Privacy Policy

Who we are and scope

This Privacy Policy describes personal information handling associated with sinsauthor.ca and SinsAuthors Universe, operated by B.A. Sins / SinsAuthors Universe from Ontario, Canada. It covers information collected through this site only. A separately operated site, such as Mara Mysteries, may require its own accurate policy and contact details.

Privacy contact / person responsible: [INSERT VERIFIED PRIVACY OFFICER OR OPERATOR NAME/TITLE AND WORKING CONTACT EMAIL]. Please confirm this before publishing.

Categories of information we may collect

Depending on features actually enabled, information may include:

• Account details: username, name or screen name, email address, hashed password, age eligibility confirmation, membership identifiers and preferences.
• Communications: contact requests, support messages, surveys, feedback and opted-in newsletter preferences.
• Order details: product, transaction identifier, checkout status, taxes, delivery address where physical fulfillment applies, and purchase history; a third-party processor generally handles payment credentials.
• Community or creator content: optional reviews, posts, submissions, uploaded files, and moderation records when those functions are enabled.
• Technical data: IP address, browser and device information, approximate location derived from IP, log timestamps, referral URL, security events, cookies or similar identifiers.
• Optional media/AI inputs: prompts, images, files or outputs only if a future feature clearly discloses and enables such collection.

Accuracy note: Not every category is currently collected. This list is a disclosure framework; the operator must verify actual site code, plugins, hosting logs, analytics and checkout integrations.

Purposes and lawful handling

We use information as appropriate to deliver requested site features, manage accounts, process or support purchases, fulfill digital or physical orders, answer inquiries, apply age/content restrictions, prevent abuse, protect systems, satisfy accounting and legal obligations, and improve accessibility and performance. Promotional email is sent only with applicable consent or another lawful basis and an unsubscribe route.

We do not condition access to unrelated services on optional marketing consent. Sensitive information is not requested unless necessary for a clearly explained, lawful purpose.

Consent, choices and withdrawal

Where required, we obtain meaningful consent before using personal information, with separate choices for optional marketing and non-essential cookies. You may withdraw consent subject to legal or contractual restrictions, and we will explain any consequences. Do not assume a person consents to advertising merely by browsing a page or buying a book.

A cookie notice or preference control must accurately reflect the technologies installed; adding this policy alone does not create technical cookie consent controls.

Cookies, logs and analytics

Essential cookies may support login sessions, security, cart functionality and age-eligibility state. Hosting providers may retain access and security logs. Optional analytics, embedded media, advertising pixels or personalized tracking must be inventoried and disclosed before activation, with preferences or opt-out mechanisms where required by law.

Embedded videos, social integrations and third-party stores may set their own cookies or collect connection data when opened. Browser signals such as Global Privacy Control must be honoured when an applicable law requires this. We do not claim to have implemented all such controls until the relevant integrations are audited.

Recipients and disclosures

Information may be shared as needed with hosting and security providers, transactional email providers, payment and storefront platforms, shipping/fulfillment providers, analytics services if enabled, and technical contractors bound by appropriate obligations. For external purchases, the platform acting as merchant or payment processor may collect information directly under its own policy.

We may also disclose information to comply with valid legal process or to protect users and services where law permits. We do not represent that personal information is never shared; the actual service-provider and advertising configurations must be verified. Sale or sharing for cross-context behavioural advertising, if introduced, requires additional disclosures and controls.

Canada–U.S. and international processing

Because customers and service providers may be in Canada, the United States or elsewhere, information may be processed or stored outside your province or country. Foreign authorities may have lawful access under their laws. Safeguards, contracts, and any jurisdiction-specific assessments or consent requirements must be applied when required.

Where Québec privacy law applies, assess cross-border disclosures and document the relevant privacy impact assessments where required.

Retention and deletion

We retain information only for as long as reasonably necessary for the stated purpose, legal obligations, security and dispute resolution, using schedules based on information type. For example, financial records may be retained longer than a deleted public profile when law requires it. Data is securely deleted or de-identified when no longer required, subject to backups and legal holds.

Before launching registration or commerce, adopt actual retention periods and a process for deletion requests. This draft does not invent retention durations that have not been verified.

Security and incident response

We use or plan reasonable safeguards appropriate to the sensitivity of the data, such as encrypted connections, access controls, updated software, least-privilege administration and secure credential handling. No online system can be guaranteed perfectly secure.

Security incidents are assessed and reported to regulators and affected individuals when required, including applicable Canadian personal-information breach obligations. A documented response process and breach records should be maintained.

Privacy requests and rights

Depending on your residence and the laws applicable to our operations, you may have rights to request access, correction, deletion, withdrawal of consent, portability, information about use or disclosure, and certain objections or opt-outs. We will verify identity proportionately, respond within applicable time limits, and explain lawful exceptions.

Canadian requests may be governed by PIPEDA or applicable provincial privacy law. U.S. state laws, including California law if the business meets the relevant applicability thresholds, may grant additional rights. We will not unlawfully discriminate against people who exercise statutory rights. Send requests to the verified privacy contact listed above; do not include passwords or payment-card numbers in your request.

Marketing communications

Canadian commercial electronic messages are subject to Canada’s Anti-Spam Legislation (CASL): applicable consent, sender identification, contact information and a functioning unsubscribe mechanism are required. U.S. marketing messages are subject to applicable CAN-SPAM and other laws. Unsubscribe requests must be honoured within the legally required period.

Service or purchase confirmations should not be used to disguise marketing. Newsletter subscription should be optional, separately recorded and not prechecked.

Children and age-restricted material

This general site is not designed to knowingly collect personal information from children under 13. If we learn we collected such information without legally required authorization, we will take appropriate steps to stop processing and delete it subject to law. If a future game or service targets children, COPPA and other relevant child-privacy requirements must be reviewed before launch.

The separate After Dark area is for adults 18 and over. Age-gating measures must be appropriate for the content, applicable jurisdiction and collection practices.

Profiles, automated processing and future AI tools

The website may describe games, creative apps or AI projects without actually collecting AI training data. If a future feature processes user inputs with AI or makes significant automated decisions, the feature will need a clear, timely notice of input handling, retention, providers, training use (if any), choices and any required human review.

Do not upload confidential documents or personal information into a future tool unless that feature explicitly explains its privacy practices.

Updates and related services

We may revise this notice as website practices evolve. Significant changes will be communicated as required, and new purposes may require additional consent. External websites, crowdfunding services, Patreon, Amazon and other retailers have independent policies. Please review those services before using them.

Privacy contact: [INSERT VERIFIED PRIVACY OFFICER OR OPERATOR NAME/TITLE AND WORKING CONTACT EMAIL] · Ontario, Canada.