Privacy notice
1. Who is responsible for your personal information
WispChart is published by a private individual, not by a company, an agency or a partnership. The person responsible for the protection of personal information — the role required by Quebec's Law 25 — is:
- Harpreet Singh, editor and operator
- 1447 R. Atateken, Montréal, QC H2L 3L2, Canada
- Telephone: +1 514-419-9511
- E-mail: notes@wispchart.com
Because the operator is established in Quebec, the activities described here are governed by the federal Personal Information Protection and Electronic Documents Act (PIPEDA, S.C. 2000, c. 5) and by the Quebec Act respecting the protection of personal information in the private sector (RLRQ c. P-39.1), as modernised by Law 25.
2. What this notice covers
This notice covers the four pages published at wispchart.com: the reading room itself, this notice, the terms of use and the cookies page. It does not cover Google Play, the Google Play listings linked or named on this site, or any studio's own website. Once you leave for the store, Google's privacy terms apply and this operator has no visibility into what happens there.
3. What the site does not collect
The site has no form of any kind. There is no contact form, no comment box, no newsletter sign-up, no search field, no login and no account area. Nothing on the page transmits anything you type or click back to the operator, and no script on the page sends measurement data anywhere.
In particular, the site does not ask for and never receives your name, your postal address, your date of birth, a card number or any billing detail. No purchase can be made here; that happens only inside Google Play, which acts on its own behalf.
4. What is processed when a page is served to you
Serving a web page is not silent. Two service providers necessarily process a small amount of technical data on the operator's behalf:
- The hosting provider writes ordinary server logs: the IP address making the request, the date and time, the URL requested, the HTTP status returned, the number of bytes sent, the referring URL if your browser sent one, and the user-agent string identifying your browser and operating system.
- Cloudflare, Inc. operates as the content delivery network and security layer in front of the site. It sees the same request data, derives an approximate country from the IP address, and may collect anonymous performance measurements about how quickly the page rendered on your device. Cloudflare may also set its own technical cookies for delivery and protection; those are described on the cookies page.
This technical data is used for one narrow set of purposes: keeping the site reachable, diagnosing errors, defending against automated abuse, and understanding whether pages load fast enough on ordinary connections. It is not combined with anything else, is not sold, is not shared with advertisers and is not used to build a profile of you. There is no advertising network on this site and no analytics product of the operator's own.
5. Storage on your own device
One value is written into your browser's session storage when you answer the notice at the bottom of the page: the key wcConsent, holding either accepted or declined. It exists so the notice does not reappear on every page you open in the same tab. It never leaves your device, it is not readable by the operator, and your browser discards it when the tab is closed. Declining changes nothing about how the site behaves, because there is nothing to switch off. The full list is on the cookies page.
6. Purposes, and why the processing is lawful
Under PIPEDA the operator must identify the purposes of collection and limit processing to what a reasonable person would consider appropriate. The purposes are limited to the operation and security of the site as described in section 4. Under Quebec law, consent for that technical processing is implied by your request for the page: a page cannot be delivered without an IP address and a request line. No secondary purpose — profiling, marketing, enrichment, resale — is pursued, so no separate consent is sought and none is bundled into the notice.
Under CASL, the Canada's Anti-Spam Legislation (S.C. 2010, c. 23), the operator sends no commercial electronic messages. There is no mailing list, no promotional broadcast and no subscription of any kind. If you write to the address above, your message is used only to answer you.
7. Transfers outside Quebec and Canada
Cloudflare serves this site from the point of presence closest to you, and its corporate seat is in the United States. Server logs may therefore be processed outside Canada. Before entrusting the site to that provider, the operator assessed the transfer as Law 25 requires: only technical request data is involved, it is retained briefly, the provider is bound by written terms restricting processing to the delivery service, and the provider offers standard contractual protections for international transfers. If you would like the current assessment in writing, ask at the address in section 1.
8. How long anything is kept
Hosting logs are kept for no longer than 30 days and then rotated out. Cloudflare's retention for its own security and performance records follows its published schedule and is measured in days, not years. Correspondence sent to the operator's e-mail address is kept for as long as the exchange is useful and in any event no longer than 24 months, after which it is deleted. The session storage key on your device disappears when you close the tab.
9. Your rights
PIPEDA and Quebec law give you the following rights, and the operator honours them without charge:
- Access — to be told whether information about you is held and to receive a copy of it.
- Correction — to have inaccurate or incomplete information rectified.
- Revoking consent — to revoke consent at any time and stop any processing that rests on it, subject to legal or contractual limits.
- De-indexing and deletion — under Law 25, to ask that information about you stop being disseminated where the conditions of the Act are met.
- Portability — to receive computerised personal information in a structured, commonly used technical format.
- Complaint — to bring the matter to a supervisory authority, as set out in section 10.
Write to the address in section 1. A written answer follows within 30 days, as both statutes require. Because the site holds almost nothing about visitors, most access requests are answered with an explanation of what the hosting logs contain and how to identify your own entries in them.
10. Complaints to a supervisory authority
If the answer does not satisfy you, you may complain at any time to:
- Office of the Privacy Commissioner of Canada, 30 Victoria Street, Gatineau, QC K1A 1H3 — priv.gc.ca
- Commission d'accès à l'information du Québec, 2045, rue Stanley, bureau 900, Montréal, QC H3A 2V4 — cai.gouv.qc.ca
Nothing obliges you to contact the operator first, although it is usually faster.
11. Children and young readers
The site is written for adults choosing what to install on a phone, and it is not directed at children. The operator does not knowingly hold information about anyone under 14, the threshold used in Quebec for a young person's own consent. Since no form exists, no age is ever asked for or recorded. A parent or guardian who believes information about a child has somehow reached the operator may write to the address in section 1 and it will be deleted.
12. Security
The site is served over HTTPS only, with certificates renewed automatically. It is a set of static files: there is no database, no administration panel exposed to the public internet and no server-side code that accepts input from a visitor. Access to the hosting account is protected by a strong unique credential and two-factor authentication. Should a confidentiality incident nevertheless create a serious harm, the operator will notify the Commission d'accès à l'information and the affected persons as Law 25 requires, and will keep the register of incidents that the Act prescribes.
13. Links to Google Play and other destinations
Where a game is named, you may go on to look it up on Google Play. That store is operated by Google and governed by Google's own privacy policy and terms. The operator has no agreement with Google beyond being an ordinary user of the store, receives no commission and cannot see what you do once you arrive there.
14. Changes to this notice
If the way the site works changes — a new provider, a new technical file, anything that alters what is described above — this notice is rewritten before the change goes live and the effective date at the top is updated. Earlier versions are kept and can be requested by e-mail. Because there is no mailing list, there is no way to push a notification to you; the date at the top is the honest signal.
15. Getting in touch
Every request under this notice, and every question about it, goes to Harpreet Singh at notes@wispchart.com, or by post to 1447 R. Atateken, Montréal, QC H2L 3L2, Canada. Letters in English and French are both welcome.