This statement explains what data WaterlooMountain collects, why, and what your rights are under federal and British Columbia privacy law.
WaterlooMountain ("we," "us," "our") operates the website available at zordaviqen.com (the "Platform"). We are committed to protecting the privacy of everyone who visits. This Privacy Statement is written in plain language and sets out everything we do — and everything we deliberately do not do — with information that relates to you.
We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal private-sector privacy law, and with the Personal Information Protection Act of British Columbia (PIPA BC), SBC 2003, c. 63. Where the two regimes overlap, we apply the stricter standard. If you have a question or concern that is not addressed here, please contact our Privacy Officer at [email protected].
Because WaterlooMountain does not require account creation and does not accept payment, the categories of data we process are narrow. We collect only what is described below.
Our web server automatically records standard HTTP request logs when you visit any page. These logs may include: the IP address of your device or proxy; the date and time of the request; the URL requested; the HTTP status code returned; the user-agent string of your browser; and the referring URL (if any). These logs are generated by our hosting infrastructure and are retained for a maximum of 90 days, after which they are automatically deleted. We do not link these logs to any individual identity.
When you respond to the age gate and cookie consent banner, we store your preference in a browser cookie and in localStorage. The data stored is a JSON object containing the consent version number and a boolean flag indicating whether analytics cookies were accepted. No name, email, or other identifier is stored alongside this preference. Full details of the cookies set are available in our Cookie Terms.
If you accept analytics cookies, Google Analytics 4 (GA4) may collect aggregated session data, including: pages visited, session duration, approximate geographic region (province-level, not address-level), device category (mobile, tablet, desktop), and browser type. GA4 does not receive your full IP address — we have configured IP anonymisation. This data is collected and processed by Google LLC under their terms of service. We do not have access to individual-level session records; we only see aggregated reports. If you select "Essential Only" on the cookie banner, no analytics data is transmitted.
We want to be explicit about what we do not collect, because we believe transparency requires stating absences as well as presences.
A small number of third-party services load when you visit this site. We have assessed each of these against PIPEDA principles and provide the following summary.
We load Cinzel and Manrope typefaces via the Google Fonts API (fonts.googleapis.com, fonts.gstatic.com). When your browser requests a font file, Google's servers receive your IP address and user-agent string. Google states that Google Fonts logs are anonymised and deleted within 24 hours. We use Google Fonts because it provides a reliable, performance-optimised delivery mechanism for high-quality typefaces. You can view Google's privacy documentation at developers.google.com/fonts/faq/privacy.
We load Bootstrap 5.3.3 CSS from the jsDelivr content delivery network (cdn.jsdelivr.net). When your browser fetches the CSS file, jsDelivr's servers receive your IP address and user-agent string. jsDelivr does not set cookies and does not share request logs with us. You can view jsDelivr's privacy policy at jsdelivr.com.
If you accept analytics cookies, we use Google Analytics 4 to collect aggregated session data as described in section 1c. Google Analytics is a processor acting on our behalf. We have configured GA4 with IP anonymisation enabled and data retention set to the minimum available period. We have entered into a Data Processing Amendment with Google LLC as required under PIPEDA. You can opt out of Google Analytics entirely by installing the Google Analytics Opt-out Browser Add-on.
We do not use any other third-party processors. We do not use advertising networks, affiliate trackers, social media pixels, or any real-time bidding infrastructure.
We use two categories of browser storage: cookies and the Web Storage API (localStorage). A full inventory is available on our Cookie Terms page. In summary:
wm_age_ok: Strictly necessary. Records that you have confirmed you are 18 or older. Expires 180 days from confirmation. Stored as both a cookie and in localStorage.wm_consent_v2: Strictly necessary. Records your cookie consent preference (accept all or essential only). Expires 180 days. Stored as both a cookie and in localStorage._ga, _gid: Analytics. Set by Google Analytics only if you accepted analytics cookies. Standard GA4 identifiers used for session aggregation. Expiry: 2 years and 24 hours respectively.We do not set any other cookies. We do not use third-party advertising cookies. You can manage or delete any of these through your browser's settings — see your browser's help documentation for instructions, or visit our Cookie Terms page for step-by-step guidance.
We use the data described in section 1 for two purposes only:
We do not sell data. We do not share data with third parties except as described in section 3 (our processors). We do not use data for automated decision-making that has any effect on you.
| Data type | Retention period | Deletion method |
|---|---|---|
| Web server access logs | 90 days | Automatic log rotation on hosting infrastructure |
| Consent records (cookies / localStorage) | 180 days from consent date | Cookie and localStorage expiry; user can clear browser data at any time |
| GA4 session data (analytics, if accepted) | 14 months (Google's minimum configurable period) | Automatic deletion within Google Analytics; user can opt out via browser add-on |
| Email correspondence (if you contact us) | Duration of correspondence plus 12 months | Manual deletion by Privacy Officer on request or at end of retention period |
Canadian federal privacy law (PIPEDA) and BC's Personal Information Protection Act give you a number of rights in relation to personal information held about you. Because we collect very limited data, these rights apply in a narrow but real way.
You have the right to request access to any personal information we hold about you. Given that we do not collect names or email addresses during platform use, the information available to you under an access request will typically consist of web server logs associated with your IP address during a specified period. To make an access request, email [email protected] with the subject line "Access Request" and the date range you are interested in. We will respond within 30 days.
If you believe that personal information we hold about you is inaccurate, you may request a correction. Contact [email protected].
You may withdraw consent to the collection of analytics data at any time by clicking the cookie settings button (the cookie icon at the bottom of any page) and selecting "Essential Only." This will update your consent record in localStorage and browser cookies. It will not affect analytics data already collected by Google Analytics before your withdrawal.
If you believe we have handled your personal information contrary to PIPEDA, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca. If you believe we have handled your personal information contrary to BC PIPA, you may contact the Office of the Information and Privacy Commissioner for British Columbia at oipc.bc.ca. We would always prefer to resolve concerns directly — please contact us before filing a complaint.
We take reasonable technical and organisational measures to protect the limited data we hold. Specific measures include:
We cannot guarantee absolute security — no system can. If we become aware of a security incident that affects personal information about you, we will notify you and the relevant regulator as required by law.
We may update this Privacy Statement from time to time. When we do, we will update the version number and effective date at the top of this page. Material changes — changes that affect how we collect or use data in ways that would not have been expected from reading the previous version — will be flagged with a notice on the homepage for 30 days.
| Version | Date | Summary of changes |
|---|---|---|
| 1.0 | 1 May 2026 | Initial publication |
If you have a question, concern, or request relating to this Privacy Statement or to our handling of personal information, please contact our Privacy Officer:
Privacy Officer, WaterlooMountain
847 Pacific Boulevard
Vancouver, BC V6Z 2E4, Canada
Privacy enquiries: [email protected]
General enquiries: [email protected]
Phone: +1 (604) 555-0183
We acknowledge all privacy enquiries within 5 business days and aim to provide a full response within 30 days, as required by PIPEDA.