Privacy policy

This website does not track you. It has no database, no analytics, no advertising, and no third-party scripts of any kind. Unless you choose to send us a message, using this site leaves nothing behind but a short-lived line in a server log.

Scope

This policy covers www.auraware.ca — this website and nothing else. The Auraware applications are covered by their own policies, published alongside each application when it is released. If you are reading this from an app store listing, the policy that governs that application will be linked from the listing itself.

The short version

• We do not sell or share personal information for advertising.
• We use no analytics, no advertising networks, and no tracking cookies.
• The site runs no JavaScript, so nothing can profile you in your browser.
• There is no user account, no login, and no database on this site.
• The only information you give us is what you type into the contact form.

What the website collects

Simply reading these pages creates no record tied to you. There is no account to create and nothing is stored server-side about your visit beyond the server logs described below.

Cookies

One cookie is set, and only on the contact page: a Django CSRF token that protects the form against cross-site request forgery. It contains a random value, is not tied to your identity, and is not readable by any other site. We set no analytics, advertising, or tracking cookies.

The contact form

When you submit the form, we receive the name, email address, organization (if you filled it in), topic, and message you typed. We also record two technical details with the message:

• the IP address the submission came from, and
• your browser's user agent string,

both so we can investigate spam and abuse. Your message is delivered to our mailbox and kept there for as long as we need it to deal with your enquiry and to keep a record of the correspondence. It is not written to a database on this server, because there is no database.

The form also carries a signed timestamp recording when the page was served to you. It lets us reject submissions that arrive impossibly fast or from a stale page. It contains no information about you.

To limit abuse, the number of submissions from a given IP address is counted in memory for up to one hour and then discarded. Nothing is written to disk.

Server logs

Our web server keeps standard access logs — IP address, timestamp, the URL requested, the response code, the referring page, and the user agent — for security, troubleshooting, and abuse investigation. Logs are rotated daily and deleted after 14 days, except where we have to keep an extract for longer to deal with a specific security incident.

Who else handles your data

We keep the number of third parties as small as running a website allows. In the ordinary course, the following providers process data on our behalf:

• Cloudflare — sits in front of this site to terminate HTTPS and to filter denial-of-service and bot traffic. Every request to this site passes through Cloudflare, which processes your IP address and request details for that purpose.
• DigitalOcean — hosts the server, which is located in Toronto, Canada.
• Our email provider — carries contact form messages to our mailbox and stores them there.

These providers act on our instructions for the purposes above. Cloudflare operates a global network, so a request may be handled at a location outside Canada before it reaches our server here; where that happens, the information is protected by our agreements with the provider and remains subject to this policy.

How we use information

To operate and secure the website, and to read and reply to messages you send us. That is the whole list. We do not use your information to build a profile of you, we do not use it for advertising, and we do not make automated decisions about you.

What we do not do

We do not sell personal information. We do not share it with advertisers or data brokers. We do not run analytics or advertising code, and we do not track you across other websites. We will not use your contact details to send you marketing you did not ask for, and there is no mailing list to be added to.

Retention

• Server logs — 14 days.
• Rate-limit counters — up to one hour, in memory only.
• Contact form messages — kept in our mailbox for as long as needed to handle your enquiry and keep a record of it, then deleted. You can ask us to delete yours sooner.

Security

The site is served only over HTTPS and instructs browsers never to connect to it unencrypted. It loads no third-party code, which removes an entire category of risk. Because the site stores no personal information at rest, there is no store of user data here to breach.

Your rights

Under the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy law, you may ask us to confirm what personal information we hold about you, to give you a copy of it, to correct it if it is wrong, or to delete it. You may also withdraw consent, subject to any legal requirement that we keep certain records.

Send the request through our contact form, choosing “Privacy or data request” as the topic. We will respond within 30 days. There is no charge. Please note that, given how little this site retains, in most cases the honest answer will be that we hold nothing about you beyond a log entry that has already been deleted.

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada.

Children

This website is a general-audience site aimed at adults. It is not directed at children, and we do not knowingly collect personal information from children through it. If you believe a child has sent us personal information through the contact form, tell us using that same form and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top of this page. Where a change materially affects how we handle information already given to us, we will say so here rather than change it quietly.

Contact

Auraware is based in Canada. Privacy questions and requests reach us through the contact form, which is the only channel we publish for them.