What is personal information?
Personal information is information about an identifiable individual. It can include your name, contact details, information you choose to include in a message or form, and technical information that can be connected to you or your device.
This policy covers joshmcnally.ca, the website for Josh McNally’s campaign for Mayor of Sault Ste. Marie. It is not a City of Sault Ste. Marie or Member of Parliament website, and it does not provide a private government-service or casework portal.
What do we collect, and how?
Question responses and ideas
When you send a city-name response or an idea, the website processes your entries, optional name and reply email, and confirmation that you want to send them. Cloudflare’s email service sends the message to the campaign’s Gmail mailbox at badthumbpreacher@gmail.com. We use it to consider your contribution and respond where contact details are provided. Sending a form does not subscribe you to campaign updates.
Private form content is emailed to the campaign, not published or stored in the website’s database. The website does not save a draft in cookies or browser local storage; your browser may independently remember entries according to its settings. Please do not include sensitive personal information or urgent requests for help.
Privacy requests
If you contact the campaign about privacy, we receive the contact details and information you choose to send. Please include only what is needed for the request. If you are acting for someone else, we may need confirmation that you are authorized to do so.
Emailing the campaign
Campaign email links open your email application. If you choose to send a message to badthumbpreacher@gmail.com, the campaign receives your email address and message through Gmail. We use that information to respond to your enquiry or offer of help. Opening a link alone does not send a message, and emailing us does not subscribe you to campaign updates.
How do we use and share information?
We use information to consider your ideas, reply to communications, prevent abuse, and operate and improve the website. Taking part does not subscribe you to campaign updates or authorize advertising or an inferred political profile.
We do not sell personal information. We will not use it for an unrelated purpose without your consent, except where permitted or required by applicable law.
Information may be handled by authorized campaign or technical personnel who need it for the purposes above, and by service providers supporting the website. Information may also be disclosed where legally required.
Cloudflare provides the website’s hosting, delivery, security, performance measurement, abuse-prevention data storage, and form-email delivery. Google’s Gmail service handles delivered campaign messages. These providers may process information outside Canada. See Cloudflare’s Privacy Policy and Google’s Privacy Policy.
IP addresses and technical information
Visiting the site involves transmitting technical information, such as your IP address, requested page, browser information, and request time, to the hosting and security infrastructure. Cloudflare may process this information in connection with delivering, securing, and diagnosing the service. Operational logging is enabled. Application error messages do not include private form content.
To limit repeated form submissions, the website calculates a keyed, one-way fingerprint from your IP address. Fingerprints, time windows, and attempt counts are stored in a rate-limit table, alongside a site-wide sending counter. These counters are not published or attached to your messages.
The application does not store the original IP address or user-agent string in its rate-limit table. This does not mean that IP addresses are never processed or recorded by the hosting, security, or diagnostic systems.
How long is information kept?
The website deletes rate-limit records older than 24 hours when it next processes a submission that reaches the rate-limit check. This cleanup is activity-triggered, so records may remain longer during periods without submissions.
Submitted responses and ideas become campaign email. Mailbox retention settings and provider backups affect how long they remain; there is no automatic deletion schedule set by this form. Contact the privacy address below about access, correction, or removal.
Hosting logs, analytics, and provider backups have separate retention controls. Contact us with a question about a particular record.
How is information protected?
The site uses HTTPS, server-side submission checks, spam-prevention fields, rate limits, and protected database access.
These measures reduce risk but cannot guarantee absolute security. Please do not use website forms to send confidential information or urgent requests for help.
Questions, corrections, and removal requests
You can browse without submitting a form, leave optional name and email fields blank, and choose not to contact the campaign. To ask about personal information, request a correction or removal, or report a privacy concern, use the contact details below.
Include the approximate date and enough detail to identify the communication concerned. We may need to verify that the request concerns your information. Please do not send sensitive identification documents unless a safe, necessary verification method has been agreed.
Campaign privacy contact
Campaign communications and anti-spam
The campaign may reply to any email communication or form submission using the contact details you provide. The website does not collect mailing-list subscriptions, and sending a form or emailing the campaign does not sign you up for campaign updates.
If a subscription service is introduced, it will have a separate, clear consent process and a way to unsubscribe. Any electronic messages will need to meet the consent, identification, and unsubscribe requirements that apply to them under Canada’s anti-spam legislation. This policy does not assume that all campaign messages are exempt. See the CRTC’s guidance on electronic messages.
External websites and policy changes
Links to other websites are provided for information. Those organizations control their own content and privacy practices; review their policies before sharing information with them.
We will update this page if the website’s information handling changes. The date at the top identifies the current version. Any new collection of personal information will be explained separately; an earlier email or form submission is not consent to another purpose.