Effective Date: • Last Updated:
1. Who We Are (Data Controller)
This website is operated by Mark Lane Canada Inc., doing business as “Mark Lane” ("we", "us", "our").
Address: 4500, 855 – 2nd Street S.W.,Calgary, Alberta T2P 4K7
Privacy / DPO contact: privacy@marklane.io
EU representative (Art. 27 GDPR): Alfred Nader
2. What Personal Data We Collect
When you visit this site, we may collect the following (depending on your consent choices):
- Network identifiers: IP address, approximate geographic region derived from IP
- Device & browser: user agent, browser type/version, OS, screen dimensions, color depth, pixel ratio, viewport size, CPU core count, estimated RAM
- Behavioral data: pages visited, referrer URL, time-on-page, scroll position, page load performance timings
- Technical fingerprints: canvas rendering hash, WebGL GPU renderer string — functionally equivalent to a cookie under ePrivacy rules
- Connectivity data: network type, estimated download speed, round-trip latency, battery level & charging state
- Preference signals: browser language, timezone, dark-mode preference, Do Not Track value, installed browser plugins
- Precise geolocation — only if you explicitly grant browser permission
- Session cookie (
vid): a first-party cookie (365-day lifetime) that links your visits
We also make a request to the third-party API api.ipify.org to resolve your public IP address. Their privacy policy applies to that request.
3. Legal Basis for Processing (GDPR Art. 6)
- Consent (Art. 6(1)(a)): analytics, device fingerprinting, the
vid session cookie, and precise geolocation. You may withdraw consent at any time.
- Legitimate interests (Art. 6(1)(f)): basic server-side logging of IP addresses and HTTP headers for security and abuse prevention, subject to your right to object.
4. Purposes of Processing
- Understand how visitors interact with this site (analytics)
- Detect and prevent fraudulent or abusive traffic (security)
- Diagnose technical errors and improve performance
- Generate aggregated, anonymized usage statistics
We do not sell, rent, or share your personal data with third parties for their own marketing.
5. Cookies & Tracking Technologies
vid (first-party, persistent, 365 days) — visitor session ID. Set only after consent.
user_consent_v1 (localStorage, persistent) — stores your consent choices. Essential; set immediately.
- Canvas fingerprinting — generates a device hash from GPU-rendered graphics. Requires consent.
- WebGL fingerprinting — reads GPU vendor and renderer strings. Requires consent.
- ipify.org API call — third-party request to resolve your public IP. Only made after analytics consent.
6. Data Retention
Server-side visit logs: retained for 90 days, then purged. Aggregated statistics: retained indefinitely. Your in-browser consent record (localStorage): until you clear it or change preferences.
7. Your Rights
You may have the following rights depending on your jurisdiction:
- Access — receive a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data
- Restriction — limit how we process your data
- Object — object to processing based on legitimate interests
- Portability — receive your data in a machine-readable format
- Withdraw consent — at any time via Manage Preferences
- Lodge a complaint — with your national data protection authority (e.g., ICO in the UK; your national DPA in the EU)
To exercise any right, contact privacy@marklane.io. We will respond within 30 days (extendable to 90 days for complex requests under GDPR).
8. California Residents — CCPA / CPRA Rights
California residents have the right to: (1) know what personal information is collected; (2) know whether personal information is sold or disclosed and to whom; (3) opt out of the sale/sharing of personal information; (4) request deletion; (5) non-discrimination for exercising these rights. We do not sell personal information. To submit a verifiable consumer request, email privacy@marklane.io or use our Preference Center. We will respond within 45 days.
9. Do Not Track (DNT)
We detect and honor the browser Do Not Track (DNT) signal. When DNT=1 is received, we automatically disable analytics beacons and device fingerprinting, regardless of any other consent stored. Essential server-side security logging continues.
10. International Data Transfers
Data is stored on servers in [Your Server Country]. Transfers from the EU/UK rely on Standard Contractual Clauses (SCCs) or an adequacy decision where applicable. Contact us for a copy of applicable transfer mechanisms.
11. Children's Privacy (COPPA / GDPR Art. 8)
This site is not directed at children under 16 (or 13 under COPPA in the USA). We do not knowingly collect personal data from children. If you believe a child has provided data, contact us immediately for erasure.
12. Changes to This Policy
We may update this policy. Material changes will be highlighted by updating the "Last Updated" date above and, where legally required, by seeking fresh consent before processing continues.
13. Contact & Supervisory Authority
Mark Lane Canada Inc. • 4500, 855 – 2nd Street S.W.,
Calgary, Alberta T2P 4K7 •
privacy@marklane.io
DPO: privacy@marklane.io
UK supervisory authority: Information Commissioner's Office (ICO)