Privacy Policy
What we collect, why we collect it, and the choices you have.
Last updated: October 10, 2026
The short version: we collect only what an account and a support reply need. We run no advertising, no analytics and no tracking services, we take no payments, and we never sell your information.
1. Who we are
Skyward Fun Supply ("we", "us") runs skywardfunsupply.com, a free-to-play social games site for adults 19+ in Canada. For any privacy question or request, write to [email protected].
2. What we collect and why
| When | What | Why |
|---|---|---|
| You create an account with email | First and last name, email address, a securely hashed password (we never store the password itself), your confirmation that you are 19+ and in Canada, the time you accepted the terms, and account dates. | To create and secure your account and confirm eligibility. |
| You continue with Google | From Google: your name, email address, whether Google has verified that email, and a Google account identifier. Plus the same eligibility confirmation and dates as above. | To sign you in and create your account. |
| You sign in | Time of last sign-in, a count of failed attempts and a temporary lock if there are too many. | To protect accounts from guessing attacks. |
| You ask to reset a password | A one-time reset code (stored only as a hash) and its expiry time. We email you the reset link. | To let you regain access. |
| You use the Support or Contact form | Your name, email address, topic, message and, on Support, an optional game and device description. | To read your message and reply to you. |
| You use the site or any form | A short-lived, one-way scrambled record of your connection address, used only to limit how many sign-in attempts and messages can be sent per hour. | To prevent spam and abuse. |
We do not ask for payment details, phone numbers, postal addresses or government ID, because the Service needs none of them.
3. How we use it
We use your information only to run your account, keep the Service secure, answer your messages, and meet legal obligations. We do not use it for advertising or profiling, and we do not make decisions about you by automated means beyond the security limits described above.
4. Cookies and similar technologies
We use one strictly necessary session cookie. We use no advertising or analytics cookies. Details are in the Cookie Policy.
5. Games
The games load inside our pages from skywardfunsupply.com. The games may keep settings or play progress, such as a virtual coin balance, in your browser's own storage, which stays on your device. Game play is not linked to your email address or name by us, and you can clear it through your browser settings.
6. Who we share information with
- Email delivery. Messages from the Support and Contact forms, and password-reset emails, are sent through an email delivery service (currently Brevo, using SMTP) so that they reach our inbox or yours. That service handles those messages in order to deliver them.
- Google. Only if you choose Continue with Google. Google receives the information needed to sign you in, under its own privacy policy. Google's sign-in script loads only on the sign-in and sign-up pages, and only when Google sign-in is switched on.
- Our hosting provider. Our website runs on a hosting service that stores the data described here and may keep standard server logs (such as connection address, time and page requested) for security and operation.
- Legal reasons. We may disclose information if the law requires it or to protect people and the Service.
We do not sell or rent your information.
7. Where information is handled
Our email delivery, Google sign-in and hosting providers may process information outside Canada, including in countries with different privacy laws. We choose providers carefully and share only what each needs.
8. How long we keep it
- Account details: until you delete your account (you can do this yourself on the account page, and it takes effect straight away).
- Password-reset codes: one hour, or until used.
- Spam-limit records: a few hours.
- Support and Contact messages: for as long as needed to deal with your request and keep a reasonable record of it, after which they are deleted.
- Delivery log: a technical log records the time, outcome and form type of each message sent, and any error, but not your name, email or message.
9. Security
Passwords are stored as one-way hashes. Account data is kept in a private folder that is not served to the web. The session cookie is marked HttpOnly and SameSite, and Secure when you use HTTPS. No system is perfectly secure, so please use a strong, unique password.
10. Your choices and rights
Under Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA), you can ask to see the personal information we hold about you, ask us to correct it, and withdraw consent for us to use it. You can delete your account yourself, or write to [email protected] or use the "Privacy or data request" topic on the Support page. We may need to confirm who you are first. If you are unhappy with our response you can contact the Office of the Privacy Commissioner of Canada.
11. Children
The Service is for adults aged 19 and over and is not directed at children. If you believe a child has created an account, tell us and we will remove it.
12. Changes
We may update this policy when the Service changes. The "last updated" date shows the latest version. We will make significant changes clear on the site.