Privacy Notice

Last updated: 22 May 2026 · Effective: 22 May 2026

1. Who We Are

ChinookLake Social Play Inc. ("ChinookLake", "we", "our", "us") operates the free social entertainment platform accessible at this domain. Our registered mailing address is 242 King Street West, Toronto, ON M5V 1J2, Canada. You can reach our privacy team at [email protected]. We are the data controller for personal information collected through this website.

This Privacy Notice explains what information we collect from visitors, why we collect it, how long we retain it, who we share it with, and what rights you have under Canadian privacy law — specifically the Personal Information Protection and Electronic Documents Act (PIPEDA), Ontario's privacy expectations, and, where applicable, the General Data Protection Regulation (GDPR) for visitors from the European Economic Area.

2. What We Collect (Itemised Inventory)

ChinookLake collects only the minimum information needed to operate the platform and comply with legal obligations. The following table summarises every category of data we collect, why we collect it, and how long we retain it.

Category	Description	Purpose	Retention
Browser / device fingerprint	User agent string, viewport size, browser language, operating system	Analytics, debugging, bot detection	90 days (aggregated)
IP address	Numerical network address assigned by your ISP	Geolocation for legal compliance; security; rate limiting	30 days in server logs; anonymised thereafter
Cookie data	Session token (age gate consent, cookie preference)	Remembering your consent choices between visits	12 months or until manually cleared
Usage data	Pages visited, time on page, referral source, game session duration	Improving platform performance and content quality	13 months in analytics system; deleted after
Voluntary contact	Email address and message content if you email us directly	Responding to your inquiry	3 years or until erasure request fulfilled

3. What We Do NOT Collect

Because ChinookLake requires no account creation, no registration, and accepts no real money, we do not collect the following categories of data:

• Full name, home address, or date of birth (beyond the age-gate click confirmation)
• Payment card numbers, bank account details, or any financial information
• Social Insurance Number (SIN) or any government-issued identifier
• Biometric data
• Location data beyond country-level geolocation derived from IP address
• Health or wellness information of any kind
• Device identifiers (IDFA, GAID) — we do not operate a mobile app

The absence of account registration means there is no user profile linked to your identity. We cannot associate your gameplay history with you as an individual unless you voluntarily contact us with identifying information.

4. Third-Party Processors

We use a limited number of third-party services to operate the platform. Each is bound by a data processing agreement that restricts them from using your data for their own purposes:

• Google Analytics 4 — web analytics. Data is collected anonymously with IP anonymisation enabled. Google's privacy policy: policies.google.com/privacy
• Cloudflare — content delivery, DDoS protection, and security. Cloudflare may process your IP address at its network edge. Cloudflare's privacy policy: cloudflare.com/privacypolicy
• Google Fonts — web font delivery. Font requests may log your IP address for a short period. Google Fonts privacy information: developers.google.com/fonts/faq/privacy

We do not use advertising networks, data brokers, affiliate tracking pixels, or social media remarketing tags. We do not sell, rent, or trade your personal information with any third party for their own marketing purposes.

5. Cookies and Local Storage

We use browser cookies and localStorage to remember your choices between visits. Our Cookie Policy (cookies-notice.php) provides a full inventory of every cookie and localStorage key we set, its purpose, and its duration. In summary: we set two first-party localStorage items (age gate confirmation and cookie consent flag) and Google Analytics cookies once you have consented. We do not set advertising cookies of any kind.

6. How We Use the Data

We use collected data exclusively for the following purposes: (a) operating the platform and ensuring it functions correctly across devices and browsers; (b) understanding aggregate user behaviour to improve the experience (analytics); (c) detecting and preventing abuse, including bot traffic and violation of our age restrictions; (d) complying with legal obligations under Canadian law; (e) responding to voluntary contact from users.

We do not use collected data for profiling, targeted advertising, automated decision-making that produces legal effects, or re-sale to any third party. Our analytics are configured in aggregate mode — we analyse patterns of use across all visitors, not the behaviour of specific individuals.

7. Data Retention Windows

We retain personal data only for as long as necessary for the purpose for which it was collected. Server logs containing IP addresses are automatically purged after 30 days. Anonymised, aggregated analytics data is retained for 13 months and then deleted. Email correspondence is retained for 3 years to enable follow-up on reported issues, after which it is permanently deleted. localStorage items in your own browser persist until you clear them or until their natural expiry of 12 months.

8. Your Rights Under PIPEDA and Related Legislation

As a Canadian resident, you have the following rights regarding your personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation:

• Right of access: You may request a copy of the personal information we hold about you.
• Right of correction: You may request that we correct inaccurate or incomplete personal information.
• Right of withdrawal of consent: You may withdraw consent to our processing of your data at any time, subject to legal and contractual restrictions.
• Right of erasure: You may request deletion of your personal information where we no longer have a legal basis to retain it.
• Right of complaint: You may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.

If you are located in the European Economic Area, you additionally have rights under GDPR, including the right to data portability and the right to object to processing. We honour all GDPR requests from EEA residents to the same standard as Canadian PIPEDA requests.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving your request. We may need to verify your identity before processing the request to protect against unauthorised access.

9. Security Posture

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Our platform is served over HTTPS with TLS 1.2 or higher. Access to server logs and analytics data is restricted to a small number of authorised team members under a need-to-know policy. We do not store financial information of any kind because we do not accept payments.

No internet transmission is 100% secure. If you have reason to believe that your information has been compromised in connection with our platform, please notify us immediately at [email protected] so we can investigate and take appropriate action.

10. International Data Transfers

Our primary hosting infrastructure is located in Canada. However, some third-party processors (Google Analytics, Cloudflare) may process data on servers located in the United States or other jurisdictions. Where data is transferred outside Canada, we rely on contractual safeguards (standard contractual clauses) and the adequacy decisions where available to protect your information. Users in the EEA should note that transfers to Canada are covered by the EC's adequacy decision for PIPEDA-governed entities.

11. Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices, legal requirements, or service offerings. When we make material changes, we will update the "Last updated" date at the top of this document. We encourage you to review this notice periodically. Continued use of the platform after any change constitutes your acceptance of the updated notice.

12. Contact and Complaints

For any privacy-related question, concern, or request, please contact our privacy team:

ChinookLake Social Play Inc.
Privacy Officer
242 King Street West, Toronto, ON M5V 1J2, Canada
Email: [email protected]
Phone: +1 (416) 555-0173

If you are unsatisfied with our response, you have the right to escalate your complaint to the Office of the Privacy Commissioner of Canada at priv.gc.ca or, for Ontario residents, the Information and Privacy Commissioner of Ontario at ipc.on.ca.