Privacy Policy
Text of September 2, 2026
JoinBonanzaPlay is published by Ryan Cote, an individual, from 1801 McGill College Ave, Montréal, QC H3A 2N4, Canada. He can be reached at [email protected], and under Québec’s Law 25 he is the named person responsible for the protection of personal information. The applicable instruments are the federal Personal Information Protection and Electronic Documents Act, the Québec Act respecting the protection of personal information in the private sector as amended by Law 25, and Canada’s Anti-Spam Legislation.
The whole of what is collected
Three streams of information exist in connection with this site, and no fourth. The first is unavoidable, the second and third are yours to start or not.
Serving any file writes a line in the hosting provider’s log containing the requesting IP address, the browser’s user-agent string, the path, a timestamp and the response code. Nothing decides this; it is how a web server functions. Those lines are read when a page fails or when a burst of automated traffic needs identifying, and they are never aggregated, never combined with anything else, and never used to establish who a reader is.
The second stream is email. A message contains what its sender put in it, typically a name, a return address and a question about a board. Nothing on this domain asks for any of it: there is no form here at all — no contact field, no sign-up, no comment box, no upload, no survey. Reading a page transmits nothing about you beyond the request that fetched it.
The third is an order for the Stage Band Companion, which is a variant of the second rather than something new. Alongside the correspondence sits the reference a bank attaches to an Interac e-Transfer, which is how a payment is matched to an order. No card number, expiry date or security code is ever seen by this site or by Ryan Cote. An e-Transfer moves between your bank and his; this domain has no payment page into which card details could be entered, and will not acquire one.
Purposes, and the closed nature of the list
Information is used to keep the site available and secure; to read and answer email; to perform an order by sending transfer details, confirming that payment arrived and delivering the file; and to comply with a lawful demand from a Canadian authority, should one ever be made. That is the complete list, and nothing is used for a purpose outside it.
Nothing is sold, rented, traded, licensed or disclosed to advertisers or data brokers. Under CASL, no commercial electronic message is sent from this address: there is no mailing list to join, no newsletter and no automated follow-up, so there is nothing to unsubscribe from. A reply to an email you sent is not a marketing message, and no other kind will arrive.
It is also worth stating what is absent from the site itself, because it explains why the first stream stays as thin as it does. There is no analytics platform on this domain, no tag manager, no advertising or remarketing tag, no session recorder, no heatmap, no embedded third-party content and no externally hosted font. Every file the browser requests is served from joinbonanzaplay.com, which means no outside company is ever placed in a position to observe a visit. A single first-party cookie holds your answer to the banner for six months, and the Cookie Policy sets it out.
Storage, transfer outside Québec, and retention
Pages are served over HTTPS, so traffic between browser and server is encrypted in transit. Administrative access to the hosting account belongs to one person and is protected by a unique credential. The hosting and email providers are the only third parties involved at any point.
Law 25 requires that transfer of personal information outside Québec be considered rather than glossed over. Both providers may operate infrastructure outside the province and outside Canada; where they do, each is bound by contract to protections comparable to those required here, and what is involved is limited to log lines and correspondence. No profile, no analytics record and no payment data travels anywhere, because none exists.
| Stream | Kept for | Then |
|---|---|---|
| Server log lines | A matter of weeks | Rotated out by the host |
| General correspondence | Up to 24 months | Deleted |
| Order correspondence | Up to 24 months | Deleted; earlier on request |
| Consent cookie | 6 months | Expires in your browser |
Order threads are held a little more deliberately than a general enquiry, so a buyer who loses the file months later can ask again and be recognised rather than treated as a stranger.
Your rights, and the two offices that enforce them
Under PIPEDA and Law 25 you may request confirmation that personal information about you is held and a copy of it; correction of anything inaccurate, incomplete or out of date; an account of where the information came from; withdrawal of a consent previously given; and deletion of your correspondence. Send the request to [email protected], saying which of those you want. A first reply usually arrives within a couple of business days, and the request itself is completed inside thirty days.
If the answer does not satisfy you, the Commission d’accès à l’information du Québec accepts complaints, as does the Office of the Privacy Commissioner of Canada. Neither requires you to have raised the matter here first, and neither should.
Beyond this domain, and later versions of this text
Pages here link to store listings for the applications they describe. Those platforms are operated by other organisations under their own privacy policies, which this document has no power to alter or extend, and it ceases to apply the moment a link takes you off joinbonanzaplay.com. Read their terms before installing software or supplying any personal detail.
Should the site change in a way that affects anything set out above, this page is rewritten and the date at its head moves with it. Nothing is applied retroactively to information that has already been deleted.