam, attacks or unauthorized access;
- to understand website performance and improve content;
- to respond to inquiries, corrections or partnership messages;
- to comply with applicable legal obligations; and
- to establish, exercise or defend legal rights where necessary.
Our Basis for Processing
Under Section 12 of the Data Privacy Act, personal information may be processed where the data subject has consented, where processing is necessary to fulfil a legal obligation, or where it is necessary for the legitimate interests of the controller, except where those interests are overridden by the data subject’s fundamental rights and freedoms.
We rely on consent when you choose to contact us; on legitimate interests for security logging, spam prevention and aggregate analytics, which are necessary to run a public information site safely; and on legal obligation where the law requires us to retain or disclose something.
Sharing of Information
Cybercode does not sell personal information and does not publish personal information sent privately to us merely because it was submitted. Information may, however, be processed by service providers that support hosting, security, analytics, email, website management or other necessary operations.
Information may also be disclosed where reasonably necessary to comply with applicable law, a lawful government request, court process, security investigation or protection of legal rights.
Where Information Is Processed
Some of the providers described above operate servers outside the Philippines. Where personal information is processed abroad, it remains subject to this policy, and Cybercode remains accountable for it as personal information controller under the Data Privacy Act.
Data Retention
Information should be retained only for as long as reasonably necessary for the purpose for which it was collected, legitimate operational needs, security, record keeping, legal obligations or dispute resolution. Retention periods may vary depending on the type of information and the system involved. Correspondence is deleted once the matter it concerns is closed and there is no continuing reason to keep it.
Security
Cybercode uses reasonable administrative and technical measures intended to protect the website and information processed through it. No website, email account, server or internet transmission can be guaranteed completely secure.
External Links
Cybercode frequently links to government agencies, official legal sources and other external websites. Those sites are operated independently and have their own privacy practices. A link from Cybercode does not make Cybercode responsible for the privacy or security practices of the destination site.
Your Rights Under the Data Privacy Act
If you are a data subject whose personal information we process, Republic Act No. 10173 gives you the right:
- to be informed whether your personal information is being processed, and of the purpose and extent of that processing;
- to access the personal information we hold about you, and information about how it has been processed;
- to object to processing, including processing for direct marketing or profiling;
- to rectification — to have inaccurate or incomplete information corrected;
- to erasure or blocking — to have information removed or withheld in the circumstances the law provides;
- to damages for inaccurate, incomplete, outdated, false or unlawfully obtained information;
- to data portability — to obtain a copy of information you provided, in a commonly used electronic format; and
- to lodge a complaint with the National Privacy Commission.
These rights are subject to the exceptions and limitations the Act provides. Under Section 17, they may be exercised by the lawful heirs and assigns of a data subject who has died or become incapacitated. For general background, see our Data Privacy Rights in the Philippines guide — that guide explains the law generally, while this policy states how Cybercode itself handles information.
How to Exercise Your Rights
Write to us through the Contact page, describing what you are asking for. We may need to ask a question or two to confirm the request comes from you before acting on it. We aim to acknowledge requests promptly and respond within a reasonable period.
Complaints to the National Privacy Commission
If you believe your rights under the Data Privacy Act have been infringed, you may raise it with us first so we have a chance to put it right, and you may in any case bring the matter to the National Privacy Commission, which publishes its own complaint procedure. Complaining to us first is not a precondition to complaining to the Commission.
Children
Cybercode.ph publishes technical and legal information for adults and is not directed at children. We do not knowingly collect personal information from a child.
Data Breaches
We maintain a process for assessing security incidents and personal data breaches. Where notification is legally required, we will notify the National Privacy Commission and the affected data subjects within the period and in the manner the rules require, based on the information reasonably available at the time.
Changes to This Policy
This Privacy Policy may be updated when website functionality, service providers, legal requirements or data practices materially change. The materially reviewed date below should be checked when relying on this policy.
Last materially reviewed: September 10, 2026.