This policy explains what personal information the DungeonSignal website (dungeonsignal.com) collects, why it is collected, how long it is kept and what choices you have. It is written for readers in Canada and follows the principles of the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).
1. Who is responsible
DungeonSignal is an independent editorial project publishing reviews of free-to-play labyrinth and puzzle games available on Google Play. The editorial team is responsible for the personal information described here and can be reached at [email protected]. Please use the subject line "Privacy" so your request is routed correctly.
2. What we collect
2.1 Technical data collected automatically
- IP address (in shortened or full form, depending on the service);
- browser type and version, operating system and user-agent string;
- referring page, pages viewed on this site, and the date and time of each request;
- approximate region derived from the IP address;
- server log entries generated by our hosting provider.
2.2 Cookies and similar technologies
The site sets a small number of cookies and equivalent browser storage entries. One of them records your answer to the cookie notice so it is not shown again. Analytics and advertising technologies are only activated where you have agreed to them. The full list, with purposes and lifetimes, is in the cookie policy.
2.3 Advertising identifiers
Where advertising is displayed or measured, advertising partners may read or set their own identifiers in your browser in order to limit repetition and to measure whether an advertisement was seen or clicked. These identifiers do not tell us your name.
2.4 Subscription form data
If you use the update form on the home page we process the information you enter: your email address (required), and optionally your name and telephone number. We also record the fact and time of your consent, plus the technical data listed in section 2.1.
2.5 Web push notification data
If you allow browser notifications, our push provider generates a subscription identifier for your browser and stores technical attributes such as browser type, operating system, language, approximate region and the timestamps of messages sent to you. Where you have submitted the form, the email address, name and telephone number you provided are attached to that record as tags, together with the site domain and the source of the subscription.
3. Why we process it, and on what basis
| Purpose | Data used | Basis |
|---|---|---|
| Delivering the website and keeping it secure and stable | Technical data, necessary cookies | Our legitimate interest in operating the site, which you would reasonably expect |
| Understanding which articles are read, in aggregate | Analytics cookies, technical data | Your consent, given through the cookie notice |
| Displaying and measuring advertising | Advertising identifiers, technical data | Your consent, given through the cookie notice |
| Sending editorial updates by email | Email address, name, telephone number | Your express consent (CASL) |
| Sending browser push notifications | Push subscription identifier and its tags | Your express consent, given twice: in the form and in the browser prompt |
4. Service providers we share data with
We do not sell personal information. We disclose it only to the providers that make the service work, each of which acts on our instructions:
- Hosting and content delivery. Stores the site files and processes server logs so pages can be delivered to your browser.
- Web analytics. Produces aggregate readership statistics; only loaded after you agree to analytics cookies.
- Advertising networks. Deliver and measure the promotional placements described in our terms of use; only loaded after you agree to advertising cookies.
- OneSignal, Inc. Acts as our processor for email and browser push notifications. It stores your push subscription identifier, the tags described in section 2.5, and delivery records. Servers are located in the United States.
Some of these providers are located outside Canada, which means your information may be stored in or accessed from another country and may be subject to the laws of that country. We use providers that commit contractually to a comparable level of protection.
5. How long we keep it
- Server logs: normally up to 12 months, then deleted or aggregated.
- Analytics data: up to 14 months in identifiable form, then aggregated.
- Cookie consent record: up to 12 months, after which the notice reappears.
- Email and push subscription records: until you withdraw consent or unsubscribe, and for a short period afterwards to record that the withdrawal was actioned.
- Correspondence sent to our inbox: up to 24 months from the last message.
6. Your rights
Under Canadian privacy law you may, at any time:
- ask what personal information we hold about you and obtain access to it;
- ask us to correct information that is inaccurate or incomplete;
- withdraw a consent you previously gave, including for email and push messages;
- ask us to delete information we no longer need to keep;
- ask how a specific piece of information was collected or who it was disclosed to.
Write to [email protected] and we will respond in writing, normally within 30 days. If you are not satisfied with our answer you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC), which supervises the application of PIPEDA.
7. Withdrawing consent
For email updates, use the unsubscribe link in any message we send, or write to us. For browser notifications, open your browser's site settings for dungeonsignal.com and set notifications to "block"; this stops delivery immediately. To withdraw consent for analytics and advertising cookies, clear the site's storage in your browser and choose "Decline" when the notice reappears.
8. Security
The site is served over an encrypted connection. Access to subscriber records is limited to the people who need it for editorial work and is protected by individual accounts and multi-factor authentication where the provider supports it. No online service can promise absolute security, but we review these measures regularly.
9. Children
The site is written for a general audience and is not directed at children. We do not knowingly collect personal information from a child. If you believe a child has given us their details, write to us and we will remove the record.
10. Changes to this policy
If this policy changes we update the date at the top of the page. Material changes that affect how we use information already collected will be announced on the home page before they take effect.