OMVIONDraft pending legal review. This page describes OMVION’s actual data handling accurately, but it has not been reviewed by a lawyer. It should be checked by a BC-called lawyer with privacy experience before the site goes live.
Privacy policy
Last updated 9 September 2026OMVION is a sole proprietorship operated by Axton McGoran in British Columbia, Canada. This policy explains what the site collects, why, how long it is kept, and what you can ask us to do about it. It is deliberately specific: everything below describes what the site actually does.
Who is responsible
The controller is Axton McGoran, trading as OMVION, British Columbia, Canada. For any question about this policy or about data we hold, write to studios@omvion.org.
What we collect, and only when you send it
The site has no accounts, no logins and no payments. The only personal information we collect is what you type into the enquiry form and choose to send:
| Field | Why we ask |
|---|---|
| Studio | To know which company is asking. |
| Game | To identify the title the enquiry concerns. |
| Engine | To judge whether the work is feasible. |
| Revenue band | To tell you which pricing band applies. |
| Your name and role | To reply to a person rather than a company. |
| To reply. This is the only field we need to answer you. | |
| Phone | To reach you if email fails. You may give a number you do not mind sharing. |
| Notes | Optional. Whatever you choose to tell us. |
We do not ask for anything else and we do not enrich, append to or buy data about you.
Technical data recorded with each submission
Every field above is stored, in full, exactly as you typed it. Stored alongside it, so that we can tell a genuine enquiry from an abusive one:
| What | Why |
|---|---|
| Your IP address | To rate-limit submissions and to identify abuse. |
| Country and city, as Cloudflare reports them | Approximate, derived from the IP. Tells us which time zone to reply in. |
| Browser user agent | To recognise automated submissions. |
| Referring page | To know which page the enquiry came from. |
| Timestamp | To order and audit enquiries. |
A short-lived counter keyed to your IP address is also kept for ten minutes to enforce the rate limit. It expires on its own.
Why we are allowed to process it
Under the UK and EU GDPR, where those apply to you: our lawful basis is legitimate interests (Article 6(1)(f)) — responding to a business enquiry you initiated. Where a request is a step toward an agreement, pre-contractual steps (Article 6(1)(b)) also applies. Under Canadian law (PIPEDA and BC PIPA) your submission of the form is the consent, and the purpose is the one stated here.
We do not collect special category data and ask that you do not put any in the notes field.
What happens to a submission
Pressing the button does two things, and you should know about both.
- It opens a draft in your own mail client, addressed to studios@omvion.org and filled in with what you typed. Nothing is sent until you press send in your own program. That message then sits in your sent folder as your own record of it.
- It files a copy with us at the same time. The form posts your submission to our endpoint, where it is written to Cloudflare Workers KV, a storage service run by Cloudflare, Inc. acting as our processor. This happens whether or not you go on to send the draft, and it is how we make sure no enquiry is lost to a mail client that failed to open.
If you do not want the second copy filed, do not use the form: write to studios@omvion.org directly instead.
Stored enquiries are read only by Axton McGoran. Mail you send lands in an OMVION mailbox hosted by Google Workspace, also a processor. Nobody else receives either copy. We do not sell personal information, we do not share it with advertisers, and we do not add you to a mailing list.
The site loads its typefaces from Google Fonts, which means your browser makes a request to Google and Google receives your IP address. If you would rather that did not happen, a content blocker will prevent it; the site remains readable.
Where it goes
OMVION is in Canada. Google Workspace and Cloudflare both store data on servers that may be in the United States or elsewhere. For transfers out of the UK or EEA we rely on the European Commission’s adequacy decision for Canada in respect of PIPEDA-covered activity, and on our processor’s Standard Contractual Clauses. You can ask us for details of either.
How long we keep it
- Enquiries that do not become work: deleted within 24 months.
- Enquiries that become an engagement: kept for the life of the engagement and for 7 years afterwards, which is the Canadian records-retention period for business records.
- The stored copy of a submission, including the technical data above: the same periods as the two lines above, whichever applies.
- Rate-limiting counters: 10 minutes, then automatically discarded.
Ask us to delete an enquiry sooner and we will, unless we are required to keep it.
Cookies and analytics
This site sets no cookies. There is no advertising pixel, no cross-site tracking and no script that builds a profile of you. That is why there is no cookie banner: there is nothing stored on your device to consent to.
The site does run Cloudflare Web Analytics, which counts page views and gives us aggregate figures such as which pages are read and roughly where readers are. It is cookieless and it does not fingerprint your device, does not track you between sites, and does not build a profile. What Cloudflare receives is the page URL, the referrer, your approximate location derived from your IP address, your browser and device type, and page timing. Cloudflare acts as our processor and does not use it to build a profile of you. Their own account of how it works is at cloudflare.com/web-analytics. A content blocker will stop it and the site works exactly the same without it.
The site stores one value in your browser’s sessionStorage: your scroll
position, so a refresh returns you to the same place. It never leaves your device, we cannot read
it, and it is discarded when you close the tab.
Your rights
You can ask us to give you a copy of what we hold, correct it, delete it, restrict what we do with it, or object to our processing. Where the UK or EU GDPR applies you also have the right to data portability and the right not to be subject to solely automated decisions — we make none. Write to studios@omvion.org and we will answer within 30 days.
If you think we have got this wrong you can complain to a supervisory authority: the Office of the Privacy Commissioner of Canada, the BC Information and Privacy Commissioner, the UK ICO, or your own EU authority.
Security
Form submissions travel over TLS, both to your mail client and to our storage endpoint. The mailbox is protected by two-factor authentication. We publish a security contact at /.well-known/security.txt and will acknowledge a report within five working days.
Changes
If this policy changes materially we will change the date at the top. We do not have your contact details unless you have written to us, so we cannot notify you directly.