Privacy Notice

1. Who is responsible for this site

onyxbrief.com is published by a private individual, not a company. There is no corporate entity and no staff behind this site. The person responsible for the pages and for every decision described here is:

Dylan Thompson, editor and owner
3294 E 29th Ave
Vancouver, British Columbia V5R 1W4, Canada
Telephone: +1 604-433-3484
E-mail: news@onyxbrief.com

In the language of the Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5 (PIPEDA), that individual is the organization accountable for any personal information connected with this site and the individual designated to answer questions about it. Because the operator lives in British Columbia, the Personal Information Protection Act (SBC 2003, c. 63) is treated as applying alongside PIPEDA wherever it gives a reader a stronger position.

2. What this notice covers

This notice applies to the pages served at onyxbrief.com and to nothing else. It does not cover the Google Play store, the games discussed here, the studios that publish them, or any other destination reached by following a reference from this site. Those services publish their own notices and answer for their own handling of personal information.

3. What this site does not do

The most useful thing this notice can say is what is absent. onyxbrief.com is a plain reading site with no interactive services attached.

• There is no contact form, comment box, search field or sign-up anywhere on the site. No page contains a form element, so no page can send anything you type.
• There is no newsletter, mailing list, subscriber database, user account or profile. Nothing here asks for your name, e-mail address, telephone number or postal address.
• There is no advertising, advertising network, retargeting tag, social media widget or embedded third-party player.
• There is no analytics product of the operator's own: no page-view counter, session recorder, heat map or visitor identifier.
• Nothing here sells anything or handles card details. Games come from the Google Play store, where any purchase and any refund is settled.

Writing to the operator by e-mail or telephone is the one situation in which the operator holds information you supplied yourself; section 7 explains what happens to it.

4. What is processed when a page is delivered

Serving a web page is not silent. The hosting provider that stores the files and the content delivery network in front of it (Cloudflare, Inc.) both see technical data about the request, at the network level, before any content reaches your screen. In server and edge logs they process:

• the page requested and, when your browser sends one, the referring address;
• the date, time, response status and size of the request;
• the user-agent string describing your browser family, version and operating system;
• your internet protocol address, from which an approximate country is derived for routing and abuse prevention;
• aggregate measurements of how quickly pages render, commonly known as Core Web Vitals.

None of this requires a cookie set by this site, and none of it is combined by the operator to build a profile of a reader. Cloudflare may set its own strictly technical entries for security and network integrity, and may add a small performance measurement script of its own at the edge; that behaviour belongs to Cloudflare as a provider and is described on the cookie usage page. Logs are used only to keep the site online, diagnose faults and defend against abusive traffic.

5. Storage on your device

This site sets no cookies of its own. It writes exactly one entry into your browser's local storage, named ob6:notice:v2, and only after you press a button on the storage notice. The entry records nothing but the fact that a choice was made, so the notice is not repeated on every page. It carries no identifier, is read by nothing but your own browser and is never transmitted. Clearing site data removes it permanently and the site works exactly as before.

6. Purposes and legal basis

Under PIPEDA the operator must identify the purposes for which information is handled and limit handling to them. Those purposes are:

• delivering the requested pages and keeping them available;
• maintaining the security and integrity of the site, including defence against automated abuse;
• diagnosing faults and measuring page performance in aggregate;
• answering correspondence a reader chooses to start.

Network-level processing rests on the implied consent that accompanies a request for a page; the local storage entry rests on the express choice you make on the notice; correspondence rests on the consent implied by your decision to write. Canada's Anti-Spam Legislation (S.C. 2010, c. 23) is respected in the plainest way: this site never sends commercial electronic messages, having no list to send them to, and any reply is a direct answer to a message you sent first.

7. Correspondence

If you write to the address above, the operator receives your e-mail address or telephone number and whatever you put in the message. That material is used to answer you and for nothing else: never added to a mailing list, never used for marketing, never sold, rented or shared. Correspondence is kept while the matter is open and for up to twenty-four months afterwards, so a related follow-up can be understood in context, then deleted.

8. Disclosure and transfers outside Canada

Information connected with this site is not sold, rented or traded. It is disclosed only to the hosting provider and to Cloudflare, as service providers processing data on the operator's behalf for the purposes named in section 6, and where Canadian law or a lawful order of a court or regulator requires it.

Cloudflare operates a global network, so a request from a reader in Canada may be handled by an edge location outside Canada, including in the United States, in a country whose laws differ from Canadian law and whose authorities may in some circumstances obtain access. PIPEDA permits such transfers to a service provider on condition that the organization uses contractual means to give the information comparable protection; the operator relies on the data processing terms published by those providers, which include recognised transfer safeguards, and on the fact that only technical request data is involved — never content supplied by a reader through the page, because the page supplies none.

9. Retention

Server and edge logs are retained by the providers for short operational periods, generally days rather than months, then discarded or aggregated beyond any link to a single reader; the operator keeps no separate copy. Correspondence is retained as described in section 7, and the local storage entry stays in your browser until you clear it.

10. Your rights

PIPEDA gives you rights that the operator will honour without charge:

• Access. Ask what personal information about you the operator holds, how it is used and to whom it has been disclosed.
• Correction. Ask for inaccurate or incomplete information to be corrected, and the correction passed to anyone who received the original.
• Deletion. Ask for correspondence held about you to be deleted, subject only to a legal obligation to retain it.
• Revoking consent. Revoke consent at any time, subject to legal and contractual restrictions and reasonable notice: in practice, asking the operator to stop corresponding with you and clearing the local storage entry.
• Complaint. Complain about how the operator has handled your personal information.

Requests go to the e-mail or postal address in section 1 and are answered within thirty days, the period PIPEDA sets for an access request. If the answer does not satisfy you, bring the matter to the Office of the Privacy Commissioner of Canada, 30 Victoria Street, Gatineau, Quebec K1A 1H3, telephone 1-800-282-1376, priv.gc.ca. Readers in British Columbia may also contact the Office of the Information and Privacy Commissioner for British Columbia, PO Box 9038, Stn. Prov. Govt., Victoria, British Columbia V8W 9A4, oipc.bc.ca. Complaining to a regulator costs nothing and needs no agreement from the operator.

11. Age of readers

This site is written for a general audience and is not directed at young children. Readers are asked to be at least sixteen years old before writing to the desk, since correspondence is the only route by which personal information could reach the operator. No part of the site determines a reader's age, because no part of it holds what would be needed to do so. If a parent or guardian believes a child has written in, a message to the address in section 1 will have it deleted.

12. Security

Pages are served over an encrypted HTTPS connection, and administrative access to the hosting account and the domain is protected by unique credentials and a second factor. The site runs no reader database, no accounts and no third-party scripts of its own — only Cloudflare, the delivery network, may add a performance script of its own — which removes the most common routes by which a small site loses data. No safeguard is absolute; the principle here is to hold as little as possible.

13. Links to other sites

Where this site names a store listing, a studio or a regulator, that destination is outside the operator's control and responsibility. Read the notice published there before relying on it.

14. Changes to this notice

If the way this site works changes, this notice is updated at or before the change and the effective date at the top is revised. Material changes are flagged in a short line for at least thirty days, and no update applies retroactively.

15. How to reach the operator

Questions about this notice, requests under section 10 and complaints all go to the same place: Dylan Thompson, 3294 E 29th Ave, Vancouver, British Columbia V5R 1W4, Canada, telephone +1 604-433-3484, e-mail news@onyxbrief.com.