Privacy Policy

1. Who we are and what this covers

Sable Servers Ltd. (“Sable Servers”, “we”, “us”) is a company incorporated in Nova Scotia, Canada. We provide game servers, virtual servers, web hosting, object storage, managed servers and business IT services.

This policy covers personal information we handle through:

• our websites, sableservers.ca and sableservers.com;
• our Unified Panel and store at unified.sableservers.com;
• our services, support, quotes and email; and
• our Discord community, if you join it.

We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). For people in Quebec, we also follow Quebec's private-sector privacy law as amended by Law 25. For US residents, we honour state privacy laws where they apply to us.

Data you host with us. Files, databases, websites, email and other content you store on our servers belong to you. If that content includes personal information about your own customers, staff or users, you decide how it is collected and used, and you are responsible for it under the laws that apply to you. For that data, we act as your service provider. We only access it to run the service, to give support you ask for, to deal with security or abuse, or when the law requires it. Our Terms of Service cover this in more detail.

2. What we collect

From you:

• Account details: name, email, phone number, company and address. If you use “Sign in with Microsoft”, we receive your name, email and a Microsoft account identifier.
• Billing records: invoices, payments, account credit and Interac e-Transfer details. Card payments go through Stripe. We don't store full card numbers; we see the card type, last four digits and expiry.
• Service details: the services you order and how you configure them.
• Support: tickets, emails and the information you include in them.
• Contact and quote forms: your name, email, and anything you write. Each form creates a support ticket in our panel.
• Newsletter: your email address and when you confirmed your subscription.

Automatically:

• Technical logs: IP addresses, browser type, times and pages requested. We use these for security and abuse prevention.
• Service usage: resource use such as CPU, memory and network traffic, for billing, capacity and abuse prevention.
• Website analytics: pages viewed, the referring page and campaign (UTM) tags. Section 5 explains each tool.

3. How we use it

• Provide your services: set up and run your servers, hosting, storage and panel account.
• Billing: charge you, send invoices and receipts, handle refunds and keep financial records.
• Security and abuse prevention: protect our network and customers, detect fraud, and enforce our Acceptable Use Policy.
• Support: answer tickets, quotes and questions.
• Service emails: tell you about outages, maintenance, billing and security.
• Marketing: send newsletters and announcements, only with your consent.
• Improve our site: learn which pages help people and which campaigns work.
• Legal duties: meet tax and record-keeping rules and respond to lawful requests.

We don't use your information for a new purpose without telling you and, where the law requires it, asking for your consent.

4. Consent and your choices

By opening an account or using our services, you consent to the uses in section 3 that are needed to provide them. You can withdraw consent to optional uses at any time. If you withdraw consent to something a service needs to work, such as billing details, we may not be able to keep providing that service.

• Cookie banner: “Allow” turns on our page-view counter, the Google Ads tag, the Meta Pixel and the messages our servers send to Meta (see below), on this website and in our store and customer panel at unified.sableservers.com. If you answered on an earlier banner that didn’t name all of these, we ask you once more. “No thanks”, or no answer, keeps them off. Your answer is shared between this website and the store/panel, so you’re asked once. Change it any time with “Cookie settings” at the bottom of any page, or in your account under Profile → Privacy. Your answer is kept for 12 months, then we ask again. sableservers.ca and sableservers.com are separate websites, so if you use both you may be asked on each.
• Do Not Track and Global Privacy Control: if your browser sends either signal, we treat it as “No thanks” on this website and in the store/panel. Our page counter, the Google Ads tag, the Meta Pixel and the messages from our servers stay off and we don’t ask.
• Newsletter: sign-up is double opt-in. You enter your email, then confirm through the link we send. No confirmation, no newsletter.
• Unsubscribe: every marketing email has an unsubscribe link. Canada's anti-spam law (CASL) allows up to 10 business days; we act sooner. Customers can also switch marketing off in the panel under Settings > Notifications > Marketing & announcements.
• Service emails: we still send these to customers after you unsubscribe from marketing. They aren't marketing.

5. Cookies, local storage and analytics

We use four analytics and measurement tools:

• Our own page-view tracker, run in our panel. It records the page path, referring page and UTM tags, and keeps a random visitor ID on your device. It honours Do Not Track and is off if you click “No thanks”. When you follow a link from this site to our panel, we pass the same random visitor ID along so a sign-up can be matched to the visit that brought you. We use it only to see which pages and campaigns bring new customers.
• Cloudflare Web Analytics, which sets no cookies and doesn't identify you. It counts visits and page performance.
• The Meta (Facebook) Pixel. On this website and on the store and checkout pages of our client panel (unified.sableservers.com/store and /cart), we use the Meta Pixel, a tool from Meta Platforms, Inc., if you allow it. It tells us whether our ads on Facebook and Instagram lead to visits, sign-ups and orders, so we can measure and improve them.
  • It’s off unless you allow it. It only runs after you click “Allow” on our cookie banner (on this website or in the store). If you click “No thanks”, or don’t answer, it doesn’t load and nothing is sent to Meta.
  • One answer for our sites. Your answer on this website also applies in our store and customer panel. To carry it there we keep it in a cookie on sableservers.com and, from sableservers.ca, add a short code (sc) to the links into the panel, which the panel removes from the address straight away.
  • Do Not Track and Global Privacy Control are respected. If your browser sends either signal, the pixel stays off and we don’t ask.
  • What Meta receives when it runs: the page you visited and the page you came from; your IP address and browser details; a cookie ID (_fbp), and the ad you clicked if you came from one (_fbc); and these events: page views, starting checkout, completing an order (the order value in Canadian dollars and an order reference so it isn’t counted twice), requesting a quote and creating an account. With your OK, our websites and store also tell Meta directly from our servers when you view a page, create an account, ask for a quote, start a checkout or place an order. A page view carries only the details the pixel sends. The other messages also carry your email address, phone number, name, city, province, postal code and country, which are scrambled (hashed with SHA-256) before they leave our servers so Meta can only match them to an account it already knows. We never send your password, payment details, street address or the content of your messages. We don’t do this if you said “No thanks”, turned it off, or your browser sends a Global Privacy Control or Do Not Track signal; turning it off also cancels anything not yet sent. If you’re logged in to Facebook or Instagram in the same browser, Meta may link this to your Meta account under its own policy.
  • Why, and on what basis: to measure our advertising. We rely on your consent, and you can withdraw it at any time.
  • Never on your account pages. The pixel never runs on your dashboard, services, billing, support or account pages in the panel.
  • How to change your mind: click “Cookie settings” at the bottom of this website or of the store pages, or go to Profile → Privacy in your account. Turning it off stops it right away and deletes the Meta cookies we can reach. You can also clear cookies in your browser.
  • How long: your answer is kept for 12 months, then we ask again. Meta’s _fbp cookie lasts up to 90 days. We keep our own copy of these server-side messages for 30 days. Meta keeps the data it receives under its own retention rules; see the Meta Privacy Policy and how Meta uses information from Business Tools.
  • Meta may process this information in the United States and other countries (see section 7).
• The Google Ads tag. On this website and on the store and checkout pages of our client panel (unified.sableservers.com/store and /cart), we use the Google tag (gtag.js), a tool from Google LLC, if you allow it. On the page shown after you pay, it tells Google the order value in Canadian dollars and an order reference so it isn’t counted twice. It tells us whether our ads on Google lead to visits and orders, so we can measure and improve them.
  • It’s off unless you allow it. It only loads after you click “Allow” on our cookie banner. If you click “No thanks”, don’t answer, or your browser sends a Do Not Track or Global Privacy Control signal, it doesn’t load and nothing is sent to Google.
  • What Google receives when it runs: the page you visited and the page you came from; your IP address and browser details; a cookie ID (_gcl_au), and the Google ad you clicked if you came from one (gclid, kept in _gcl_aw). When you follow a link from this website to our store, a short code (_gl) in the link carries the same ad click so an order can be matched to it. If you’re signed in to Google in the same browser, Google may link this to your Google account under its own policy.
  • Why, and on what basis: to measure our advertising. We rely on your consent, and you can withdraw it at any time with “Cookie settings”; turning it off stops it right away and deletes the Google cookies we can reach.
  • How long: Google’s _gcl_* cookies last up to 90 days. Google keeps the data it receives under its own retention rules; see Google’s Privacy Policy and how Google uses information from sites that use its services. Google may process this information in the United States and other countries (see section 7).

The links from this website into the panel can carry two short codes, sv (the visitor ID, only after “Allow”) and sc (your cookie answer). The panel stores them as described above and removes them from the address straight away.

You can also delete cookies and site data in your browser settings at any time.

6. Sharing and service providers

We don't sell personal information. We share it only with the providers below, so they can do work for us, and only as much as they need.

Each provider is bound by its contract with us and its own privacy policy. Discord and Meta also have their own relationship with you if you use their services.

Other sharing. We may disclose personal information:

• when the law requires it, such as a court order, warrant or tax demand. We check each request and disclose only what is required. Where the law allows, we tell you first;
• to protect people, our network or our customers from fraud, abuse or harm; or
• to a buyer or successor if our business is sold or merged, under the same protections as this policy.

Some US state laws treat ad-measurement tools like the Meta Pixel and the Google Ads tag as “sharing” or “targeted advertising”. To opt out, click “No thanks” on the cookie banner or in “Cookie settings”. We also treat a Global Privacy Control signal as an opt-out, on this website and in the store/panel.

7. Where your data is stored

We store customer data in Canada: on our servers in Halifax, Nova Scotia, and on leased servers in Montreal, Quebec. Object storage is in Toronto, Ontario.

Some providers in section 6, such as Stripe, Microsoft, Cloudflare, Meta and Discord, may process personal information in the United States or other countries. While it is there, it is subject to that country's laws. Courts, police and national security agencies there may be able to access it.

Before sending personal information about Quebec residents outside Quebec, we assess whether it will be adequately protected, as Law 25 requires.

8. How long we keep it

• Account details: while your account is open.
• Financial records: 7 years. Canada Revenue Agency requires 6.
• Support tickets and form submissions: while your account is open, then 2 years.
• Server logs: about 30 days.
• Service data after termination: kept for 7 days so you can get a copy, then removed from live systems. Backups age out within about 30 days.
• Newsletter: until you unsubscribe. We keep a record of your consent and unsubscribe for as long as we need to prove it under CASL.

When we no longer need personal information, we delete it or make it anonymous.

9. Security

• Our sites and panel use encryption in transit (HTTPS/TLS).
• We store passwords hashed, never in plain text.
• Two-factor authentication (2FA) is available on every account, with trusted devices.
• Only staff who need access to do their job have it.
• We keep our systems updated and watch for abuse.

No system is perfectly secure. Use a strong, unique password, turn on 2FA, and keep your own copies of important data.

10. If there's a breach

If a breach of security safeguards involves personal information we control, we will:

• act quickly to contain it and reduce harm;
• assess whether it creates a real risk of significant harm to anyone, as PIPEDA requires;
• if it does, report it to the Office of the Privacy Commissioner of Canada and notify affected people as soon as we can. We may also tell other organizations that can help reduce the harm;
• for Quebec residents, report incidents that present a risk of serious injury to the Commission d'accès à l'information and notify the people affected; and
• keep a record of every breach, whether or not we report it, for at least 24 months.

If a breach involves data you host with us as a business customer, we will tell you promptly so you can meet your own obligations.

11. Your rights

You can ask us to:

• Access the personal information we hold about you and learn how we use and share it.
• Correct information that is wrong or incomplete.
• Withdraw consent, subject to section 4.
• Delete your information where the law allows. We must keep some records, such as financial records, for set periods.
• Portability: if you live in Quebec, get your information in a structured, commonly used format.

US residents. If your state's privacy law applies to us, you may have rights to know, access, correct, delete and opt out. We will honour those requests where the law applies.

How to ask. Email privacy@sableservers.com or open a ticket in the panel. Tell us what you need. We reply within 30 days. If we need more time, we tell you why and how long, within the limits the law allows. Requests are free.

We verify your identity. Before we release or change information, we check that you are who you say you are, usually through your account email or the panel. We may ask for more if needed. An authorized agent must show they act for you.

If we refuse a request, we explain why in writing and tell you how to challenge it.

Complaints. Please contact our Privacy Officer first so we can try to fix it. You can also complain to:

• the Office of the Privacy Commissioner of Canada (priv.gc.ca); or
• if you live in Quebec, the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

12. Children

Our services are for people 18 or older, or the age of majority where they live. Someone under 18 may use them only with a parent or guardian's consent, and the parent or guardian accepts our terms for them.

We don't knowingly collect personal information from children under 13. If you think a child under 13 has given us information, email privacy@sableservers.com and we will delete it.

13. Changes to this policy

We give 30 days' notice of material changes by email to customers and on this page. The effective date at the top shows the current version.

What changed on October 13, 2026:

• We use the Google Ads tag on this website to measure our Google ads. It runs only if you allow it. The cookie banner now names it, and we ask once more if you answered before.

What changed on October 9, 2026:

• With your OK, our websites and store also tell Meta from our servers when you view a page, so ad measurement still works when an ad blocker stops the pixel. The cookie banner now says so, and we ask once more if you answered on the earlier banner.

What changed on October 5, 2026:

• Our legal name is corrected to Sable Servers Ltd.
• The provider list is updated to match the systems we use, including Microsoft 365, Cloudflare Web Analytics, the Meta Pixel and Discord.
• The new cookie banner and your choices are explained, with a table of cookies and local storage.
• One cookie answer now covers this website and our store and customer panel; Global Privacy Control is honoured everywhere.
• With your OK, our store can also report sign-ups, quote requests, checkouts and orders to Meta directly from our servers, with your contact details hashed first.
• Newsletter sign-up now uses double opt-in.
• We name our Privacy Officer.
• Where data is stored now includes Halifax, and retention periods are updated.

14. Contact our Privacy Officer

Our Privacy Officer is responsible for how we handle personal information.

Envy DeGrace, Chief Human Resources Officer, Privacy Officer
Email: privacy@sableservers.com
Mail: Sable Servers Ltd., 215 Honeysuckle Road, Middle Sackville, NS B4E 3K7, Canada

For anything else, email hello@sableservers.com or contact us.