Privacy
Cebu Power Alerts keeps only what it needs to warn you about outages at your places.
What we keep
- The places you save: the name you give them, the barangay, the street and the map point.
- Your alert settings and language.
- If you connect Messenger or WhatsApp: your Messenger ID or WhatsApp number, and when you agreed to receive alerts.
- The alerts we sent you, for 90 days.
- A random cookie that keeps this phone signed in. No password, no email address.
What we don't do
- No ads, no analytics, no tracking pixels.
- We do not sell your data. Meta (Messenger, WhatsApp) receives the alerts it delivers to you.
- Map tiles load from OpenStreetMap's servers, which see your IP address like any website you visit.
- If configured, the optional Satellite button in the location picker loads Esri imagery only after you select it at a close zoom. Esri then receives your IP address and the tile area you view, not your account identifier or saved-place labels. Zooming out or leaving the picker returns to the street map. Satellite imagery does not show electricity supply.
Address and location search
- Local search uses our OpenStreetMap index. If the optional Photon fallback is enabled, it receives your typed search text, not your GPS position or saved places.
- Pressing Search in the GrabMaps address search sends the typed text to GrabMaps through our server. Do not enter private information. We do not send your GPS position, account identifier or saved places.
- Address search is powered by GrabMaps. When you confirm a result and save a place, we store the chosen coordinates, locally resolved barangay/street and your own label, just as for GPS or manual selection. Search alone does not save a place. Unselected results, vendor identifiers and raw API responses are not stored or cached. We use the official API for searches you submit; we do not crawl or bulk collect GrabMaps data.
Optional new-app sign-in
- Facebook and WhatsApp new-app sign-in are available only when enabled by the operator after a separately approved release. The sign-in page shows available methods. Original-service sign-in remains separate during migration.
- If enabled, Facebook sign-in validates the app-scoped account ID on the server without keeping Facebook access tokens, names, pictures, friends or posts. WhatsApp sign-in requires you to send a short-lived prepared message; it does not send you an OTP or enable alerts. Only a provider-scoped identity hash is retained, separate from messaging consent. Phone hashes are pseudonymous: phone numbers can be guessed and enumerated, so hashing does not anonymize them.
- New-app sign-in sessions use random Secure, HttpOnly browser cookies. Only token hashes are stored; the server enforces a 90-day absolute expiry and supports sign-out and revocation of all sessions on the account. Original-service sessions still require the original account controls until that service is retired.
- Login methods and device-only profiles are never automatically merged. After account deletion, login identity hashes remain indefinitely as deletion safeguards. The same provider identity is permanently unable to sign in or create another account here, with no self-service undo. Original account records and retained backups remain separate as explained below.
Accounts transferred from the previous website
- Approved existing accounts and their unexpired saved points can be transferred separately. Facebook and WhatsApp sign-ins remain separate accounts. Signing in is not consent to alerts; the transfer does not connect a messaging channel.
- During the transition, your original sign-in is checked against the original private account store on each request. Its session credentials and phone number are not copied into the new database. The old sign-in and sign-out pages remain available.
- Deleting data here removes it from this version and prevents automatic re-import. The original website store and retained backups are separate; contact the operator to request deletion from those stores too. Private backups may retain earlier data for their retention period.
Where the outage data comes from
- Public notices from Visayan Electric's website and AboitizPower's mobileAP outage reports. Facebook collection remains disabled pending the required access approval; it is not an active source. We are not affiliated with Visayan Electric, AboitizPower or NGCP.
Delete your data
Reply STOP in Messenger or WhatsApp to stop alerts. Delete your data here to remove your places, settings, chat link and alert history from this version. To cover the previous website and retained backups, contact the operator as described above.
On another phone? Open this page there, or write to us.
Questions or a deletion request: info@astralforgemedia.com