Privacy policy

Veltronavia is an independent, non-commercial fan project run by a small group of people in Toronto, Ontario. We sell nothing and we are not a registered business, so this policy describes a hobby site, written plainly. It follows Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Law 25, and Canada's Anti-Spam Legislation (CASL).

1. Who we are and who is responsible

The site is operated by the Veltronavia crew. The person responsible for privacy questions (our privacy contact, as Law 25 requires) can be reached at [email protected]. Write to us there for anything in this policy.

2. What we collect

• Information you give us: if you use the contact form or subscribe, we collect the name and email address you enter. There is no phone field and we never ask for one.
• Server logs: like almost every website, our host records technical data such as IP address, browser type (user-agent) and the time of a request. This is used only to keep the site running and secure.
• Web-push subscription: if you opt in to notifications, our provider stores a browser push token and a small identifier so it can deliver messages.

3. Why we use it

• To reply to a message you send us.
• To send occasional updates when the list changes, but only if you asked for them.
• To operate, secure and troubleshoot the website (technical logs).

4. Your consent

We rely on your meaningful, opt-in consent for anything beyond the strictly necessary. The subscribe checkbox is never pre-ticked. You can withdraw consent as easily as you gave it: use the unsubscribe link in any message, turn off notifications in your browser, or email us to be removed. Withdrawing consent does not affect the lawfulness of anything done beforehand.

5. Web-push notifications and service providers

If you turn on updates, web-push is delivered by OneSignal, Inc., based in the United States, acting as our service provider (data processor). To do this, OneSignal loads a script from its content delivery network, registers a service worker in your browser, and stores identifiers in local storage or IndexedDB. The permission prompt is shown by your browser, and declining it breaks nothing on the site. You can review OneSignal's practices in its own privacy policy at onesignal.com/privacy_policy. Our website host processes the technical logs described above.

6. Cross-border transfer

Because OneSignal is in the United States, enabling notifications means your push identifier and related data are processed outside Canada. Transfers are covered by contractual safeguards such as Standard Contractual Clauses and the EU-US Data Privacy Framework where applicable. Under Law 25 we tell you this before you opt in, and the choice is entirely yours.

7. What we do not do

We do not sell, rent or trade your information. We run no advertising pixels and no third-party analytics or profiling on this site. The only optional third-party processor is OneSignal, and only if you switch notifications on.

8. How long we keep it

We keep a contact message only as long as needed to deal with it. Subscription details are kept until you unsubscribe or ask us to delete them. Server logs are kept for a short period for security, then rotated out by our host.

9. Your rights

Under PIPEDA and Law 25 you can ask to access, correct or delete the personal information we hold about you, and to withdraw consent. Email [email protected] and we will act on it promptly.

10. How to complain

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca. Residents of Quebec may also contact the Commission d'accès à l'information (CAI).

11. Changes

If this policy changes, we update the date at the top of the page. Material changes to how we handle notifications will be reflected here before they take effect.

Questions? [email protected] · You can also manage your cookie choices.