GalVoyage Privacy Policy

Section 1 — Scope

1.1 This Privacy Policy (the "Policy") describes how the operator of GalVoyage ("we", "us", "our") collects, uses, discloses, and protects personal information in connection with the GalVoyage application and its associated web services (together, the "Service").

1.2 By using the Service you acknowledge that you have read this Policy. Capitalized terms not defined here have the meaning given in the Terms of Use.

Section 2 — Summary

The Service can be used without an account. Accounts, email digest subscriptions, and feedback submissions are optional. We collect only the information described in Section 3, use it only for the purposes described in Section 4, and do not sell it or share it with third parties for their own marketing.

Section 3 — Information we collect

3.1 Information stored only on your device. Your reading history and preferences, interface settings, content filters, and cached content are stored locally on your device. We do not receive this information and cannot access or restore it. It is removed when you delete the Service from your device, or earlier through the in-app reset function, save that the restricted content setting is not altered by that function, as described in Section 5.4 of the Restricted Content Notice and in Section 10.1(e) of this Policy.

3.2 Account information (optional). If you create an account, we collect the email address you provide or that you authorize a sign-in provider to share, an account identifier, and the display name and profile image you choose. Authentication is performed by a specialist identity provider acting on our behalf; where a password is used it is stored by that provider, not by us, and we do not receive credentials you use with any third-party sign-in provider.

3.3 Synchronized settings (optional). If you sign in, the settings you elect to synchronize across devices — reminder selections, saved items, and layout preferences — are stored with your account.

3.4 Email digest subscription (optional). If you subscribe to the email digest, we collect your email address, the subscription's status, your reminder selections, and your language and delivery preferences. Subscriptions take effect only after you confirm them; every message includes a means to unsubscribe.

3.5 Technical information. When the Service communicates with our servers, standard technical records of those requests are generated, as is customary for internet services. Those records may include the address of the request, the search terms you entered where the request is a search, the approximate region derived from your network address (such as a country designation), and technical details of the requesting software. These records are used solely for security, abuse prevention, and service operation, are not used to profile you, and are retained for a limited period. Search requests are handled as ordinary service requests and are subject to the same treatment.

3.6 Feedback (optional). If you submit feedback, we collect your selected category and description, any screenshots and contact details you choose to provide, and a respondent identifier assigned by our feedback service provider. The respondent identifier is separate from your GalVoyage account identifier.

3.7 Information we do not collect. The Service does not use advertising identifiers, analytics or tracking technologies, or cookies other than strictly necessary session cookies for web sign-in. We do not collect your address book, we do not collect your precise location, and we do not compile a history of your browsing across sites or services. The technical records described in Section 3.5 record the requests you make to the Service, including the search terms you enter and the approximate region described there, and are not a browsing history compiled from any other source. Images are collected only when you voluntarily provide a profile image or feedback screenshots. Reminders are scheduled on your device and do not require a network connection when delivered. Diagnostic reports, where enabled, are provided by the operating system under your device settings and the platform provider's privacy policy.

Section 4 — Purposes of use

We use the information described in Section 3 only to: (a) operate the Service and the features you have chosen to use; (b) deliver the email digest you subscribed to and manage that subscription; (c) synchronize your settings across your devices; (d) maintain the security and integrity of the Service; and (e) comply with applicable law. We do not use your information for advertising, profiling, or automated decision-making, and we do not sell it.

Section 5 — Legal bases

Where the law of your jurisdiction requires a legal basis for processing, we rely on: your consent, which you may withdraw at any time in the manner described in Section 10; the performance of our agreement with you, where processing is necessary to operate features you have requested; and our legitimate interest in operating a secure service and preventing abuse.

Section 6 — Disclosure

6.1 We share personal information only with service providers that host, store, authenticate, or deliver email on our behalf. Such providers act under written agreements, process information solely on our instructions, and may not use it for their own purposes.

6.2 We do not track whether you open our emails or follow links within them.

6.3 We may disclose information where required by law, regulation, or legal process, or where necessary to protect the rights, safety, or property of users, the public, or the Service.

6.4 The content presented in the Service is drawn from publicly available and licensed sources, including ymgal.games, and is attributed to its source within the Service. Where a source is consulted in order to answer a request you make — including a search or a request for the details of a character, person, or organization — the terms of your request may be transmitted to that source for the purpose of answering it. We do not transmit to such sources your account identifier, any device identifier, or your contact details. Cover images and other images presented in the Service are relayed through our servers; your device does not connect to those sources directly, save where you open an outbound link. Feeds that you add to the Service yourself are retrieved by your device from the source you specify and are not routed through us.

Section 7 — International transfers

7.1 We are based in Canada. In accordance with the Personal Information Protection and Electronic Documents Act, we inform you that account and subscription information may be stored and processed by our service providers outside Canada, including in the United States, and while there is subject to the laws of that jurisdiction. We engage only providers that offer a level of protection comparable to that required under Canadian law and are contractually bound to it.

7.2 Our feedback service provider stores feedback submissions in Europe. When feedback information is processed outside Canada, it is subject to the laws of that jurisdiction.

Section 8 — Retention

8.1 Account and synchronized information is retained until you delete your account. Subscription information is retained while the subscription is active. Upon unsubscription, no further messages are sent to the address concerned, and the subscription record as a whole — the address, the titles followed, and the delivery and language preferences — is retained for no more than thirty days for the purpose of completing that unsubscription and is then deleted; during that period you may request complete erasure of the record at once through the further deletion option presented on the unsubscription page. Upon deletion of your account, the subscription record is deleted. Technical records are retained for a limited period and then deleted. Information stored on your device remains under your control.

8.2 Where an account has been deleted, a minimal audit identifier of that deletion is retained for a limited period for the purpose of preventing the replay of revoked credentials and of verifying that the deletion has been carried out: the identifier of the deleted account, together with the address associated with it where one existed, is retained for no more than ninety days, and the record of the revocation of that account's credentials for no more than one hundred and twenty days, after which both are deleted. These identifiers are not used for any other purpose.

8.3 We maintain a limited number of encrypted backups of the information described in this Policy for the purpose of recovering from a failure or loss of the primary storage. A deletion effected in the primary storage is completed there first; the copies of the deleted information contained in those backups are removed as the backups are rotated, within approximately eight weeks of the deletion. Backups are used solely for recovery and not for any other purpose.

8.4 Feedback submissions are retained separately from account and synchronized information until manually deleted; they are not automatically deleted after a set period. Deleted submissions may remain recoverable by the feedback service provider for a limited period (up to ninety days) before permanent erasure.

Section 9 — Security

We apply reasonable administrative, technical, and organizational measures appropriate to the nature of the information, including encryption in transit and restricted access to our systems. No method of transmission or storage is entirely secure, and we cannot guarantee absolute security.

Section 10 — Your rights and choices

10.1 You may at any time: (a) use the Service without an account; (b) review or update your display name and profile image within the Service; (c) unsubscribe from the email digest using the link in any message, whereupon the retention described in Section 8.1 applies; (d) delete your account, which removes your account, synchronized settings, and subscription from the primary storage, subject to the audit identifiers and backups described in Sections 8.2 and 8.3; and (e) clear local data through the in-app reset function, which does not alter the restricted content setting.

10.2 Deleting your account does not delete feedback submissions.

10.3 Depending on the law of your jurisdiction, you may also have the right to access, correct, delete, or restrict the processing of your personal information, to object to processing, to data portability, and to lodge a complaint with a supervisory authority. To exercise these rights, contact us as set out in Section 18. To protect your information, we may verify requests against the email address associated with your account.

Section 11 — Children

The Service is not directed to children under 13 years of age, or under the age at which parental consent is required in your jurisdiction, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it. Certain listings in the Service are subject to content filters described in the Terms of Use.

Section 12 — Cookies and similar technologies

Web sign-in uses strictly necessary session cookies, without which web sign-in cannot operate. Local storage on your device or in your browser is used to hold your preferences and a cache of content for offline use; it is not used for advertising or cross-site tracking. The Service does not use advertising identifiers or cross-site tracking technologies. Any promotional placements within the Service are managed by us directly; the Service does not integrate third-party advertising networks or components, and does not perform behavioural targeting.

Section 13 — Third-party services and links

Third-party sign-in providers, external websites, and feeds you add to the Service are operated by third parties under their own terms and privacy policies. External websites and feeds that you add to the Service yourself are reached by your device directly; content you retrieve from those sources is exchanged between your device and that party and is not processed by us. Sign-in is different: the sign-in flow is relayed through the Operator's servers in order to establish your session, although the credentials you use with a third-party sign-in provider are entered upon that provider's own pages and are verified by that provider; we do not receive those credentials.

Section 14 — Changes to this Policy

We may update this Policy from time to time. An updated Policy takes effect upon the effective date stated above being updated. We will announce a material change within the Service, and may additionally notify then-current subscribers by email. Your continued use of the Service after a change takes effect constitutes acceptance of the revised Policy. Where the law applicable to you requires notice or consent in a particular manner for a change concerning the processing of your personal information, that law prevails over this Section.

Section 15 — Complaints and supervisory authorities

If you have a complaint concerning the handling of your personal information, you may raise it with us at the address in Section 18; we will consider and respond to complaints in good faith. You may also lodge a complaint with a supervisory authority. The federal supervisory authority is the Office of the Privacy Commissioner of Canada; a User located in Quebec may lodge a complaint with the Commission d'accès à l'information du Québec.

Section 16 — General

16.1 Relationship to other documents. This Policy forms part of the Terms of Use. Where this Policy and the Terms of Use are inconsistent as to the handling of personal information, this Policy prevails; in all other respects the Terms of Use prevail. This Policy prevails over any summary, help article, or interface text describing the same subject matter. The precedence in this Section extends only to the description of the collection, use, disclosure, retention, and protection of personal information; it does not extend to the allocation of risk between the parties, and Sections 16.5 to 16.7 of this Policy and Sections 12 to 14 of the Terms of Use are not displaced by it.

16.2 Severability. Where any provision of this Policy is held invalid, unlawful, or unenforceable, that provision is to be severed to the minimum extent necessary and construed so as to give effect to the intention of the parties to the greatest extent permitted, and the remaining provisions continue in full force.

16.3 Non-waivable rights. Nothing in this Policy excludes or limits any right conferred upon a User by applicable privacy or consumer protection legislation which that User cannot waive. Where the law applicable to the User confers such rights, those rights prevail over any inconsistent provision of this Policy to the extent of the inconsistency.

16.4 Headings. Headings are for reference only and do not affect construction.

16.5 No warranty. The Service is furnished "as is" and "as available". To the fullest extent permitted by applicable law, we disclaim all warranties, conditions, representations, and terms of every kind, whether express, implied, statutory, or collateral, in respect of the Service and of the collection, use, disclosure, and protection of personal information, including without limitation any warranty of accuracy, completeness, or timeliness of the information presented in the Service, and any warranty that the Service or the storage of personal information will be uninterrupted, timely, secure, or error-free. Section 12.2 of the Terms of Use applies to this Section with the substitution of references. Section 12.3 of the Terms of Use, and the rights there preserved, apply to this Section as they apply to that Section.

16.6 Limitation of liability. To the fullest extent permitted by applicable law, we shall not be liable for any indirect, incidental, special, consequential, exemplary, aggravated, or punitive damages, nor for any loss of data, profits, revenue, goodwill, opportunity, anticipated saving, or other intangible loss, arising out of or in connection with the Service or with the handling of personal information, howsoever arising. Our total aggregate liability in respect of all claims arising out of or in connection with the Service, these provisions, or the handling of personal information shall not exceed the amount set out in Section 13.3 of the Terms of Use, which amount is adopted by this Policy as its own. Sections 13.2, 13.2bis, 13.3, and 13.4 of the Terms of Use apply to this Section with the substitution of references. Where you are a consumer in Quebec, the statement set out in Section 13 of the Terms of Use applies to this Section as it applies to that Section, and the stipulations of this Section that are prohibited by the Consumer Protection Act (chapter P-40.1) do not apply to you.

16.7 Indemnity. To the fullest extent permitted by applicable law, you shall indemnify and hold harmless the Operator and its directors, officers, employees, contractors, and agents from and against all claims, demands, proceedings, losses, damages, liabilities, penalties, costs, and expenses, including reasonable legal fees, arising out of or in connection with any submission by you of User Materials that breaches Section 7.5 of the Terms of Use, any use of the Service by you in breach of the Terms of Use, or any misrepresentation by you in connection with an access, correction, or deletion request under this Policy. Section 14 of the Terms of Use, including the reservations and undertakings there set out, applies to this Section with the substitution of references.

16.8 Provisions of the Terms of Use that this Policy does not restate. This Policy does not restate, and is not intended to displace, the following provisions of the Terms of Use, which apply as there written: Section 5 (representations and undertakings of the User, which concern the use of the Service and not the handling of personal information); Section 6 (acceptable use); Section 17 (content filters); Section 18 (notices from rights holders and the counter-notice procedure, which govern questions of presentation and removal of Content and not of personal information); Section 20 (no waiver); Section 21 (survival, which as regards these provisions is governed by Section 21 of the Terms of Use and by the list there set out); Section 22 (assignment); Section 23 (third-party beneficiaries, including Apple Inc. and its subsidiaries); and Section 25 (governing law and jurisdiction, which governs these provisions save where applicable privacy legislation provides otherwise).

Section 17 — Language

A French version of this Policy is made available within the Service before acceptance to any User in Quebec, and to any other User who requests it, at the address in Section 18 and within the Service, and may be obtained there at any time. The French version is equally authentic with this English version. Where a User, having been furnished with the French version, expressly elects to be bound by the English version, the parties have by that express election required that this Policy and all related documents be drawn up in English. Une version française de la présente politique est disponible au sein du Service, avant son acceptation, à tout utilisateur situé au Québec, et à tout autre utilisateur qui en fait la demande, à l'adresse indiquée à l'article 18 et au sein du Service; elle peut y être obtenue en tout temps. Lorsque l'utilisateur, après avoir reçu la version française, choisit expressément d'être lié par la version anglaise, les parties ont par ce choix exprès exigé que la présente politique et tous les documents connexes soient rédigés en anglais.

Section 18 — Contact

Questions, requests, or complaints concerning this Policy or your personal information may be directed to: contact@galvoyage.com