Privacy Policy

1. What We Collect

InukshukSpirit is designed to be a minimal-data platform. When you visit this website without consenting to analytics cookies, we collect only:

• Server logs: IP address (anonymised to /24 prefix within 24 hours), timestamp, page URL, HTTP status code, browser type, and operating system. Purpose: diagnosing server errors and monitoring traffic patterns. Retention: 30 days, then deleted.
• Cookie consent record: A boolean flag stored in your browser (localStorage and a session cookie) recording whether you have accepted or declined optional cookies. This record stays in your own browser and is never transmitted to our servers.
• Age verification record: A boolean flag stored in your browser indicating that you have confirmed you are 18 or older. This record stays in your own browser and is never transmitted to our servers.

If you consent to analytics cookies, we additionally collect through Google Analytics 4: session duration, pages visited per session, general geographic region (country or province level, never city or street), device category (mobile / tablet / desktop), and browser version. All data collected through Google Analytics is anonymised and aggregated — individual users are not identifiable.

If you contact us by email, we collect only the information you choose to include in your message (typically your email address and the contents of your enquiry). We do not add this to any marketing list.

2. What We Do Not Collect

InukshukSpirit explicitly does not collect:

• Real names or usernames (there are no accounts)
• Date of birth or precise age (our age gate stores only a pass/fail boolean)
• Payment information of any kind (there is no payment mechanism)
• Location data more precise than country or province
• Behavioural tracking across third-party websites
• Device fingerprints or persistent cross-session identifiers (beyond standard analytics session IDs)
• Virtual credit balances, play history, or game session data (this data exists only in your browser's memory and is not transmitted to our servers)

3. Third-Party Processors

We use the following third-party services that may process data when you visit InukshukSpirit:

• Google Analytics 4 (Google LLC, USA) — anonymised website analytics. Active only if you consent to analytics cookies. Google's privacy policy: policies.google.com/privacy. Data transfer mechanism: EU Standard Contractual Clauses.
• Google Fonts (Google LLC, USA) — web font delivery (Creepster, Poppins). Requests are made to fonts.googleapis.com when you load any page. Google may log the request IP and browser agent per its CDN standard practices. No cookies are set by Google Fonts. For maximum privacy, you can disable font loading by blocking fonts.googleapis.com in your browser or network-level tool.
• Cloudflare cdnjs (Cloudflare Inc., USA) — Bootstrap grid CSS delivery. Requests are made to cdnjs.cloudflare.com. Cloudflare's privacy policy: cloudflare.com/privacypolicy.

We do not use advertising networks, social media pixels, remarketing trackers, or any commercial profiling service. There are no affiliate tracking links on this website.

4. Cookies and localStorage

InukshukSpirit uses a combination of browser cookies and localStorage to store consent and age-gate state. The hybrid approach ensures state persists correctly whether the site is accessed via HTTPS or a local file path. See our Cookie Guide for a full inventory of every cookie and localStorage key we use.

5. How We Use the Data

The data we collect is used exclusively for:

• Diagnosing technical errors (server logs)
• Understanding aggregate usage patterns to improve the website (analytics, with consent)
• Responding to direct enquiries (email)
• Ensuring the age gate and consent mechanism function correctly (browser-local flags)

We do not use your data for marketing, profiling, advertising targeting, or sale to any third party. InukshukSpirit does not have a business model that depends on personal data monetisation.

6. Data Retention

Server access logs: 30 days, then deleted automatically. Google Analytics data: 14 months, per our GA4 retention setting (minimum available). Email enquiries: retained for 24 months after resolution, then deleted. Age-gate and consent browser flags: 180 days in your browser (set by the localStorage expiry), then they expire and will be re-presented on your next visit.

7. Your Rights

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy legislation including Alberta's Personal Information Protection Act (PIPA) and Québec's Loi modernisant des dispositions législatives en matière de protection des renseignements personnels (Loi 25 / Law 25), you have the right to:

• Request access to any personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your data (subject to legal retention obligations)
• Withdraw consent to optional data processing (you can do this by clearing your browser cookies and localStorage, or by declining analytics when prompted)
• Lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca

To exercise any of these rights, email us at [email protected] with "Privacy Request" in the subject line. We will respond within five business days.

8. Security

InukshukSpirit is served exclusively over HTTPS with a valid TLS certificate. We do not store payment information (because we do not accept payments), do not store passwords (because there are no accounts), and do not store any sensitive personal data on our servers. The most sensitive item on our server is the anonymised access log, which is access-controlled and deleted after 30 days.

Despite these protections, no internet service can guarantee absolute security. We will notify affected users and the Privacy Commissioner within 72 hours in the event of any breach involving personal information, in accordance with PIPEDA's mandatory breach notification requirements.

9. International Transfers

InukshukSpirit itself is hosted in Canada. However, our third-party processors (Google Analytics, Google Fonts, Cloudflare) operate infrastructure in the United States and other jurisdictions. Data transfers are governed by the processors' respective data transfer agreements (EU Standard Contractual Clauses for EU/EEA data, and equivalent frameworks for Canadian personal information). By using InukshukSpirit, you acknowledge that your data may be processed in countries outside Canada.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or the services we use. Material changes will be announced via a notice on the homepage for at least 30 days before taking effect. The effective date at the top of this page indicates when the current version was last revised.

If you continue to use InukshukSpirit after a material change takes effect and you have not withdrawn consent, we consider that acceptance of the updated policy. You are always free to withdraw consent and delete your browser data at any time.

11. Contact

InukshukSpirit Privacy Officer: [email protected]
Mailing address: 847 King Street West, Toronto, ON M5V 1N6, Canada
Phone: +1 (416) 555-0193