Privacy Policy

Last updated: August 20, 2026 · Effective for users in Canada, with specific commitments for Ontario residents.

3ENET Media ("FaceOff," "we," "us," or "our") operates the FaceOff contest platform at faceoff.3enet.ca (the "Service"). This policy explains what personal information we collect, why we collect it, how we protect it, and the rights you have over it. It is written to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal private-sector privacy law, which governs how we handle personal information in the course of commercial activity, including in Ontario.

1. Who this applies to

This policy covers anyone who creates a FaceOff account, enters or judges a contest, buys a ticket or donates through the Service, or otherwise interacts with faceoff.3enet.ca. If you are under the age of majority in your province, please review this policy with a parent or guardian before creating an account.

2. Information we collect

• Account information — email address, username, and password (stored as a salted hash, never in plain text).
• Profile information you choose to add — display name, bio, country/city, category interests, and any profile image.
• Date of birth (optional, self-reported) — used only to enforce a contest or event's posted minimum/maximum age rules where the organizer has set one.
• Content you submit — contest entries, chat messages, votes, and any media you upload for a submission or broadcast.
• Order and payment information — for tickets and donations, our payment processor Stripe collects and stores your card details directly; FaceOff itself never sees or stores your full card number. We retain order metadata (amount, status, timestamps) needed for receipts, refunds, and financial recordkeeping.
• Technical information — session and CSRF cookies needed to keep you signed in and to protect your account from cross-site request forgery (see Section 6, "Cookies"), plus standard request metadata (IP address, timestamps) used for rate-limiting and security logging.
• Two-factor authentication data, if you enable it — an encrypted TOTP secret and one-time backup codes.

We do not knowingly collect more personal information than is reasonably needed for the purpose it was collected for, consistent with PIPEDA's data-minimization principle.

3. Why we collect it (our purposes)

• To create and secure your account, and to authenticate you on future visits.
• To run contests and events: publishing entries, tallying votes, enforcing organizer-set age limits, and issuing tickets.
• To process payments and donations, issue receipts, and process refunds through Stripe.
• To communicate with you about your account, orders, contest results, and — only where you haven't opted out — platform updates.
• To detect, investigate, and prevent fraud, abuse, and security incidents (for example, rate-limiting login attempts and logging security-relevant actions in an internal audit trail).
• To comply with legal obligations, including tax and financial recordkeeping requirements.

4. Consent

By creating a FaceOff account you consent to the collection, use, and disclosure of your personal information as described in this policy. You may withdraw consent at any time, subject to legal or contractual restrictions (for example, we can't delete records we're required to keep for financial recordkeeping) — see Section 8, "Your rights," for how. Withdrawing consent for information required to operate your account may mean we can no longer provide the Service to you.

5. Who we share information with

We do not sell your personal information. We share it only where necessary to run the Service:

• Stripe (payment processing) — to process ticket purchases and donations.
• Email delivery — to send account, order, and contest-related notifications.
• Other users, where you've made content public — your username, public profile, and public contest entries are visible to other users and, for public contests, to visitors who aren't signed in.
• Law enforcement or regulators — only where legally required, such as in response to a valid court order.

We do not transfer personal information outside Canada except where a service provider we use (such as Stripe) processes it as part of delivering that service; in that case, the provider is contractually bound to protect it to a comparable standard.

6. Cookies

FaceOff uses two functional cookies, not advertising or tracking cookies:

• A session cookie (HTTP-only) that keeps you signed in.
• A CSRF cookie that protects your account from cross-site request forgery attacks.

Both are strictly necessary for the Service to function and are cleared when you log out.

7. How we protect your information

Passwords are stored as salted hashes, never in plain text. Two-factor authentication is available on every account. Access to personal information within FaceOff is role-restricted, and security-relevant actions are recorded in an internal audit log. No method of storage or transmission is 100% secure, but we take reasonable, industry-standard steps — encryption in transit (HTTPS), hashed credentials, and restricted internal access — to protect your information against loss, misuse, and unauthorized access.

8. Your rights

Under PIPEDA, you have the right to:

• Access the personal information we hold about you. You can download a copy of your account data at any time from your Profile page.
• Correct inaccurate information — update your profile directly, or contact us for account-level fields.
• Withdraw consent / delete your account — you can close your account from your Profile page. We anonymize your identifying information immediately; records we're legally required to retain (such as completed orders, for financial recordkeeping) are kept in de-identified form.
• Complain — if you believe we've mishandled your personal information, you may contact us first (Section 10), and you always retain the right to file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca).

9. How long we keep information

We keep account and profile information for as long as your account is active. Financial records (orders, donations, payout ledger entries) are retained for at least 7 years to meet Canadian tax and financial recordkeeping obligations, even after an account is closed. Security audit logs are retained for a limited period for fraud and abuse investigation.

10. Contact us

Questions, access requests, or privacy complaints:

3ENET Media
Ontario, Canada
Email: admin (at) 3enet.ca

This policy may be updated from time to time; material changes will be posted on this page with a new "Last updated" date.