Privacy & Security

Dolphub operates this portfolio service for PCU tech students. Questions, privacy requests, and objections can be sent to Evert Matthew Matias (fnzh.4u@gmail.com) or John Carl (johncarlsantos30@gmail.com).

• Your PCU email address, account timestamps, and administrative account status.
• Your handle, display name, course, tagline, projects, project links, and uploaded images.
• Optional public contact details you choose to add, such as Messenger, GitHub, or a contact email address.
• Security records such as hashed sign-in and session tokens, a keyed hash of the requesting network, and standard request information processed by the hosting platform.
• Messages and details you send when asking for support or reporting a problem.

• Verify eligibility, send sign-in links, and keep you signed in.
• Create, display, update, cache, and share the portfolio page you ask Dolphub to host.
• Protect the service, enforce limits, investigate abuse, and moderate public content.
• Answer support, privacy, deletion, and security requests.
• Meet legal obligations and establish or defend legal claims when necessary.

Processing is based on providing the service you request, your choices for optional public information, Dolphub's legitimate interest in operating a secure service, and legal duties where they apply.

A published profile can be visited by anyone with its URL. It may show your display name, handle, course, tagline, project text, project links, images, and any optional contact details you add. Turning off search-engine visibility asks search engines not to index the page; it does not make the direct URL private.

Your sign-in email is not copied to your public page. Dolphub does not sell personal information, run advertising profiles, or use a tracking script.

Signed-in accounts use one essential, HTTP-only session cookie. A session can last up to 30 days unless you sign out or it is revoked. The current showcase and editor also use browser session storage for the selected showcase view and temporary mock edits; that storage is limited to the browser tab's session.

Dolphub relies on providers that process information only to operate the service:

• Vercel hosts and delivers the application.
• Neon stores account, profile, project, authentication, and moderation records.
• Cloudflare R2 stores uploaded project images.
• Resend delivers one-time sign-in emails.
• Email and GitHub process information if you contact support or file a security report.

These providers may process information in countries outside the Philippines under their service terms and security commitments.

• One-time sign-in links expire after 15 minutes. Authentication cleanup removes their records after two days.
• Sessions become unusable after 30 days. Authentication cleanup removes expired session records.
• Account and portfolio content remains while the account is active or until it is deleted.
• Limited audit records may remain as long as needed for security and accountability, without retaining the deleted public profile.
• Support messages remain only as long as needed to resolve and document the request.

Dolphub stores hashes instead of raw sign-in and session tokens, uses secure HTTP-only cookies in production, hashes network identifiers used for rate limits, validates uploads, restricts administrative actions, and applies browser security headers. No online system can promise perfect security.

If you believe you found a vulnerability, do not post it publicly. Use the private vulnerability report or read the support guidance.

Subject to applicable law, you may ask to be informed, access or correct your information, object to processing, withdraw consent where consent is used, request erasure or blocking, receive portable data where applicable, or raise a complaint with the Philippine National Privacy Commission.

Email Evert Matthew Matias (fnzh.4u@gmail.com) or John Carl (johncarlsantos30@gmail.com) from your account address when possible. Dolphub may need to verify your identity before acting on a request.

This page will be updated when Dolphub's handling of personal information changes. A material change will receive a new date and an appropriate notice before it takes effect.