What we store, what we do not, and where we sit in Canadian privacy law.

01. What this notice covers

This notice describes how ArcticRiver handles information collected through the site at gristkin.com. The site is a free social round game built for adults 18 and over in Canada. There is no payment, no real-money transaction, and no member account.

Where this notice differs from a typical privacy notice on a real-money venue, the difference is usually that we do not have the data point a typical site does — there is no card number, no banking detail, no identity document, no transaction history. We do not collect them because we do not need them.

02. Browser-stored keys

The site sets exactly two keys in your browser's local storage. The keys are local to your device — they never travel back to our server.

• arv_age_ok — set to the value "1" once you confirm you are 18 or older. Used so the age confirmation does not appear on every page reload.
• arv_ck_ok or arv_ck_no — set to the value "1" once you accept or decline the cookies notice. Used so the banner does not reappear on every page reload.

Both keys can be deleted from your browser settings at any time. If you delete them, the age confirmation and cookies banner will reappear on your next visit.

03. Server-side logging

Our hosting provider records standard web-server access lines: a request timestamp, the requested path, the response status, and the User-Agent header. These lines are kept for thirty days and used to diagnose performance issues. They are not joined to a profile, not sold, and not used for advertising.

The IP address recorded by the web server is treated as personal information under Canadian federal law. We retain it for the same thirty-day window and do not use it for any purpose other than security and operational diagnostics.

04. Round-zone data

The Round Zone tracks a virtual point pool, a current stake, a last-round readout, and a total-won counter. These four values live entirely in your browser tab and reset to their defaults the moment you close the tab. Nothing is sent to the server.

If you press the reset button, the values reset immediately. Closing the tab achieves the same outcome.

05. Contact form

The contact page submits an email address, a name, and a message body to a small contact mailbox. We read the message, reply if it asks for a reply, and delete the thread within sixty days. We do not import the address into a marketing list.

06. Canadian legal frame

The site operates under the Canadian federal Personal Information Protection and Electronic Documents Act (PIPEDA), which governs how organisations handle personal information in the course of commercial activities. We do not invoice anyone, but we treat the site as commercial activity for the purposes of this notice.

If you reside in Yukon or British Columbia, the provincial Personal Information Protection Act (PIPA) layers on top of PIPEDA. If you reside in Quebec, the framework is Loi 25 — formally Loi modernisant des dispositions législatives en matière de protection des renseignements personnels, in force since September 2022. We do not cite the European General Data Protection Regulation, the United Kingdom Data Protection Act, or the California Consumer Privacy Act because they do not apply to a Canadian operation serving Canadian visitors.

07. Your rights

Under PIPEDA you have the right to ask whether we hold any information about you, to see what we hold, to correct inaccuracies, and to ask us to delete it. The contact form is the right place for any of these requests. If our response does not satisfy you, the federal Office of the Privacy Commissioner of Canada handles complaints at priv.gc.ca.

08. Updates to this notice

If we change anything described above, we update this page and note the change in the workshop-notes section on the homepage. The change date appears in the footer below.