Privacy Policy

Revision of September 2, 2026

Most policies bury what a reader actually wants at the bottom. This one starts there.

1. What you can ask for, and how

Write to [email protected] and ask for any of the following. All four are honoured without argument and none of them requires a reason.

1. Confirmation of whether any personal information about you is held here, and a copy of it if so.
2. Correction of anything inaccurate, incomplete or out of date.
3. Withdrawal of a consent you gave earlier, subject to legal limits and reasonable notice.
4. Deletion of your correspondence, including well before the twenty-four month point at which it goes anyway.

A first reply normally arrives within a couple of business days and the request itself is completed inside thirty days, which is the response window the Personal Information Protection and Electronic Documents Act sets. If the outcome does not satisfy you, the Office of the Privacy Commissioner of Canada takes complaints about federally regulated handling of personal information directly, and does not ask whether you raised it here first.

2. Who you are asking

Joshua Roy, an individual rather than a company, at 201 Portage Ave, Winnipeg, MB R3B 3K6, Canada. He wrote the site, holds the hosting account, answers the mail and is the only person with access to any of it.

Manitoba has no general private-sector privacy statute in force, so PIPEDA is the operative law here, alongside Canada’s Anti-Spam Legislation.

3. What there is to ask about, realistically

Very little, and it is worth being specific rather than reassuring. Three things exist.

Log lines. Serving a file writes one: source IP address, browser user-agent string, path requested, timestamp, response code. That is how web servers work rather than a decision anybody took here. The lines are read when something breaks or when automated traffic becomes a nuisance, are never merged with anything else, and are rotated out by the host within weeks.

Email. Whatever you put in a message. Nothing on this domain asks for it — there is no form anywhere on the site, no sign-up, no comment field, no upload. It exists because you wrote.

Order correspondence. If you order the Old Phone Field Guide, the thread later carries the reference your bank attaches to an Interac e-Transfer, which is how a payment is matched to an order. No card number, expiry date or security code is ever seen by this site or by Joshua Roy: an e-Transfer moves between your bank and his, and this domain has no payment page for card details to be entered into.

4. What it is used for

Four purposes, and the list is closed: keeping the site available and secure; reading and answering email; performing an order by sending transfer details, confirming receipt and delivering the file; and complying with a lawful demand from a Canadian authority should one arrive.

Nothing is sold, rented, traded or disclosed to advertisers or data brokers. Under CASL no commercial electronic message is sent from this address at all — there is no list, no newsletter and no automated sequence, so there is nothing to unsubscribe from. A reply to your own email is not a marketing message.

5. What is absent

No analytics platform, no tag manager, no advertising or remarketing tag, no session recorder, no heatmap, no embedded third-party content and no externally hosted font. Every file the browser requests comes from palmexor.com itself, which means no outside company is ever placed where it could observe your visit. One first-party cookie stores your banner answer for six months; the Cookie Policy covers it.

6. Where it sits, and for how long

Pages are served over HTTPS and the hosting account is accessible to one person with a unique credential. The hosting and email providers are the only third parties involved; both may run infrastructure outside Manitoba and outside Canada, in which case they are contractually bound to protections comparable to those required here. What is involved amounts to log lines and correspondence.

Logs last weeks. Email lasts up to twenty-four months, so that a returning question still makes sense, and order threads are kept a little more deliberately so a buyer who loses the file can ask again and be recognised. Earlier deletion happens on request.

7. Links away from here

Pages link to store listings for the applications they discuss. Google Play is run by Google LLC under its own privacy policy, which this document neither controls nor extends, and this policy stops applying the moment you follow a link off palmexor.com.

8. Changes

If the site changes in a way that affects any of the above, this page is rewritten and the date at the top moves with it. Nothing is applied retroactively to information already deleted.