1. Overview & Data Philosophy
ONTARIO functions on a simple economic paradigm: readers subscribe to our publication for world-class technical journalism, architectural design reviews, and AI critiques. Because our revenue is derived directly from readers rather than algorithmic ad brokers, we have no structural incentive to monetize your identity.
We treat personal data with strict cryptographic minimalism. If an engineering metric does not directly aid in rendering typography, authenticating your cryptographic session token, or delivering subscriber newsletters, we deliberately do not capture or record it.
Data Minimization
We collect strictly what is essential to fulfill your subscriber dispatch.
Zero Fingerprinting
No canvas inspection, hardware hash profiling, or cross-tab correlation.
14-Day Ephemerality
Raw edge server access logs are systematically purged every 336 hours.
2. Information We Collect
Depending on how you interface with ONTARIO—as an anonymous reader, periodic newsletter recipient, or institutional member—we process the following discrete data payloads:
When purchasing an all-access digital subscription or print quarterly journal, we store your full name, email address, chosen avatar image URL, and membership level status. Passwords are never stored in cleartext; they are hashed utilizing Argon2id algorithms via our authentication provider.
For readers enrolled in our weekly intelligence dispatch, we store the destination email address and category subscription preferences. We intentionally disable invisible 1x1 tracking pixels in our outbound emails, ensuring your email reading habits remain private.
When requesting resources from our edge CDN, our web servers log standard HTTP request metadata: client IP address (truncated to /24 CIDR mask for geographic resilience), user-agent string, URI path, timestamp, and HTTP status code. These diagnostic traces are strictly utilized to prevent distributed denial-of-service (DDoS) attacks.
3. Cookie & Local Storage Policy
Unlike conventional publishers who deploy programmatic advertising consortiums, ONTARIO does not deploy cross-site behavioral tracking cookies, Facebook Pixel, Google Tag Manager remarketing vectors, or device-fingerprinting scripts.
We restrict client-side state strictly to high-utility functional requirements:
| Identifier | Mechanism | Purpose | Lifespan |
|---|---|---|---|
| lumen_session_jwt | Secure, HttpOnly Cookie | Cryptographic token confirming subscriber authentication | 30 Days |
| lumen_theme_pref | localStorage | Stores client viewport preference (light / system dark mode) | Persistent |
| lumen_font_scale | localStorage | Maintains accessibility typographic sizing scale | Persistent |
| __stripe_mid / sid | Secure Cookie | Fraud prevention and cryptographic checkout processing | Session / 1 Year |
4. Third-Party Sharing & Processors
We operate in concert with verified infrastructure partners who maintain stringent adherence to ISO 27001, SOC 2 Type II, and GDPR compliance agreements (Data Processing Addenda are executed with each partner):
Facilitates credit card processing and recurrence billing. ONTARIO never ingests or caches primary credit card account numbers (PAN).
Executes transactional authentication emails and subscriber release notices with zero cross-tenant metadata leaks.
Caches static typographical assets and renders TLS 1.3 cryptographic termination for secure global low-latency delivery.
Encrypted PostgreSQL clustering hosting subscriber relational state with automatic AES-256 block-level encryption at rest.
5. Subscriber Rights & GDPR/CCPA
Regardless of your legal residency, ONTARIO affords all human readers the highest tier of European (GDPR) and Californian (CCPA/CPRA) statutory rights:
Right to Data Portability
Export your complete reader reading record, billing invoices, and telemetry in standardized, machine-readable JSON format at any moment.
Right to Complete Erasure
Initiate our automated cryptographic zeroing process. Your user entity, reading markers, and associated tables are shredded irreversibly within 48 hours.
Right to Rectification
Update or modify incorrect identity fields, billing contacts, or taxonomy subscriptions directly through your subscriber control suite.
Absolute Right to Object
Opt out of all non-essential transactional communications instantly via one-click unsubscribe headers in RFC 8058 standard compliant formats.
Need to exercise your data rights or request immediate deletion? Contact our Data Privacy Officer directly at privacy@ontariotech.dev or transmit an authenticated statutory inquiry.
6. Data Retention & Cryptographic Security
ONTARIO enforces zero-trust architectures across all environments. Production database replicas are secured behind VPC boundaries accessible strictly via multi-factor authenticated WireGuard VPN bastions with comprehensive session audit trails.
Active account tokens and billing state are stored solely for the continuous duration of your active subscription. Inactive profiles with no active readership or billing history for greater than twenty-four (24) months are scheduled for automated soft-deprecation followed by unrecoverable hard cryptographic deletion.
{
"tls_version": "TLS_1_3",
"cipher_suites": ["TLS_AES_256_GCM_SHA384", "TLS_CHACHA20_POLY1305_SHA256"],
"database_storage": {
"algorithm": "AES-256-XTS",
"key_rotation": "90_days",
"anonymization_salt": "HMAC-SHA-512"
},
"edge_logging": {
"ip_masking": "CIDR_/24_anonymized",
"retention_window": "336_hours"
}
}7. Data Protection Officer Contact
ONTARIO has appointed an independent Data Protection Officer (DPO) charged with auditing data flows, conducting privacy impact assessments, and addressing subscriber inquiries regarding personal integrity.
Office of the Data Protection Officer
ONTARIO PUBLISHING INC. · LEGAL STEWARDSHIP COUNCILDirect statutory escalations, compliance verifications, and regulatory notifications can be transmitted to our designated counsel:
Auckland 1041, New Zealand
NZBN: 9429053304834