隱私政策
Privacy Policy
關於這份政策
當你在 beyondtaiwannpo.com 使用我們的服務時，我們會儲存部分與你有關的資料。這份政策說明我們收集什麼、誰能存取、以及你可以如何管理這些資料。
關於我們
Beyond Taiwan 是台灣的非營利組織，致力於讓公立高中的學生看見海外升學的選項。
聯絡信箱：beyondtaiwan2020@gmail.com
我們收集的資料
帳號資料
| 資料 | 用途 |
|---|---|
| 登入識別與必要的聯絡 | |
| 密碼 | 經加密後儲存，我們無法讀取原文 |
若你選擇以 Google 登入，我們會取得你的 email 與姓名。我們不會取得你的 Google 密碼，也不會存取你的信件、雲端硬碟或任何其他 Google 服務。
使用服務時產生的資料
| 資料 | 內容 |
|---|---|
| 個人資料 | 中英文姓名、所屬團隊、大頭照、時區 |
| 護照資料 | 個人標語、核發日期 |
| 蓋章紀錄 | 完成的活動項目與日期 |
| 心得 | 你在各項目中寫下的文字 |
| 照片 | 你為各項目上傳的影像 |
| 入境章 | 完成當月所獲得的城市 |
學員與申請人的資料
若你以學員身分使用這個網站（申請活動、取得資源），我們會另外儲存下列資料。你不需要是 BT 幹部也可以有帳號。
| 資料 | 用途 |
|---|---|
| 姓名 | 申請與聯絡 |
| 就讀學校、年級 | 決定活動要辦在哪裡、辦給誰 |
| 申請內容 | 你在申請表上填寫的答案 |
| 家長或監護人 email | 若你未滿 18 歲且填寫了，我們會寄一封告知信給對方 |
| 活動通知的訂閱狀態 | 你有沒有同意收 BT 的活動通知與資源更新，以及同意的時間 |
| 簽到紀錄 | 你有沒有到場 |
訂閱是選填的，預設不勾。不訂閱不影響你使用帳號、申請活動或取得資源。每一封通知信都有取消訂閱的方式。
資料的可見範圍
| 資料 | 可見對象 |
|---|---|
| 姓名、團隊、大頭照 | 其他 BT 幹部（顯示於進度牆） |
| 申請內容與答案 | 只有負責該計畫的團隊，不是全體幹部 |
| 學校、年級 | 你送出的申請裡會包含，同上 |
| 姓名、團隊、大頭照（若你另外同意公開） | 任何人，包含搜尋引擎 |
| 蓋章紀錄與日期 | 其他 BT 幹部 |
| 心得 | 僅限本人 |
| 照片 | 僅限本人 |
| Email 與密碼 | 不對任何使用者開放 |
心得與照片的隔離是在資料庫層級實作的權限規則，而非僅在介面上隱藏。其他使用者即使直接對系統發出請求，也無法取得這些內容。申請內容也是同一套做法：不屬於該計畫團隊的幹部，即使直接對系統發出請求也讀不到。
公開的團隊頁
幹部的姓名、團隊與大頭照預設不公開。要出現在網站的公開團隊頁上，需要兩件事同時成立：本人自己在帳號頁勾選同意，以及 Co-President 核可。任一方隨時可以撤回。
請注意：公開的網頁會被搜尋引擎收錄與封存。姓名撤下之後不會再顯示，但已被第三方封存的副本我們無法移除。未滿 18 歲的成員不會被放上公開頁面。
校友頁上的個人故事
幹部與校友可以在設定裡填一段自己的故事。勾了同意、而且經過 Co-President 核可之後，下面這些會出現在任何人都看得到的校友頁上，也會被搜尋引擎收錄：公開顯示的名字（可以自己遮字）、大頭照、高中、現在所在的城市與國家、現在就讀的學校或工作的地方、你自己寫的一句話與一段介紹。
隨時可以到設定把那個勾拿掉，拿掉之後會立刻從公開頁面上消失。但搜尋引擎存過的快取不會立刻跟著消失，那不是我們控制得了的。
不填、不勾完全沒有關係，也不影響你在 BT 的任何事。
管理者的存取範圍
管理者透過資料庫後台，技術上能夠存取所有資料，包含心得與照片。任何需要維護資料庫的組織都無法在技術上排除這一點，因此我們以明確的內部規範限制它：
- 不會為了任何非必要的理由讀取使用者的心得或照片
- 收到與隱私有關的疑慮回報時，不會以「查證」為由讀取相關內容
- 僅在使用者本人請求協助時（例如要求匯出或刪除資料）存取其資料
我們選擇明確說明這項限制，而非以概括的措辭迴避它。
你的瀏覽器裡存了什麼
登入後，我們會在你的瀏覽器存一筆登入憑證，用途只是讓你不必每次重新整理都重新登入。登出即清除。
我們不使用 cookie，也不追蹤你在其他網站的行為。
資料儲存位置與經手的第三方
| 第三方 | 角色 |
|---|---|
| Supabase | 資料庫，伺服器位於新加坡 |
| GitHub Pages | 網站託管；會產生我們無法存取的伺服器紀錄 |
| Google Fonts | 提供本站使用的字體 |
| cdnjs（Cloudflare） | 提供首頁動畫使用的 GSAP 程式庫 |
| 僅在你選擇以 Google 登入時 | |
| Resend | 代為寄送系統信件（確認信、重設密碼、申請結果通知、活動通知） |
| Cal.com | 僅在你點擊我們寄給你的面試預約連結時；你在那裡填寫的姓名與 email 由該服務保存 |
| YouTube | 僅在你按下首頁宣傳影片的播放鍵時；在那之前本站不會與 YouTube 有任何往來 |
本網站使用 Google Fonts 載入字體，並從 cdnjs（Cloudflare）載入首頁動畫使用的 GSAP 程式庫，因此你的瀏覽器會向 Google 與 Cloudflare 發出請求，它們會取得你的 IP 位址與瀏覽器資訊。這不涉及任何追蹤或分析，但它是資料離開本站到第三方，所以在此說明。
首頁若放了宣傳影片，畫面上先出現的是本站自己畫的封面，只有在你按下播放鍵之後才會載入 YouTube 的播放器，此時你的瀏覽器才會向 YouTube 發出請求。播放器使用 youtube-nocookie.com。
我們未將任何使用者資料提供給廣告服務、資料仲介或其他第三方組織。
本網站不使用任何追蹤或廣告工具，包含 Google Analytics、Facebook Pixel 及行為追蹤 cookie。
未成年使用者
BT 的成員包含未滿 18 歲者。我們採取以下措施：
- 不公開任何使用者的個人聯絡方式，email 不會出現在其他使用者可見的任何位置
- 不安排未經團隊記錄的一對一私下聯繫
- 大頭照將顯示於進度牆供其他幹部查看，此事會在上傳當下再次提示
- 使用者可隨時移除自己的大頭照
申請活動時，若你未滿 18 歲，申請表上會請你填寫家長或監護人的 email。送出之後，我們會寄一封信告知對方你申請了什麼活動、我們保存哪些資料。那是一封告知信，不需要回覆或簽名，也不會因為沒有填而擋下你的申請。
未滿 18 歲使用者的家長或監護人如需了解我們所儲存的資料，可來信洽詢。
你的權利
查看與更正：登入後可於護照中檢視全部資料，姓名、團隊與大頭照均可自行修改。
匯出：護照資料頁提供「匯出備份」，可下載包含你全部資料的檔案。
刪除部分資料：「清除這本護照」將永久刪除你的蓋章紀錄、心得與照片。此操作無法復原。
刪除帳號：學員可於帳號頁自行刪除，該操作會一併刪除你送出過的每一份申請與其中的答案。幹部請來信至 beyondtaiwan2020@gmail.com。
取消訂閱：於帳號頁取消勾選，或點擊任何一封通知信中的取消訂閱連結。
所有刪除操作皆為永久刪除，而非隱藏或停用，且無法復原。建議於刪除前先行匯出備份。
我們不做的事
- 不販售、出租或交換使用者資料
- 不將使用者資料用於廣告投放
- 未經同意不將使用者的姓名、照片或文字內容用於對外宣傳
- 不追蹤使用者在其他網站的行為
資料保存期間
我們目前沒有設定自動刪除的期限。你的資料，包含你送出過的申請與其中的答案，會保存到你自己刪除，或是你來信要求我們刪除為止。
我們選擇把這件事寫清楚，而不是寫成「保存至必要期間」——那句話在實務上沒有意義。相對地，刪除的方式一定是你自己按得到的：學員可於帳號頁自行刪除帳號與全部資料。
政策變更
若我們變更資料的收集或使用方式，將更新本頁日期並於網站公告。涉及新增資料類型或改變可見範圍等重大變更，將另行以 email 通知使用者。
聯絡我們
beyondtaiwan2020@gmail.com
English
About this policy
When you use our services at beyondtaiwannpo.com, we store certain information about you. This policy explains what we collect, who can access it, and how you can manage it.
About us
Beyond Taiwan is a non-profit organisation in Taiwan working to help students at public high schools see their options for studying abroad.
Contact: beyondtaiwan2020@gmail.com
What we collect
Account information
| Data | Purpose |
|---|---|
| Email address | Login identification and necessary correspondence |
| Password | Stored encrypted; we cannot read it |
If you sign in with Google, we receive your email address and name. We do not receive your Google password, and we do not access your mail, Drive, or any other Google service.
Information created through use of the service
| Data | Content |
|---|---|
| Profile | Name in Chinese and English, team, profile photo, time zone |
| Passport details | Personal line, date of issue |
| Stamps | Which activities you completed and on what date |
| Entries | Text you write for each activity |
| Photos | Images you upload for each activity |
| Entry stamps | The city awarded for each completed month |
Students and applicants
If you use this site as a student (applying to a programme, taking a resource), we also store the following. You do not need to be a Beyond Taiwan organiser to have an account.
| Data | Purpose |
|---|---|
| Name | Applications and correspondence |
| School and year | Deciding where to run programmes and for whom |
| Application content | The answers you write on an application form |
| Parent or guardian email | If you are under 18 and provide one, we send them a single notice |
| Newsletter consent | Whether you agreed to receive our announcements, and when you agreed |
| Attendance | Whether you came to an event |
Consent is optional and unchecked by default. Not subscribing does not affect your account, your applications, or your access to resources. Every announcement includes a way to unsubscribe.
Who can see what
| Data | Visible to |
|---|---|
| Name, team, profile photo | Other BT cadres, shown on the progress wall |
| Application content and answers | Only the team that runs that programme, not all organisers |
| School and year | Included in the applications you submit; same as above |
| Name, team, profile photo (only if you separately agree to be public) | Anyone, including search engines |
| Stamps and dates | Other BT cadres |
| Entries | You only |
| Photos | You only |
| Email and password | No other user |
The isolation of entries and photos is enforced by database-level access rules, not by hiding them in the interface. Other users cannot retrieve this content even by querying the system directly. Application content works the same way: an organiser outside the team that runs that programme cannot read it, even by querying the system directly.
The public team page
An organiser's name, team and photo are not public by default. Appearing on the site's public team page requires two things at once: the person agreeing on their own account page, and a Co-President approving it. Either side can withdraw at any time.
Please note: public pages are indexed and archived by search engines. A name removed from the page stops being displayed, but we cannot remove copies already archived by third parties. Members under 18 are not put on public pages.
Administrator access
Administrators can technically access all data, including entries and photos, through the database console. No organisation that maintains a database can eliminate this technically, so we constrain it by explicit internal rule:
- We do not read anyone's entries or photos without a necessary reason
- When a privacy concern is reported, we do not read the content in question in order to verify it
- We access a user's data only when that user asks us for help, such as with an export or deletion request
We state this limitation explicitly rather than obscuring it with broader language.
What is stored in your browser
After you sign in, we store one login credential in your browser. Its only purpose is so that you do not have to sign in again every time the page reloads. It is cleared when you sign out.
We do not use cookies, and we do not track your activity on other websites.
Where data is stored, and the third parties involved
| Third party | Role |
|---|---|
| Supabase | Database; servers located in Singapore |
| GitHub Pages | Site hosting; produces server logs that we cannot access |
| Google Fonts | Serves the typefaces this site uses |
| cdnjs (Cloudflare) | Serves the GSAP animation library used on the home page |
| Only if you choose to sign in with Google | |
| Resend | Delivers our system email (confirmations, password resets, application decisions, announcements) |
| Cal.com | Only if you click an interview booking link we send you; the name and email you enter there are held by that service |
| YouTube | Only if you press play on the home page video; until then this site does not contact YouTube at all |
This site loads its typefaces from Google Fonts and the GSAP animation library used on the home page from cdnjs (Cloudflare), so your browser makes requests to Google and Cloudflare, and they receive your IP address and browser information. This involves no tracking or analytics, but it is data leaving this site to a third party, so we state it here.
If the home page carries a video, what you first see is a cover drawn by this site. The YouTube player loads only after you press play, and only then does your browser make a request to YouTube. The player uses youtube-nocookie.com.
We do not provide user data to advertising services, data brokers, or any other third-party organisation.
This site uses no tracking or advertising tools, including Google Analytics, Facebook Pixel, and behavioural tracking cookies.
Users under 18
Some BT members are under 18. We apply the following measures:
- No user's personal contact details are made public; email addresses do not appear anywhere visible to other users
- We do not arrange one-to-one private contact that is not recorded by the team
- Profile photos are shown to other cadres on the progress wall; this is stated again at the moment of upload
- Users may remove their profile photo at any time
When you apply to a programme, if you are under 18 the form asks for a parent or guardian email. After you submit, we send them one message saying what you applied for and what we keep. It is a notice, not a consent form; no reply or signature is needed, and leaving the field blank does not block your application.
Parents or guardians of users under 18 may contact us to learn what data we hold.
Your rights
Access and correction. All your data is visible in your passport once you sign in. Name, team, and profile photo can be changed by you at any time.
Export. The passport's details page provides an export function that downloads a file containing all of your data.
Deleting part of your data. The reset function permanently deletes your stamps, entries, and photos. This cannot be undone.
Deleting your account. Students can do this themselves on their account page; it also deletes every application they have submitted and the answers in it. Organisers should write to beyondtaiwan2020@gmail.com.
Unsubscribing. Untick the box on your account page, or use the unsubscribe link in any announcement.
All deletions are permanent rather than hidden or deactivated, and cannot be reversed. We recommend exporting a backup first.
What we do not do
- We do not sell, rent, or trade user data
- We do not use user data for advertising
- We do not use anyone's name, photo, or written content in external communications without consent
- We do not track users across other websites
Retention
We currently set no automatic deletion period. Your data, including any applications you have submitted and the answers in them, is kept until you delete it yourself or ask us to delete it.
We say this plainly rather than writing "kept for as long as necessary", which means nothing in practice. In exchange, deletion is always something you can do yourself: students can delete their account and all of their data from their account page.
Changes to this policy
If we change how we collect or use data, we will update the date on this page and post a notice on the site. For significant changes, such as collecting a new category of data or changing who can see what, we will notify users by email.
Contact
beyondtaiwan2020@gmail.com