What is personal information?
Personal information is information about an identifiable individual. It can include your name, contact details, information you choose to put in a comment, and technical information that can be connected to you or your device.
This policy covers joshmcnally.ca, the website for Josh McNally’s campaign for Mayor of Sault Ste. Marie. It is not a City of Sault Ste. Marie or Member of Parliament website, and it does not provide a private government-service or casework portal.
What do we collect, and how?
Public Mosaic comments
If you choose to publish a comment, the website receives your comment and optional display name. An email address, account, telephone number, and home address are not required. You may use a display name that does not identify you.
Accepted comments are stored with an identifier, posting time, visibility status, and moderation-version information. Your comment, display name, and posting date and time are published. The public feed also makes the comment identifier available.
Comments are checked automatically for selected inappropriate language, threats, and other abuse before publication. This is a rules-based language check, not a guarantee of human review or that every harmful comment will be detected. A comment may be refused or hidden through moderation.
Please do not post private contact details, health or financial information, identification documents, or someone else’s personal information. Public comments may be copied, shared, or indexed by others.
Question and proposal worksheets
The city-name question and resident-proposal worksheets create a summary in your browser only. The campaign does not receive those entries, and the website does not save them in a database, cookies, or browser local storage. Your browser may independently remember form entries according to its settings.
Privacy requests
If you contact the campaign about privacy, we receive the contact details and information you choose to send. Please include only what is needed for the request. If you are acting for someone else, we may need confirmation that you are authorized to do so.
Emailing the campaign
Campaign email links open your email application. If you choose to send a message to badthumbpreacher@gmail.com, the campaign receives your email address and message through Gmail. We use that information to respond to your enquiry or offer of help. Opening a link alone does not send a message, and emailing us does not subscribe you to campaign updates.
How do we use and share information?
We use information to publish and moderate the discussion you choose to join, prevent abuse, operate and improve the website, and respond to enquiries and offers of help. Participation is not consent to campaign email, advertising, or an inferred political profile.
We do not sell personal information. We will not use it for an unrelated purpose without your consent, except where permitted or required by applicable law.
Public comments are visible to everyone. Non-public information may be handled by authorized campaign or technical personnel who need it for the purposes above, and by service providers supporting the website. Information may also be disclosed where legally required.
Cloudflare provides the website’s hosting, delivery, security, performance measurement, and comment-database services. Information may be processed outside Canada. Cloudflare describes its handling of website-visitor and service data in its Privacy Policy.
IP addresses and technical information
Visiting the site involves transmitting technical information, such as your IP address, requested page, browser information, and request time, to the hosting and security infrastructure. Cloudflare may process this information in connection with delivering, securing, and diagnosing the service. Operational logging is enabled for the website’s comment service.
To limit repeated comment submissions, the comment service uses your IP address and browser user-agent information to calculate a keyed, one-way fingerprint. The fingerprint, time window, and attempt count are stored in a separate rate-limit table. They are not published or attached to the comment record.
The application does not store the original IP address or user-agent string in its comment or rate-limit tables. This does not mean that IP addresses are never processed or recorded by the hosting, security, or diagnostic systems.
How long is information kept?
Published comments remain stored unless removed; there is currently no automatic comment-expiry schedule. Hiding a comment from the public feed does not by itself delete the stored record.
The comment service deletes rate-limit records older than 24 hours when it next processes a submission that reaches the rate-limit check. This cleanup is activity-triggered, so records may remain longer during periods without submissions.
Hosting logs, analytics, and any provider backups have separate retention controls. Removal from the live website cannot remove copies already made by other visitors, search engines, or archives. Contact us with a question about a particular record.
How is information protected?
The site uses HTTPS, server-side submission checks, automated comment screening, rate limits, and protected database access. The public comment feed excludes rate-limit fingerprints and internal moderation fields.
These measures reduce risk but cannot guarantee absolute security. Do not use a public comment to send confidential information or an urgent request for help.
Questions, corrections, and removal requests
You can browse without posting, leave the display-name field blank, and choose not to use an interactive feature. To ask about personal information, request a correction or removal, or report a privacy concern, contact the campaign using the details below.
For a comment request, include the page address, approximate posting time, and enough of the comment to identify it. We may need to verify that the request concerns your information. Because comments do not require accounts, it may not always be possible to establish who submitted one. Please do not send sensitive identification documents unless a safe, necessary verification method has been agreed.
Campaign privacy contact
Campaign communications and anti-spam
The website does not collect mailing-list subscriptions. Posting a comment or using a worksheet does not add you to a mailing list.
If a subscription service is introduced, it will have a separate, clear consent process and a way to unsubscribe. Any electronic messages will need to meet the consent, identification, and unsubscribe requirements that apply to them under Canada’s anti-spam legislation. This policy does not assume that all campaign messages are exempt. See the CRTC’s guidance on electronic messages.
External websites and policy changes
Links to other websites are provided for information. Those organizations control their own content and privacy practices; review their policies before sharing information with them.
We will update this page if the website’s information handling changes. The date at the top identifies the current version. Any new collection of personal information will be explained separately; an earlier comment or use of a worksheet is not consent to another purpose.