Overview
This site supports the KIMIRoutes LB: Campus Active Transport Study, a human–computer interaction research project at the University of the Philippines Los Baños. It collects participant information for screening, informed consent, and study coordination. This policy explains what we collect, why, and how it is protected.
Information we collect
Screening and registration
- Full name and email address.
- Facebook or Messenger contact (optional, for study coordination).
- Whether you are an HCI student (eligibility screening).
Electronic informed consent
- Your agreement to participate, recorded via checkbox with a timestamp (
consentTimestamp). - A copy of your consent record is emailed to you and the research team.
Technical data
- reCAPTCHA v3 — Google processes interaction signals to produce a bot-risk score. See Google's Privacy Policy.
- IP address — used for rate limiting and abuse prevention via Upstash Redis (hashed or keyed per request window, not sold).
- Standard server logs from our hosting provider (Vercel).
How we use your information
- Determine eligibility for the study.
- Send study instructions and Maze evaluation links via email (Brevo).
- Maintain consent records required for research ethics.
- Prevent spam and automated abuse (Upstash rate limits, reCAPTCHA).
- Contact you about scheduling or follow-up related to the study.
Third-party services
- Brevo — transactional email delivery (name, email, study content in message body).
- Google reCAPTCHA — bot detection on form submission.
- Upstash Redis — per-IP and per-email rate limiting counters.
- Vercel — hosts the website and may retain access logs.
We do not sell participant data. Data is used for this research study only, subject to your consent.
Retention
Consent records and participant contact information are retained for the duration of the study and as required by UPLB research ethics guidelines, then deleted or anonymized when no longer needed.
Your rights
- Participation is voluntary — you may withdraw at any time.
- Request access to or correction of your submitted information.
- Ask questions before consenting via the study contact email.
Security
Form submissions are sent over HTTPS. API keys for Brevo, reCAPTCHA, and Upstash are stored as server-side environment variables, not exposed to browsers. Rate limiting reduces automated abuse.
Changes
This policy may be updated as the study progresses. The date above reflects the latest revision.
Contact
Questions about privacy or your participation? Contact the KIMIRoutes LB research team through the email address provided in the informed consent form.