Privacy & Data Protection

§1 Data Controller & Official Contact Details

The designated data controller responsible for the processing of personal data collected through Athabasca Play Hub is:

§2 Categories of Information We Collect

We adhere strictly to the principle of data minimization. We only collect information strictly necessary to provide our complimentary leisure simulation service:

• Account Identification Data: Your email address, chosen screen name, hashed password, and date of birth (used strictly to verify compliance with the 19+ age threshold).
• Platform Ledger Telemetry: Fictional Play Credit balance calculations, timestamped practice session launches, and voluntary Account Break records.
• Support Communications: Inquiries, contact messages, and generated Reference IDs transmitted through our dispatch desk.
• Device & Session Telemetry: Anonymized HTTP headers, operating system types, and essential session cookie identifiers required for web server communication.

§3 Lawful Bases for Processing (PIPEDA & GDPR)

Under Canadian federal privacy legislation (PIPEDA) and international standards (including UK GDPR and GDPR), we process personal data under the following legitimate bases:

• Performance of Service Contract: Processing necessary to maintain your registered profile, record game practice engagements, and enforce voluntary boundary controls.
• Legal Compliance: Processing your date of birth to ensure adherence to Canadian age-of-majority restrictions (19+).
• Legitimate Interests: Protecting our web server infrastructure from malicious cyber attacks, automated scraping bots, and service manipulation.
• Express Consent: Processing optional analytical telemetry strictly when you grant affirmative authorization via our Google Consent Mode v2 interface.

§4 Data Retention & Storage Security

Personal account information is preserved for the active duration of your membership. If an account remains completely dormant for a period exceeding thirty-six (36) consecutive months, it is scheduled for automated anonymization or permanent deletion.

All databases and JSON ledgers are hosted in hardened sub-environments secured by strict file-level locks (`flock`), encrypted TLS 1.3 transmissions, and multi-layer firewall inspection. Plaintext passwords are never stored; all credentials are cryptographically protected utilizing modern adaptive hashing algorithms.

§5 Your Statutory Rights Under Applicable Law

Depending on your country or province of residence, you possess enforceable legal rights regarding your personal information, including:

• The Right to Access: You may request an export of all personal data held regarding your profile.
• The Right to Rectification: You may correct inaccurate or incomplete profile records.
• The Right to Erasure ("Right to Be Forgotten"): You may request the permanent deletion of your profile and ledger records.
• The Right to Restrict or Object: You may restrict certain processing activities or revoke consent previously granted for analytics telemetry.

To exercise any statutory privacy right, transmit a request to our privacy desk at privacy@athabascaplayhub.com. If you believe your privacy rights have been infringed, you retain the right to lodge a formal complaint with the Office of the Privacy Commissioner of Canada (OPC), the Commission d'accès à l'information du Québec (CAI), or the Information Commissioner's Office (ICO).

§6 Third-Party Data Sharing & Zero Monetization

We do not sell, rent, lease, or monetize your personal data. We do not provide user lists to commercial data brokers, advertising networks, or external lead generators.

Personal data is shared only with vetted infrastructure hosting providers under strict data processing agreements, or where required by law enforcement under lawful Canadian judicial subpoena.