Privacy

What we collect and why

Spacestation Labs Ltd is based in Toronto and handles personal information under Canada's PIPEDA. This page says what actually happens on this site. Last updated 27 August 2026.

The short version

We collect what you type into our forms, and anonymous statistics about how people move through the site. We do not sell any of it, we do not run ad retargeting, and we do not build profiles on you.

If you want your information gone, email us and it is gone. No process, no forms.

What you give us

The application form collects your name, work email, company, website, and your answers about the business. The careers form collects your Reddit handle, email, a link to a post, and the subreddits you care about. The email capture collects an email address.

We use all of it for one thing: deciding whether to work together, and talking to you about it. Paul reads applications himself. Nothing is passed to a third party for their own purposes.

What we collect automatically

Google Analytics 4 tells us how many people visit, which pages they read, and which site or AI assistant sent them. Microsoft Clarity records anonymised sessions and heatmaps so we can see where a page confuses people. Both use cookies.

Neither is set up for advertising. Google Signals and ad personalisation are switched off, so the data cannot follow you to an ad network.

Our host, Cloudflare, keeps short-lived server logs including IP addresses, which is ordinary infrastructure security. The forms are protected by Cloudflare Turnstile, which checks that you are not a bot without the puzzle-solving and without tracking you across sites.

Cookies and your consent

Under Canadian law your consent to analytics is implied once it is disclosed, which is what this page does. So you will not see a cookie banner here. We think a banner everyone dismisses without reading is theatre, not consent.

If you are visiting from the EEA, the UK or Switzerland, your own law applies to you regardless of where we sit. Analytics storage is denied by default for those regions, so the tools fall back to cookieless measurement automatically. Nothing is stored on your device.

Who processes it

Google for analytics, Microsoft for Clarity, Cloudflare for hosting, storage and bot protection, and Resend for email we send you. Each one is a processor acting on our instructions, not a buyer.

Some of them store data outside Canada, mainly in the United States. Sending your details through this site means accepting that, and it also means the laws of those countries can reach that data.

How long we keep it

Applications and careers submissions stay for two years, because a bad fit today is often a good fit later. Analytics data expires on Google's rolling window, currently fourteen months. Server logs are measured in days.

Ask us to delete something sooner and we will.

What you can ask for

PIPEDA gives you the right to see the personal information we hold about you, to have mistakes in it corrected, and to withdraw consent. If you are in Quebec, Law 25 adds the right to have it ported to you in a portable format.

Email us and we will answer within thirty days. We will not ask you why.

Opting out of analytics

Google publishes a browser add-on that blocks Analytics on every site you visit. Any content blocker will do the same for both Analytics and Clarity. Or email us and we will exclude you by hand.

Changes and contact

If this page changes in a way that matters, the date at the top changes with it. We will not quietly broaden what we collect and leave the date alone.

Questions, requests, or complaints: team@spacestationlabs.ai. If we handle it badly you can escalate to the Office of the Privacy Commissioner of Canada.