Privacy
Notice
1.0
Who is responsible
TacticsSource ("we", "the desk") publishes independent reviews of free mobile games at tacticssource.com. We decide why and how personal information collected through this website is handled, and we are accountable for it.
For any privacy question, correction or request, the address is [email protected]. Please write "Privacy" in the subject line so the message reaches the right desk quickly.
2.0
What we collect
2.1 Information collected automatically
- Technical log data recorded by our hosting provider: IP address, date and time of the request, the page requested, HTTP status, referring page and user agent (browser and operating system).
- Cookies and equivalent local storage placed by this site or by the services described in section 5.0. The full inventory, with categories and lifetimes, is in the cookie notice.
- Aggregated analytics: pages viewed, approximate region, device class and time on page. We use this to understand which reviews are read, not to identify individuals.
- Advertising identifiers set by advertising partners, only where you have agreed to the advertising cookie category.
2.2 Information you give us
- Dispatch form: your email address (required), and optionally your name and telephone number, together with the fact and time of your consent.
- Web push subscription: a browser push identifier (an anonymous subscription token), the browser and platform it belongs to, and the tags we attach to it — the site domain, the name and telephone number you supplied, and the source label "form".
- Correspondence: whatever you choose to include when you email the desk.
We do not ask for financial details, government identifiers or sensitive information, and you should not send them to us.
3.0
Purposes and legal basis
Under Canadian federal privacy legislation — the Personal Information Protection and Electronic Documents Act (PIPEDA) — and the anti-spam rules in Canada's Anti-Spam Legislation (CASL), we rely on the bases set out below.
- Operating and securing the site (server logs, strictly necessary storage): our legitimate business interest in delivering a working, protected website. This processing cannot be switched off, but it is limited to what the service requires.
- Analytics: your express consent, given through the cookie banner and withdrawable at any time.
- Advertising and measurement: your express consent, given through the cookie banner and withdrawable at any time.
- Sending the dispatch by email and by web push: your express consent, given by ticking the box in the form and by accepting the browser notification prompt. Each message includes a way to stop receiving further messages, as CASL requires.
- Answering correspondence: our legitimate interest in replying to you, or your consent where you initiated the exchange.
4.0
How long we keep it
| Category | Retention |
|---|---|
| Server and security logs | Up to 12 months, then deleted or aggregated |
| Cookie consent record | 12 months from the choice, then you are asked again |
| Analytics data | Up to 14 months in aggregated form |
| Dispatch details (email, name, phone) | Until you unsubscribe or ask for erasure, then removed within 30 days |
| Web push identifier and tags | Until you revoke notification permission or the subscription expires |
| Email correspondence | Up to 24 months after the exchange closes |
5.0
Who else processes your information
We do not sell personal information and we do not rent lists. We do share it with the service providers below, each bound to use it only on our instructions and only for the purpose stated.
- Hosting and content delivery — stores the site files and records the technical logs described in 2.1.
- Analytics provider — produces aggregated audience statistics, active only with your consent.
- Advertising partners and networks — deliver and measure promotional placements, active only with your consent.
- OneSignal, Inc. — our processor for messaging. When you submit the dispatch form we pass your email address to OneSignal, together with the tags domain, name, phone and source. If you accept the browser prompt, OneSignal also stores a push subscription identifier for your browser. OneSignal uses this solely to deliver our notices; it does not use it for its own marketing. Its own privacy terms are published at onesignal.com.
We may also disclose information where a Canadian law, regulation or valid legal process requires it, or to establish or defend a legal claim.
6.0
Web push notifications in detail
Web push is entirely optional. Nothing is sent unless you both tick the consent box in the dispatch form and accept your browser's notification prompt. The subscription is tied to the browser you accepted it in, not to your identity.
You can stop notifications at any time in the site settings of your browser (usually under "Notifications" in the padlock menu of the address bar). Revoking permission ends delivery immediately. To have the stored identifier and tags erased as well, write to [email protected] and we will instruct our processor to delete them.
The service worker file that receives push messages, OneSignalSDKWorker.js, is served from the root of this domain. It performs no tracking of its own.
7.0
Cookies
Cookies and similar storage are described separately, category by category, with purposes and lifetimes, in the cookie notice. Your banner choice is stored locally in your browser and can be changed at any time by clearing site data and reloading the page.
8.0
Your rights
Subject to the limits set out in Canadian privacy law, you may ask us to:
- confirm whether we hold personal information about you, and obtain access to it;
- correct information that is inaccurate or incomplete;
- withdraw a consent you previously gave, at any time and without giving a reason;
- delete information we no longer need, including your dispatch details and push identifier;
- receive an explanation of how a particular piece of information is used and to whom it has been disclosed.
Write to [email protected]. We answer within 30 days and may ask a question or two to confirm the request comes from you. There is no charge for a reasonable request.
If our answer does not satisfy you, you may complain to the Office of the Privacy Commissioner of Canada (OPC), the federal supervisory authority, at priv.gc.ca. Residents of provinces with substantially similar legislation may also address their provincial commissioner.
9.0
Transfers outside Canada
Some of our service providers, including our messaging processor, operate servers outside Canada. Where information is processed abroad it remains subject to our contractual instructions, and it may also be accessible to the courts and authorities of that country under their local law. We select providers that offer a comparable level of protection to that required in Canada.
10.0
Security
The site is served over an encrypted connection. Access to the dispatch list and to the messaging console is restricted to the people who need it and protected by strong authentication. No transmission over the internet can be guaranteed to be perfectly secure; if a breach were to affect you, we would notify you and the OPC as the law requires.
11.0
Children
This site is written for a general adult audience and we do not knowingly collect information from children. If you believe a child has submitted details through the dispatch form, write to us and we will remove them.
12.0
Changes to this notice
We may revise this notice as the site changes. The date at the head of the page always shows the current version. A material change to how we use personal information will be announced on the front page, and where the law requires it we will ask for your consent again.