Privacy Policy

This Privacy Policy describes how G1 Ninja collects, uses, and shares information when you use our website and free Ontario G1 practice tool.

The Site is operated as G1 Ninja, an independent educational website operated by an individual in Canada (not a registered corporation). Our privacy contact is support@g1ninja.ca.

The Personal Information Protection and Electronic Documents Act (PIPEDA) may apply to our handling of personal information in the course of commercial activity. Provincial privacy laws, including Quebec’s Law 25 where applicable, may also apply depending on where you live and how you use the Site.

Depending on your choices and how you use the Site, we may collect:

• Analytics ID cookie (`g1n_aid`) — a random identifier (up to one year) used only if you Accept analytics, so we can link practice events across visits.
• Consent preference — stored as `g1n_analytics` (`accepted` or `declined`) so we remember your choice.
• Product events — if you Accept analytics, we store events in our database with fields such as `anonymous_id`, event name, JSON properties, and timestamp. Current event names include `view_landing`, `view_practice`, `view_quiz_list`, `quiz_selected`, `cta_click`, `start_test`, `answer_question`, `miss_question`, `complete_test`, `view_results`, `practice_session_abandoned`, and `analytics_consent_updated`. Properties may include session id, quiz slug, locale, question count, question id, stable choice ids (selected/correct), display order, time-to-answer, topic, section, dual-section scores (`signs_*` / `rules_*` / `fail_mode`), score, total, and pass/fail for the practice set. Events are stored only after Accept; we do not put full question or choice text in events.
• Server and CDN logs — our hosting and CDN providers may process IP address, user-agent, and request metadata for security and operations.
• Umami web analytics — when enabled and only if you Accept analytics: page views, referrers, device/browser information, and session-style aggregates. We do not use Umami for third-party advertising.
• Google Tag Manager / Google Analytics — page views, referrers, device/browser information, and related measurement via Google’s tag scripts (container GTM-T8J6JVCB). Google may process this data on servers outside Canada.
• Hotjar — heatmaps, session recordings, and related UX feedback (site id 6854572). Hotjar may process this data on servers outside Canada.
• Contact messages — if you email us, we receive the content of your message and your email address for the purpose of responding.

The Site also stores preferences and study helpers on your device only (browser `localStorage`). These values are not sent to our servers in this version:

• g1n-theme, g1n-comfort, g1n-contrast — display preferences
• g1n-missed-ids — recent missed question ids for practice continuity
• g1n-legal-ack — records that you acknowledged the practice Terms/Privacy notice for the current legal effective date

This version of the Site does not ask for your name, email address (except if you choose to email us), payment details, precise GPS location, or government identification numbers. We do not operate user accounts in this version.

We use information to:

• Improve practice questions, explanations, and user experience
• Understand which topics and languages need more work
• Measure funnels and product direction
• Debug errors and secure the Site

We do not sell personal information.

Device-local keys listed in section 5 are stored in `localStorage`, not as cookies.

On your first visit we ask you to Accept or Decline analytics. Until you choose, we do not set `g1n_aid`, do not send product events, and do not load Umami.

• Accept — we may set `g1n_aid`, record product events, and load Umami when configured.
• Decline — the Site (including practice) still works fully; we do not set `g1n_aid` or send product analytics.

You can change your mind anytime via Cookie settings in the site footer on most pages (including during practice), via this Privacy Policy’s choices section, or by clearing site data in your browser. Browser controls may delete cookies but do not by themselves delete historical event rows already stored on our servers — email us for deletion requests.

Product analytics events are first-party (stored in our Postgres database) and only after you Accept. Separately, Google Tag Manager (and any tags configured in that container, such as Google Analytics) and Hotjar load on the Site for measurement and UX feedback. We do not use advertising or retargeting tags in this version. If we add ads or new vendors later, we will update this policy and our consent notice before enabling them.

Accept/Decline choices are counted so we can report consent rates. Event payloads use ids (question, choice, quiz, session) rather than full question or answer text. Aggregated reporting for product improvement may be reviewed by operators; it is not used for advertising profiles.

We may share information with service providers who process it on our behalf. For the current deploy shape, that typically includes:

• Hetzner — app hosting
• Cloudflare — CDN, DNS, and edge security in front of the Site
• Postgres — first-party product event storage (on our host stack)
• Umami — self-hosted web analytics when enabled
• Google — Tag Manager / Analytics for site measurement
• Hotjar — heatmaps and session feedback for UX measurement

If you email us, your message is processed by your mail provider and ours. We do not sell personal information. We may disclose information if required by law or to protect rights, safety, or the security of the Site.

Our application host (Hetzner) and CDN (Cloudflare) may process data in Canada, the European Union, the United States, or other regions depending on routing and deployment. If so, personal information may be processed in those countries. We use reputable providers and reasonable contractual or technical safeguards appropriate to the service.

We keep raw consented product events (including a pseudonymous `anonymous_id`) only as long as needed for the purposes in this policy (product improvement, measurement, debugging, and security), and we delete them when you make a verified deletion request. In the ordinary course we do not keep raw events longer than 24 months; a scheduled job deletes raw rows older than that after daily aggregates have been written. Anonymized aggregate statistics (counts by day, month, question, or quiz — without `anonymous_id` or other identifiers) may be kept longer for product improvement and reporting. Server/CDN logs follow provider defaults (typically shorter). Your analytics consent preference is kept until you change it or clear site data. Device-local storage persists until you clear site data or change preferences in the Site.

We use reasonable safeguards to protect information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

You may request access to, correction of, or deletion of personal information we hold, or withdraw analytics consent for future collection, by emailing support@g1ninja.ca. If you Accepted analytics, including your `g1n_aid` cookie value (or approximate dates of use) helps us locate records. We aim to respond within 30 days.

The Site is not directed at children under 13. Many G1 learners are 16 or older. Parents or guardians should supervise younger teens. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.

If a breach of security safeguards creates a real risk of significant harm, we will assess the incident and notify individuals and the Office of the Privacy Commissioner of Canada as required by law.

Please contact us first so we can try to resolve your concern. You may also complain to the Office of the Privacy Commissioner of Canada. Depending on where you live, a provincial privacy commissioner may also be available.

If we add accounts, email newsletters, or paid features, we will update this Privacy Policy before those features collect additional personal information.

We may update this policy from time to time. We will post the new version with an updated effective date. For material changes, we may also provide additional notice (for example via the Site banner). Material Terms/Privacy updates also re-prompt the practice-start acknowledgment.

Privacy questions: support@g1ninja.ca. Effective date: November 13, 2026.