Privacy Policy
Last updated: July 2026 • National University of Singapore Comics and Animation Society
1. Overview & Compliance
The National University of Singapore Comics and Animation Society (NUSCAS) is a self-governing student organisation registered with the Registry of Societies of Singapore. As a student organisation handling personal data of members and site visitors, NUSCAS complies with the Singapore Personal Data Protection Act 2012 (PDPA).
This Privacy Policy explains what personal data we collect, why we collect it, how it is secured, and your rights regarding your personal information when using our website and services.
2. Personal Data We Collect & Purpose
We collect only the minimum necessary information required to operate our member portal, publish content, and manage club activities:
| Data Collected | Target Group | Purpose | Retention Period |
|---|---|---|---|
| Email Address | Members | Account authentication & transactional notices | Until account deletion |
| Display Name | Members | Attribution on public articles & member profile | Until account deletion |
| Telegram User ID | Members (Optional) | Account linking with NUSCAS Telegram bot | Until member unlinks account |
| Rating Scores & Notes | Members | Computing public aggregates & personal score log | Until member deletes rating |
| Article Drafts | Members | Article submission & publishing workflow | Until published or rejected |
| IP Address & Access Logs | All Visitors | Security, rate limiting & server analytics | 30 days (Vercel standard log retention) |
3. Authentication & Identity Verification
We use Google OAuth as our primary sign-in method to provide secure, single-click login without storing passwords.
Google acts solely as an identity verifier to confirm ownership of your Google account and share your email address and display name. Personal data stored on our platform is housed securely within our database infrastructure (Supabase) and is not shared back to Google or sold to third parties.
4. Ratings Privacy & Aggregation Safeguards
Member privacy in the rating system is strictly guarded:
- No Public Individual Scores: Individual scores and rating notes are private to your account and never exposed on public API endpoints or pages.
- Three-Rater Minimum: A title must be rated by at least three (3) distinct members before an aggregate score is displayed publicly. This prevents reverse-engineering of individual member scores on sparse titles.
- Database Enforced Security: Row-Level Security (RLS) is enforced directly at the database level to ensure member data isolation.
5. Artwork & Content Consent
All member-created artwork showcased in the NUSCAS Art Gallery is uploaded with recorded artist consent. Artists are credited using their chosen display name.
Takedown Policy: Artists may request removal of their artwork from the gallery at any time, for any reason. Takedown requests are processed by the committee within seven (7) days, upon which the image files are permanently deleted from storage.
6. Your Data Protection Rights
Under the Singapore PDPA, members have the right to request access to or deletion of their personal data stored by NUSCAS:
- Account Deletion: You may request full account deletion at any time by contacting an administrator. Deletion requests will be fulfilled within thirty (30) days.
- Public Article Attribution: Upon account deletion, published articles attributed to your display name will have author attribution updated to "Former Member" to preserve public contributions while disassociating your identity.
- Telegram Unlinking: You can disconnect your Telegram user ID at any time via the account settings page or by sending
/unlinkto the NUSCAS Telegram bot.
7. Contact Information
If you have questions regarding this Privacy Policy or wish to submit a data protection / deletion request, please reach out to the NUSCAS Executive Committee: