Short version: we collect as little as possible, we use Google Analytics to understand how our sites are used, we use no advertising trackers, and we never sell your information.
This policy explains how Mesopic ("we", "us"), based in Ottawa, Ontario, Canada, handles personal information when you use mesopic.ca, its subdomains (such as compass.mesopic.ca, pulse.mesopic.ca and guesser.mesopic.ca), and any other Mesopic product, app or website that links to this policy (together, the "Services"). We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Section 2 describes what applies to all of our Services. Some products handle information in their own way; those details are listed under "Product-specific information". Before we launch a product that collects information in a new way, we will add it to that section.
Like any website, our hosting provider automatically processes technical data such as your IP address, browser type and the pages requested, so that pages can be delivered and protected against abuse. On mesopic.ca, Cloudflare also measures how quickly our pages load for visitors (Cloudflare Web Analytics); it does not use cookies and is not used to identify you. Some products also use your browser's own storage for features you request; these are described under "Product-specific information". We do not use advertising trackers or advertising cookies.
We use Google Analytics 4 to understand how visitors use mesopic.ca and its subdomains, so we can improve them. It sets first-party cookies (such as _ga) to recognise returning browsers, and collects the pages you view, the site that referred you, your device and browser type and your approximate location (country or city, derived from your IP address, which Google Analytics does not store). On Compass it also records steps such as starting or finishing a test, starting checkout and completing a purchase, limited to the test type and price. On Airport Guesser it records when a game starts and finishes and when a result is shared, limited to the game mode and score. Google Analytics never receives your answers, your name or your email address, and we remove order numbers and private report links from the addresses it records. We have not turned on Google's advertising features, and we do not share this data for advertising.
The first time you visit, a short notice tells you we use analytics. You can turn analytics off at any time; the setting applies to all Mesopic sites in this browser:
Checking your analytics setting...
You can also block analytics in every website with Google's browser add-on or your browser's privacy settings.
Payments are handled by our merchant of record, Stripe (its checkout may appear as "Link"). Stripe collects your name, email address, billing address and payment details to process the order, calculate tax, prevent fraud and send your receipt, under its own privacy policy. We can see order information in our Stripe account (such as your name, email address, billing country, the product purchased, the amount and the order number), but never your full card details.
If you write to us, we receive your email address and whatever you include in your message.
Compass (compass.mesopic.ca). Your answers, scores and report are processed entirely in your browser. They are not sent to or stored on our servers. If you type a name and email address on the checkout screen, they are used to personalize your PDF report and to start your order.
When you buy a report, a short code representing your answers, the name you chose for the report and the time you accepted the notice at checkout are attached to your order at Stripe. This lets your private report link rebuild your report later. Anyone who has that link can view the report, so please keep it private. We do not keep a separate copy of your answers on our own servers.
Compass saves your answers in your browser's own storage as you go, so you can continue a test after a refresh or come back to it later. This saved progress stays on your device, is deleted after 7 days, when your report is delivered, or when you choose "Start over", and is never sent to us until you choose to buy a report. During checkout Compass also keeps a temporary copy so your answers are not lost if you cancel, and remembers on your device that your report was downloaded.
Airport Guesser (guesser.mesopic.ca). Airport Guesser does not ask for any personal information. It saves your last difficulty, your best scores and your daily challenge progress in your browser's own storage so they are there next time. This stays on your device and is never sent to us.
Pulse (pulse.mesopic.ca). Pulse does not ask for any personal information.
We do not sell or rent your personal information, and we do not use it for advertising. We will not send you marketing emails unless you have asked to receive them.
We share personal information only with service providers that help us run the Services, and only as needed for that purpose:
Some of these providers process data outside Canada, including in the United States, where it may be accessible to authorities under local law. We may also disclose information if required by law.
We keep emails and order records only as long as needed to provide support and to meet legal, tax and accounting requirements, which in Canada is generally up to 6 years for financial records. For paid Compass reports, the answer code attached to your order is kept by Stripe as part of the order record. Google Analytics data is kept for up to 14 months and then deleted automatically.
You can ask to see the personal information we hold about you, to correct it, or to delete it where we are not legally required to keep it. You can also withdraw consent to optional uses at any time. To make a request, email [email protected]. We will respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca). If you are in the European Union or the United Kingdom, you also have the rights given by the GDPR, including the right to complain to your local data protection authority.
The Services are not directed to children under 16, and we do not knowingly collect personal information from them.
All our sites are served over encrypted HTTPS connections, and we limit who can access the information we hold. No method of transmission or storage is completely secure, but we work to protect your information.
We may update this policy from time to time. The "Effective" date at the top shows when it last changed.
Questions or requests about your privacy? Email [email protected].
We're happy to explain anything here in plain language. Email us and a real person will reply.
Start a Conversation
Mesopic