1. Cookies and Browser Storage
Cookies are small text records that a website or service may store through a browser. Modern web applications may also use local storage, session storage, IndexedDB, in-memory cache, authentication tokens, and ordinary browser cache. These technologies can support authentication, security, navigation, preferences, and temporary application data.
This policy uses the term browser storage to cover these related technologies, whether or not a traditional cookie is involved.
2. What LAEC Currently Uses
The website and learning portal currently use or may use:
- Firebase Authentication persistence to keep an authorized learner or administrator signed in on the same website origin until sign-out, browser-data clearing, or another applicable session-ending event;
- security and access information needed to check identity, email verification, account role, enrollment approval, account activation, and assigned course access;
- a local Cacao Check progress cache associated with the signed-in Firebase UID, used only as a resilience aid while Firestore remains the authoritative synchronized progress record;
- temporary page and interface state used while a page is open; and
- ordinary browser cache for images, stylesheets, scripts, fonts, and other technical files.
3. Current Storage Details
| Technology or record | Purpose | Typical duration or removal |
|---|---|---|
| Firebase Authentication state | Maintains the signed-in session and enables protected learner or administrator pages to recognize the authenticated account. | Depending on the configured Firebase persistence, it may remain until explicit sign-out, browser-data clearing, account/session invalidation, or expiry of the relevant authentication token. |
Local Cacao Check cache, such as
cacao-check:{Firebase UID}:progress-cache
|
Temporarily remembers course navigation, quiz scores, and progress state to improve resilience during intermittent connectivity. Firestore remains the authoritative record. | Remains until replaced by newer course state, removed by LAEC code, or cleared through the browser's site-data controls. |
| Temporary in-page or session state | Supports navigation, forms, loading status, and page interaction. | Usually ends when the page, tab, or browser session is closed. |
| Browser cache | Stores copies of public technical resources to improve loading speed and reduce repeated downloads. | Controlled by the browser, response headers, storage limits, and the user's cache-clearing choices. |
LAEC does not place learner passwords in Firestore or the Cacao Check local progress cache. Password processing is handled by Firebase Authentication.
4. Third-Party Technical Services
LAEC currently loads technical resources or services that may include Firebase, Firebase Hosting or related Google infrastructure, Bootstrap, Font Awesome, and Google Fonts. When a browser requests these resources, the relevant provider may receive technical connection information such as the IP address, browser or device information, request time, requested resource, and referring page, subject to that provider's own policies.
LAEC does not control all storage or logging performed independently by these providers. The LAEC Privacy Policy should be read together with this policy for information about personal-data processing and service providers.
5. Transparency and Lawful Processing
LAEC intends to process personal data in accordance with Republic Act No. 10173, the Data Privacy Act of 2012, its Implementing Rules and Regulations, and applicable National Privacy Commission issuances. Relevant principles include transparency, legitimate purpose, and proportionality.
Essential authentication and security storage is used to provide the service requested by the user, protect accounts, and enforce authorized access. When consent is used as the lawful basis for a future non-essential technology, LAEC should obtain consent that is freely given, specific, informed, and capable of being managed or withdrawn as required.
The National Privacy Commission has advised that a cookie pop-up is not prescribed in a single mandatory format under the Data Privacy Act, but the notice provided to users must remain adequate, accessible, and understandable. LAEC may still use a banner or preference control when it improves transparency or when non-essential technologies require it.
6. Your Choices and Controls
Browser settings generally allow you to inspect, block, or clear cookies, local storage, IndexedDB, cached files, and other site data. Available controls vary by browser and device.
Clearing or blocking LAEC site data may:
- sign you out of the learner or administrator portal;
- remove locally cached Cacao Check progress;
- reset temporary page or interface state; or
- prevent protected portal features from operating correctly.
Course progress already synchronized successfully to Firestore should remain available after the learner signs in again. Unsynchronized local activity may be lost when site data is cleared.
Signing out through the portal is the recommended way to end an authenticated LAEC session, especially on a shared or public device.
7. Future Analytics, Embeds, or Non-Essential Storage
Before activating non-essential analytics, advertising, profiling, payment tools, third-party video embeds, chat widgets, social-media pixels, or similar technologies, LAEC should:
- assess the purpose, lawful basis, necessity, and proportionality;
- identify the provider and the data or identifiers involved;
- update this policy and the Privacy Policy;
- implement consent or preference controls when required; and
- allow users to withdraw or change consent as applicable.
Browser “Do Not Track” signals are not implemented consistently across providers. LAEC does not currently use those signals as a substitute for a disclosed consent or preference mechanism.
8. Policy Updates
LAEC may update this policy when authentication persistence, local course caching, analytics, embedded content, advertising, payment services, hosting, or other browser-storage practices change. The effective date at the top of the policy will be revised when material changes are made.
9. Contact
Questions, privacy requests, or concerns relating to cookies and browser storage may be sent to laquihonconsultants@laecinc.com.
Additional information about personal-data collection, purposes, retention, disclosures, security, and data-subject rights is provided in the LAEC Privacy Policy.