Introduction
PontonLabs appreciates your business and trust.
We are Canada based company, creating products to enhance your website building experience. Please read this Privacy Policy, providing consent to both documents in order to have permission to use our services.
Data Collected
Data Storage Location
We are a Canada-based company. All data collected through PontonLabs websites and services is stored securely within Canada or through trusted third-party providers that comply with Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA).
Registration Data
When you register on our website, we store the username and email address you provide, along with any additional personal information you add to your profile. You may view, edit, or delete your information at any time (except for your username). Website administrators can also access this information to assist with support or account management.
Purchase Data
If you make purchases through our website, we collect transaction details (such as order information and billing email) required to provide you with digital products, support, or customer services. This information is only retained as long as necessary to fulfill our obligations or comply with applicable Canadian tax and record-keeping laws.
Support Data
When you contact us for support, we collect the information you provide in your request (such as name, email, and issue details). This information is used solely for resolving your request and improving our services. You will always be asked for consent before submitting data through a support form or ticketing system.
Comments
If you leave comments on our website, we collect the information entered into the comment form as well as your IP address and browser user agent string to assist with spam detection and security.
Contact Form
Information submitted through our contact forms is sent directly to our official company email accounts. These submissions are kept only for customer service purposes and are never used for marketing without your consent, nor are they shared with unauthorized third parties.
Analytique
PontonLabs uses Google Analytics to understand how visitors use our website. The data collected is anonymous and does not contain personally identifiable information. If you would like to opt-out of Google Analytics tracking, you can install the official browser add-on here: Google Analytics Opt-out.
Cases for Using Personal Data
We use your personal information in the following ways:
To verify and identify users during website use;
To provide technical assistance and customer support;
To send important service updates or changes;
To monitor account activity and prevent fraudulent transactions;
To ensure the security of customer data and services;
To personalize the website experience for improved usability;
To maintain overall performance and functionality of our services.
Embedded Content
Pages on PontonLabs websites may include embedded content (for example, YouTube videos or social media feeds). Embedded content from other websites behaves exactly as if you visited those websites directly.
These third-party websites may collect data about you, use cookies, embed additional third-party tracking tools, and monitor your interaction with their embedded content — including tracking if you are logged into their service at the same time. PontonLabs does not control these third-party services. Below is a list of the main services we may use.
Cookies & Similar Technologies
PontonLabs uses cookies (small text files placed on your device) and similar technologies to operate our website, improve performance, remember your preferences, and understand how visitors use our pages. Cookies generally make browsing easier; however, you can choose to disable or limit them at any time using your browser controls (see Managing Cookies below).
We group cookies by purpose. Specific cookies may appear only if the related feature (e.g., login, comments, analytics, embedded media) is enabled.
Your Consent
Where required, we ask for your consent before setting non-essential cookies. You can withdraw or change your preferences at any time via your browser settings and (if available) our on-site cookie controls. Essential cookies are necessary for the site to function and are always active.
A. Strictly Necessary Cookies (all visitors; always on)
These cookies are required to deliver pages, maintain security, and keep you logged in.
wordpress_test_cookie
Used by WordPress to check whether cookies are enabled in your browser. (Session)wordpress_logged_in_{hash}
Keeps you logged in after authentication. (Typically up to 14 days, or session for one-time logins)wordpress_sec_{hash}
Helps protect your account and maintain a secure session. (Typically up to 14 days)wp-settings-{UID}, wp-settings-time-{UID}
Stores your admin/dashboard view preferences (UID = your WordPress user ID). (Typically 1 year)Security/anti-bot (Cloudflare)
__cf_bm: Distinguishes humans from bots to protect the site. (Typically ~30 minutes)
cf_clearance: Remembers that you passed a security challenge so you don’t have to repeat it. (Up to 1 year, varies by configuration)
Note: The legacy
__cfduidcookie is no longer used by Cloudflare and is not set by PontonLabs.
Session identifiers (if present)
Some plugins may use a session cookie (e.g.,PHPSESSID) to keep temporary state while you navigate pages. (Session)
B. Preference & Functionality Cookies
These remember your choices (e.g., language, form data you opted to remember) to personalize your experience.
comment_author_{hash}, comment_author_email_{hash}, comment_author_url_{hash}
If you choose “remember me” when commenting, these store your details so you don’t have to re-enter them. (Typically 1 year)Other plugin-specific preference cookies may be set when you opt into features; their names and durations can vary by plugin.
C. Analytics Cookies (consent-based)
We may use Google Analytics to collect aggregated, de-identified usage statistics (e.g., pages visited, time on site). This helps us improve performance and content. We do not use Google Analytics to identify you personally.
Typical cookies you may see:
_ga, ga*: Distinguish unique visits for analytics reporting. (Up to 2 years)
_gid: Short-lived visit/session analytics. (About 24 hours)
Opt-out: You can use your browser’s tracking protection, our cookie preferences (if available), or Google’s official opt-out add-on.
D. Embedded Media & Third-Party Content (consent-based)
When you interact with embedded content (e.g., YouTube videos, X/Twitter or Facebook posts), those platforms may set their own cookies and trackers. PontonLabs does not control these cookies. They are not set until you click or otherwise engage with the embedded item (or grant consent, if prompted).
Who Has Access to Your Data (PontonLabs — Canada)
If you are not a registered client
We do not maintain a profile about you. Aside from standard, security-related server logs (e.g., IP address, user agent, timestamp) and any cookies you’ve consented to, PontonLabs does not retain or view personal information about unregistered visitors.
If you have a registered account or communicate with us
Access to your personal information is limited and controlled on a need-to-know basis:
Authorized PontonLabs administrators
May access account information strictly to operate the website, maintain security, fulfill your requests, or resolve technical issues. Administrators are bound by confidentiality obligations and follow least-privilege, role-based access controls.PontonLabs support personnel
May access the minimum information necessary to verify your identity, troubleshoot issues, and provide customer support. We only access your data for the duration required to resolve the request.Service providers acting as processors (if applicable)
In limited cases, trusted third parties may process data on our instructions only (e.g., email delivery, analytics you consented to, security tooling, ticketing). They are contractually required to protect your information and cannot use it for their own purposes. We do not sell your personal information or share it for others’ independent marketing.
Legal, safety, and compliance
We may disclose information when required by applicable Canadian law (e.g., in response to a lawful request) or when we believe it is necessary to protect the rights, property, or safety of PontonLabs, our users, or the public.
International processing safeguards
Our default is to store and process data in Canada. If processing outside Canada is unavoidable, we require contractual and technical safeguards to ensure a comparable level of protection consistent with PIPEDA. Such processing may be subject to the laws of the foreign jurisdiction.
How Long We Retain Your Data (PontonLabs — Canada)
PontonLabs retains personal information only as long as necessary to fulfill the purposes for which it was collected, to meet legal/accounting requirements, and to protect our legitimate interests, in line with PIPEDA. When information is no longer needed, we delete it or de-identify it. If a legal hold applies (e.g., a dispute or investigation), we retain the data until the hold is lifted.
Retention by data type
Comments & moderation data
Comment content: kept until you delete it or ask us to remove it.
Moderation/spam-prevention metadata (e.g., IP, user agent, moderation decisions, hash): typically up to 12 months, unless needed longer for security/abuse prevention.
If you choose “remember me” when commenting, cookies that store your details generally persist for about 1 year (see Cookies section).
Support tickets (email or form submissions)
Ticket content and related metadata are kept for up to 24 months after the last activity to help with follow-ups, quality assurance, and service improvement, unless you request earlier deletion. Where feasible, older tickets may be anonymized instead of deleted.
Registered accounts (user profiles)
Profile data is kept while the account remains active.
If you delete your account or request closure, we delete or de-identify profile data within ~30 days, with residual copies in encrypted backups aging out on a rolling basis (typically 30–90 days).
Security/access logs linked to accounts are kept for up to 12 months, unless needed longer for fraud/abuse investigations.
Purchases, invoicing, and financial records (if applicable)
Retained for at least six (6) years after the end of the tax year to meet Canada Revenue Agency and (where applicable) Revenu Québec record-keeping requirements.
Analytics data (consent-based)
Aggregated/de-identified analytics (e.g., Google Analytics) are typically retained for up to 26 months. You can opt out as described in the Analytics section.
Backups
Encrypted system backups are retained on a rolling schedule (typically 30–90 days) and are automatically purged/overwritten. Data deleted from production will disappear from backups after the backup window elapses.
Your controls
View/Update/Delete: If you have an account, you can view and edit your profile data at any time (except the username).
Erasure requests: You can ask us to delete your comments, tickets, or account data (subject to legal retention obligations).
How to contact us: Email privacy@pontonlabs.com (or your usual PontonLabs support channel) with your request. We may need to verify your identity before acting.
Security Measures (PontonLabs — Canada)
At PontonLabs, we take the protection of your personal information seriously. We apply a combination of technical, organizational, and administrative safeguards to reduce the risk of unauthorized access, disclosure, alteration, or destruction of your data.
Encryption and Secure Transmission
All communication between your browser and our servers is protected using SSL/HTTPS encryption, ensuring that personal information cannot be intercepted or hijacked by unauthorized third parties during transmission.
Sensitive data (such as account credentials) is encrypted at rest and in transit. Passwords are stored using industry-standard one-way hashing and salting techniques.
Access Controls
Access to personal information is limited to authorized PontonLabs staff and trusted service providers on a strict need-to-know basis.
Role-based permissions, authentication safeguards, and secure session management are in place to minimize risk.
Monitoring and Auditing
Systems are monitored for suspicious activity and potential vulnerabilities.
Security reviews, updates, and patches are applied regularly to ensure infrastructure resilience