Last updated: October 2026 · Jurisdiction: Ottawa, ON, Canada (PIPEDA)
What We Collect
CLI Tool — Zero Collection
The Shadow313 CLI collects nothing. All processing is local:
- No telemetry or usage analytics
- No crash reports sent externally
- No API keys or credentials transmitted
- All AI inference runs locally via Ollama
- 313-BIND receipts are stored locally only
- IPFS anchoring is opt-in and uses public data only
Web Properties — Minimal
Our websites (shadow313.dev, shadow313.com) may collect:
- Standard web server access logs (IP, timestamp, path) — retained 30 days
- Contact form submissions (name, email, message) — used only to respond
- No tracking cookies or advertising pixels
- No third-party analytics (no Google Analytics, no Mixpanel)
- No fingerprinting or behavioral tracking
Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Vercel | Web hosting | Access logs only |
| GitHub | Source code hosting | Public repo data |
| IPFS (optional) | 313-BIND anchoring | Public receipt hashes only |
| Ollama | Model registry | Model download only |
Your Rights (PIPEDA)
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:
- Access — Request a copy of any personal information we hold about you
- Correction — Request correction of inaccurate information
- Withdrawal — Withdraw consent for processing at any time
- Complaint — File a complaint with the Office of the Privacy Commissioner of Canada
To exercise these rights, contact: matarmohamad313@duck.com
Data Retention
| Data Type | Retention Period | Deletion Method |
|---|---|---|
| Web server access logs | 30 days | Automatic rotation |
| Contact form submissions | Until resolved + 90 days | Manual deletion on request |
| CLI session data | Local only — your control | Delete ~/.shadow313/sessions/ |
| 313-BIND receipts | Local only — your control | Delete ~/.shadow313/receipts/ |