Privacy
Last updated 2026-05-05
Our privacy practices, in plain English. We use cookieless analytics. We don’t run a cookie banner because we don’t set tracking cookies. We don’t share your data with anyone except the carriers and processors we need to fulfil your order. Lead data lives in our email inbox — no CRM, no database.
- Cookieless analytics. No cookie banner because there’s nothing to consent to.
- No Facebook Pixel, no LinkedIn Insight, no TikTok Pixel, no Hotjar, no Microsoft Clarity, no retargeting.
- Form data sent over TLS to AWS SES. Stored as email in our inbox; not in a CRM, not in a database.
- Exponential Labs, Inc. dba mygamingpc.ca is the data controller and handles all privacy requests.
- Email [email protected] any time to access, correct, or delete your data.
What we collect
From the lead form: your name, email, optional phone, city and postal code (for shipping estimates), the build you’re considering, and whatever you write in the “who’s it for” and “anything we should know” fields. That’s sent over TLS to [email protected] via AWS SES, where it lives as an email thread until you ask us to delete it.
Standard server logs: our hosting platform records the usual web access logs (IP, user agent, requested URL, timestamp). We use these for security and traffic analysis. Logs are retained for 30 days and rolled.
Aggregate analytics: Cloudflare Web Analytics gives us cookieless page-view counts. Google Analytics 4 runs in cookieless mode (consent denied for ad and analytics storage). Both report aggregate metrics only — page views, popular pages, where visitors come from at the country level.
What we don’t collect
- Payment data. We don’t have e-commerce checkout in v1. All transactions are arranged over email.
- Children’s data. Parents fill the form. We don’t knowingly collect data from children under 13.
- Precise location. Beyond the IP-derived country, we don’t request or store geolocation.
- Behavioural profiles. No session recording, no scroll heatmaps, no mouse-movement tracking.
- Contact lists or social graphs. We never ask for your contacts, friends, or social profiles.
- Browser fingerprints. Beyond what shows up in standard server logs, we don’t fingerprint.
How long we keep data
Email threads from the lead form: kept for as long as we’re corresponding plus a reasonable follow-up window after a sale (warranty queries, returns, build-history). After two years from the last reply, we delete unless you’ve become a customer with an active warranty. Customer order records (invoice, build photos, warranty paperwork) are kept for the duration of the warranty plus three years for tax purposes.
Server access logs: 30 days, rolled.
Aggregate analytics: as configured by Cloudflare and Google’s default retention windows. We don’t extend them.
You can ask us to delete your data sooner — see “Your rights” below.
Your rights (PIPEDA & Quebec Law 25)
Under Canadian privacy law (PIPEDA federally; Quebec’s Law 25 provincially) you have the right to:
- Access the data we hold about you. Email [email protected] and we’ll send you the email threads, build records, and any other personal data on file within 30 days.
- Correct inaccurate data. Email us with the correction; we’ll confirm when it’s done.
- Delete your data (right to erasure / right to be forgotten). Email us; we’ll delete within five business days and confirm. We may retain limited records to comply with tax law.
- Withdraw consent at any time, where we’re processing on consent.
- Lodge a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, with the Commission d’accès à l’information (cai.gouv.qc.ca).
Our data controller is Exponential Labs, Inc. dba mygamingpc.ca. The team there handles every privacy request in practice.
Children’s data
Our customers are parents. We do not knowingly collect data from children under 13 through the lead form. If a parent mentions their child’s age or interests in the form, that information is part of the parent’s message and is treated under the parent’s consent.
Kavan, 13, is the public face of the brand. He is not a customer; his role is described elsewhere on the site (see About). His personal data — full name, school, address — is not on this site, in our analytics, or in any third-party tool we use.
Cookies and similar technologies
The site sets one cookie under one circumstance: when you submit the lead form, Cloudflare Turnstile may set a short-lived security token to confirm you’re a human and not a bot. The token expires within minutes and is not used for tracking.
That’s the entire cookie footprint of mygamingpc.ca. There are no advertising cookies, no analytics cookies, no preference cookies. This is why there’s no cookie banner — we have nothing to ask consent for.
When we update this policy
We’ll update the “Last updated” stamp at the top of this page when something material changes. If a change affects how we use existing customer data, we’ll email recent customers and lead-form submitters directly. Cosmetic edits (typo fixes, link cleanups) don’t trigger an email.
Frequently asked questions
Why don't you have a cookie banner?
Because we don't set tracking cookies that would require one. Cloudflare Web Analytics is cookieless. Google Analytics 4 runs in cookieless mode (consent denied for ad and analytics storage). The only cookie on the site is a short-lived security token from Cloudflare Turnstile when you submit the lead form.
Is GA4 really privacy-safe?
In cookieless mode, with consent denied for storage and ad signals, yes. We use it for aggregate page-view counts only. No user IDs, no remarketing, no Google Signals. The data tells us "the homepage had 240 visits this week" — not who visited.
Can I delete my email from your records?
Yes. Email [email protected] from the address you want removed and we'll delete the original message and any reply thread within five business days. We'll confirm when it's done.
Do you share data with advertisers?
No. We don't run ads, we don't have a Facebook Pixel, no LinkedIn Insight, no TikTok Pixel, no retargeting of any kind. The only third parties involved in our pipeline are AWS (sends email), Cloudflare (hosting CDN, anti-spam, cookieless analytics), and Google (cookieless analytics). None of those receive your name or message contents — they only see request metadata or, in AWS's case, the email transit.
Last updated 2026-05-05. Exponential Labs, Inc. dba mygamingpc.ca, Toronto, Ontario, Canada is the data controller. Email [email protected] for any privacy request.