Privacy policy
What we collect, why, who handles it, how long we keep it, and how to see or delete it. In plain language.
Last updated October 20, 2026.
The short version
- We only collect what you type into our forms, so we can reply and help.
- No advertising or tracking cookies, no tracking pixels, no analytics.
- We never sell your information or share it for marketing.
- Ask us any time to see, fix or delete what we have about you: send a privacy request or email info@inclusionarcade.ca.
Who we are
Inclusion Arcade (formerly Warriors and Survivors eSports Gaming Lounge (WSEGL)) is a registered Canadian federal non-profit based in Durham Region, Ontario, federal corporation number 1276011-8. We are responsible for the information you give us on this website. Questions about privacy go to info@inclusionarcade.ca, and a team member responsible for privacy will answer.
What we collect
- What you send in a form: for example your name, email and message, or the details of an event booking, volunteer application or equipment request. Only the fields marked required are needed.
- A scrambled version of your IP address (a salted hash) with each form you send, to stop spam and abuse. It can't be turned back into your address.
- Staff accounts: if you're on our team and sign in to our admin, your name, email and sign-in activity.
We don't collect anything else about visitors. Our web server writes short technical logs (like errors) to keep the site running.
Why we use it
Only to answer you and do what you asked: reply to a message, plan an event, review a volunteer application or equipment request, and keep spam out. We only email you about what you contacted us for. By sending a form, you agree that we can use it this way, and you can withdraw that at any time by emailing us.
Cookies and storage on your device
We only use what the site needs to work and to remember your own settings. Because none of it tracks you, we don't show a cookie banner.
| Name | What it does | How long |
|---|---|---|
| ia.csrf (cookie) | Protects our forms from forgery by other websites. | Until you close your browser |
| ia.sid (cookie) | Keeps staff signed in to our admin. Visitors never get it. | 12 hours after last use |
| ia-options (device storage) | Remembers your choices in the Options menu, like text size or reduced motion. | Until you clear it |
| ia-logo (device storage) | Plays the logo fade-in only once per visit. | Until you close the tab |
Device storage stays in your browser and is never sent to us. Our merch store, donation page and video players are run by other companies and set their own cookies there (see below).
Who handles it for us
We never sell or share your information for marketing. These services store or carry it for us, under contracts and their own privacy policies:
- Supabase stores our database and uploaded files in Canada (Amazon Web Services, Montréal region).
- Railway runs our web server.
- When we reply by email, your message goes through our email provider.
- New-form alerts to our staff chat say only what kind of form arrived, never your details.
These other services have their own privacy policies and only get your information if you use them:
- Shopify runs our merch store at shop.inclusionarcade.ca (Shopify's privacy policy).
- Streamlabs Charity processes donations. We never see your card number.
- Twitch and YouTube players only load, and only set their cookies, when you press play. Social media links are plain links.
How long we keep it
Form messages are archived 90 days after we resolve them and deleted 24 months after that, unless we need them longer (for example, an ongoing equipment loan). The scrambled IP address is kept with the message and deleted with it. Anything staff delete in our admin is gone for good after 30 days.
Your rights
Under Canadian privacy law (PIPEDA) you can ask to see what we have about you, correct it, or have it deleted. Send a privacy request or email info@inclusionarcade.ca, and we'll answer within 30 days. If you're not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada.
Children and young people
Many of our players are young. If you're under 13, please ask a parent or guardian to fill in our forms with you or for you.
Keeping it safe
Our site only works over an encrypted connection (HTTPS), and only signed-in staff can read what you send us.
Changes
If we change how we handle your information, we'll update this page and the date at the top.