Home · Privacy Policy
Privacy Policy
Who we are
Zilvafable is an independent, non-commercial editorial guide to mobile games, run by one individual based in Montreal, Quebec. It is not a registered company and we do not publish a registration number we do not hold. For any privacy matter you can reach the person responsible at [email protected]. That inbox also serves as our privacy contact for the purposes of Law 25.
What we collect
We keep data collection to the minimum needed to run the site and send the updates you ask for.
- Subscribe form: your name and your email address. We never ask for a phone number, and there is no field to provide one. The optional notes box is not transmitted or stored anywhere; it stays in your browser.
- Push notifications: if you allow them, your browser issues an anonymous subscription identifier (a push token) that lets us send a notification to that browser. It is tied to the browser, not to your name.
- Server logs: like almost every website, our host records standard technical data such as IP address, browser type (user-agent), and the time of each request. This is used for security and to keep the site running, not to build a profile of you.
We do not use advertising trackers, analytics profiling, or third-party marketing cookies. See the Cookie Notice for the full detail.
Why we use it
- To send you the site updates you subscribed to, by browser notification and by email.
- To keep the website secure and operational (technical logs).
Push notifications and email updates
Push notifications are strictly opt-in and require two deliberate steps: you tick the consent box on the contact page, and then your browser shows its own permission prompt, which you must accept. Nothing is sent unless you accept that prompt. If you decline or ignore it, no push subscription is created.
Update emails are sent only to addresses given through that same form, with the express consent required by Canada's Anti-Spam Legislation (CASL). Every message identifies us and carries a working unsubscribe link.
Withdrawing your consent. You can stop push notifications at any time by blocking or resetting notification permission for this site in your browser settings, with no need to contact us. You can stop the emails using the unsubscribe link in any message, or by emailing [email protected]. Withdrawing is as easy as giving consent was, and it takes effect promptly.
Who we share it with
We do not sell or rent your personal information to anyone. The only third parties involved are our service providers:
- OneSignal (OneSignal, Inc., United States) delivers our push notifications and update emails. Acting as our service provider on our instructions, it processes your email address, your push subscription identifier, and the tags we attach to your subscription (your first name and the site domain). OneSignal's own privacy policy is at onesignal.com/privacy_policy.
- Our web hosting provider, which stores the site files and generates the technical server logs described above.
If a message you send us by email is handled through an email provider, that provider processes it only to deliver mail. We do not pass your details to advertisers or data brokers.
Transfers outside Canada
Some service providers store or process data on servers located outside Quebec or Canada, including in the United States. This is the case for OneSignal, which hosts its infrastructure in the United States: your email address, push subscription identifier and tags are transferred there and may be subject to the laws of that jurisdiction, including lawful access requests by US authorities. As required under Law 25, we assessed this transfer and rely on the contractual protections in OneSignal's data processing terms. If you would rather not have your details processed outside Canada, please do not subscribe. If you would like to know where your specific data is held, email us and we will tell you what we can.
How long we keep it
We keep your subscription details for as long as you stay subscribed. When you unsubscribe or block notifications, the record is removed from our OneSignal audience. Technical server logs are kept for a short period for security and diagnostics before being rotated out. We do not keep personal information longer than we have a reason to.
Your rights
Under PIPEDA and Law 25 you have the right to:
- Access the personal information we hold about you.
- Ask us to correct information that is inaccurate.
- Withdraw your consent and ask us to delete your information.
- Receive your information in a structured, commonly-used format, where that right applies.
To exercise any of these, email [email protected]. We will respond within the timeframes set by law.
How to complain
If you are not satisfied with how we have handled your information, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca. If you are a resident of Quebec, you may also contact the Commission d'acces a l'information du Quebec (CAI).
Changes to this policy
If this policy changes, we will update the date at the top of the page. If we ever begin collecting more than we do today, we will update this policy and the Cookie Notice before switching anything on.