Privacy Policy

How Midknight Entertainment Ltd handles information in its mobile applications.

Effective date: 11 August 2026 · Last updated: 8 September 2026

This policy applies to the mobile applications published by Midknight Entertainment Ltd that link to it from inside the app (“we”, “us”, “our”). It describes what our apps collect, what they deliberately do not collect, why, and what you can ask us to do about it.

It is written to be true of every app it covers. Where a particular app does something only some of those apps do, for example sending a photograph to an AI feature, the relevant section says so.

1. Who we are, and the law that applies

Midknight Entertainment Ltd is a company incorporated in the Province of Nova Scotia, Canada.

The law that governs how we handle personal information is Canada's federal Personal Information Protection and Electronic Documents Act (PIPEDA), which applies to personal information that a private-sector organization collects, uses or discloses in the course of commercial activities. Nova Scotia has no private-sector privacy statute of general application, so PIPEDA is the law that applies to us.

PIPEDA works through ten fair information principles, and the first of them is accountability: we are responsible for the personal information under our control, including information we hand to someone else to process for us, and one person in the company is designated as accountable for our compliance: our Privacy Officer. You can reach them by emailing support@midknightltd.com, or by post at the address in section 20.

For anything to do with this policy, your information, or your rights, use the same address.

2. The short version

• No accounts with us. Our apps have no sign-up and no login of ours. We do not ask for your name, email address, phone number or date of birth. One exception, and it is somebody else's account, not ours: if you turn on Flotsam's eBay posting you sign in to your own eBay account, on eBay's own page. We never see that password. See section 19.
• No advertising in most of our apps, and no tracking of you by us in any of them. Four apps show advertisements from Google AdMob. In The Hard Part, Flotsam and Cadge they appear in the free tier. In Duskroot the only advertisements are ones you choose to watch in exchange for something in the game, and none ever plays on its own. Section 17 explains exactly what that involves. Every other app shows no advertisements, includes no advertising software, and does not use the advertising identifier on your phone. The Hard Part and Flotsam also include Google Analytics for Firebase, which counts how the app is used so we can see whether people come back. It is described in section 17. Cadge and Duskroot include no analytics software, and no other app of ours includes analytics software, and none of our apps tracks you across other companies' apps or websites.
• Nothing is sold. We do not sell personal information, share it with data brokers, or share it for advertising.
• AI features send content to a server. In apps with an AI feature, what you type is sent to our server, and in some apps a photograph you choose goes with it. Our server passes that to an AI provider so a response can be generated. The provider is either Cloudflare Workers AI or Anthropic, depending on the app and the tier (section 4). We do not store that content, with one exception: a response you choose to report (section 6).
• Two anonymous identifiers. A random number generated on your device the first time you open the app (it counts free usage, is not linked to you, and is replaced if you reinstall), and, in apps with purchases, an anonymous identifier created by our subscription-management provider, sent with AI requests so our server can check whether a subscription is active (section 7).
• Flotsam can post a listing to your eBay account, if you ask it to. That feature is off until you connect it. When you do, we hold the eBay token that lets us post on your behalf, and posting sends the listing and its photographs to eBay to be published publicly, which is the point of it. Photographs are stripped of their hidden location data before they leave your phone. Section 19.

This summary is not the whole policy. The sections below are.

3. What we collect, and why

More about the anonymous identifier

It is a randomly generated value, created on your device when you first open the app and stored in the app's own storage. It contains no hardware identifier, no advertising identifier, no serial number, and nothing derived from you, your device or your accounts. We cannot use it to work out who you are, and it is not shared with anyone for advertising.

If you delete the app, the identifier goes with it. Reinstalling creates a brand new one, and anything recorded against the old one can no longer be connected to you or to your new install.

4. AI features in detail

Some of our apps generate a response using a large language model. Here is exactly what happens.

1. The app sends what you entered (text, and in some apps a photograph you chose) to our own server, over an encrypted connection, together with the anonymous device identifier and, in apps with purchases, the anonymous subscription identifier (section 7).
2. Our server checks the usage limit, then passes your content to an AI provider, which generates the response. Two providers are behind these features: Cloudflare Workers AI serves The Hard Part's free tier; Anthropic serves everything else: The Hard Part's Pro tier, and the Pro features in Groat and Flotsam.
3. The response is passed back to your app.

We do not store your content, with one exception: a response you choose to report, which we keep for 90 days (section 6). It is held in memory only for as long as it takes to produce your response, and is not written to any database or file by us. Our logs record that a request happened, not what was in it.

Each AI provider is a separate organization and handles your content under its own terms. Providers of this kind commonly retain content for a short period so they can monitor for misuse and meet their legal obligations. We cannot promise you that either provider keeps nothing, because that depends on the contract in force and on the provider's own practices, which can change. What we can tell you is this: we do not use your content to train any model, and we do not sell it or pass it to anyone else. What a provider may do with it is governed by the terms we hold with them. Please treat anything you type into an AI feature as leaving your device.

Because that content leaves your device and goes to another organization, we treat your decision to submit it as the point at which you give us your consent to do so. If you do not want something to leave your device, do not put it into an AI feature.

Please do not enter other people's information

Do not type in, or photograph, information that identifies someone else: names, contact details, health or employment details, or anything confidential. Do not enter sensitive information about yourself that you would not want to leave your device. A photograph carries whatever is in it: faces, documents on a desk, and screens. It can also carry hidden information in the image file itself, such as where and when it was taken. We remove that hidden information, including location, from every photograph before it leaves your device. We cannot remove what is visible within the photograph itself, so point your camera at what you mean to submit and nothing else.

5. Voice input

Where an app offers speech input, speech recognition is performed by your device, using the recognition built into its operating system. Audio is not sent to us, and we do not record or store audio. Only the text produced by the recognition is used, and it is then treated exactly like text you typed.

Your device's own speech recognition is provided by Apple or Google. Depending on your device, your settings and the language you use, that recognition may happen entirely on the device or may involve their servers, under their privacy policies, not ours.

The microphone permission is requested only when you choose to use a voice feature, and you can withdraw it at any time in your device settings.

6. Content you report to us

Apps that show AI-generated content include a way to report a response you think is offensive, harmful or wrong. If you use it, we store the reason you selected, the text you are reporting, limited technical context, and the salted hash of the anonymous identifier. None of that identifies you by name.

We store this deliberately, because we cannot review or act on a report we have not kept. The purposes are the ones identified in section 10: reviewing and acting on the report, spotting repeated problems, improving the safeguards around our AI features, meeting the app stores' requirements for apps that show AI-generated content, and restricting use by someone who is deliberately misusing our AI features. You give us your consent to those purposes by choosing to send the report; if you do not send one, nothing is stored. Reports are used for those purposes and nothing else.

Reports are deleted automatically 90 days after they are stored. See section 12.

Please do not include personal information in a report.

7. Purchases and subscriptions

All purchases and subscriptions are sold and processed by Apple (App Store) or Google (Google Play), depending on where you downloaded the app. They are the merchant.

• We never receive or store card details, bank details or billing addresses. Payment happens entirely inside the store's own system.
• We use RevenueCat to tell our apps whether a subscription is active. It receives purchase state from the stores, associated with an anonymous identifier it generates: not your name, and not an account you created with us.
• In apps with purchases, the app sends that anonymous identifier to our server with each AI request, so our server can check with the provider whether your subscription is active. Our server stores only the answer: a yes/no flag held against a salted hash of the identifier, for up to 24 hours.
• That is what makes “restore purchases” work when you reinstall an app or use another device signed in to the same store account.
• Apple and Google handle your payment information under their own privacy policies, which we do not control.

8. Information kept on your device

Most of what our apps hold never leaves your device: your history, your saved items, your settings and preferences, and the anonymous identifier. It is stored in the app's own private storage.

You can clear it from within the app where the app offers that, and deleting the app removes all of it. Note that we cannot delete it for you remotely, because we have no way to reach it.

Where an app offers reminders, most of those reminders are scheduled by your device, and for those we collect nothing.

Two apps are different: Cadge and Quarterday. They send push notifications through OneSignal, which means OneSignal holds a push token for your device, along with your device type and operating system version. Both apps also send OneSignal a small set of labels so a message can be aimed at the right group of people. Cadge sends your pet's bond level, its dominant trait, whether you subscribe, and the platform. Quarterday sends your home type, your heating type, your winter profile, whether you subscribe, and the platform. Every one of those is a fixed category worked out from what the app already knows. None of it is text you typed, and your pet's name is deliberately excluded. You can turn notifications off in your device settings at any time, and no app of ours sends marketing messages by email or text.

9. What we do not collect or do

Stated plainly, because it is easier to check a specific claim than a vague one. One qualification applies to this whole list: in The Hard Part and Flotsam advertising and analytics work as section 17 describes, and in Cadge and Duskroot advertising does. Where that section says otherwise, it governs. In every other app, every statement below holds without exception:

• No user accounts with us, and no name, email address, password, phone number or postal address. Flotsam's optional eBay posting is the one place an account is involved, and it is your eBay account, signed in on eBay's own page: we hold the token it produces, never the password. Section 19 sets out what that means.
• No advertising, no advertising software, and no advertising identifier (no IDFA on iOS, no Advertising ID on Android).
• No attribution software, no crash-reporting service, and no behavioural profiling. No analytics software either, except in the two apps named in section 17, which include Google Analytics for Firebase.
• No tracking of you across other apps or websites, and no combining of your information with information from other companies.
• No sale or sharing of personal information for advertising, and no data brokers.
• No location tracking, no access to your contacts, calendar, messages, health or fitness data.
• No recording of the content of your requests or of the AI responses in our logs.
• No automated decision-making that produces a legal or similarly significant effect on you.
• No marketing email or text messages. We send no marketing or promotional email and no text messages, and we could not if we wanted to, because we hold no email address and no phone number for you. Cadge and Quarterday can send push notifications, and the labels behind those are set out in section 8. Canada's Anti-Spam Legislation (CASL) governs commercial electronic messages sent to people in Canada; because we send none, its consent, identification and unsubscribe requirements do not currently arise for us. If that ever changes, this policy will change first.

About IP addresses. Our own application code does not read or record your IP address. However, an IP address is a necessary part of any internet connection, so our hosting provider processes it in order to route your request and to protect the service from attack. It does this as a service provider acting for us, under its own security arrangements, and we do not use it to identify or track you.

10. Consent, and the purposes we identify

PIPEDA does not offer a menu of legal bases to choose between. It requires two things together: that we identify the purposes we are collecting personal information for, at or before the time we collect it, and that we have your meaningful consent for those purposes, meaning consent given by someone who can reasonably be expected to understand what is being collected, why, and what follows from it.

Consent can be express or implied. PIPEDA expects express consent where information is sensitive, where the handling would fall outside what you would reasonably expect, or where it creates a meaningful risk of significant harm. Here is every purpose we have, and how consent works for each.

Withdrawing consent

You can withdraw your consent at any time, subject to legal and contractual restrictions and on reasonable notice. In practice, because we hold no account for you, withdrawal is immediate and in your hands: turn off a device permission in your settings, stop using a feature, or delete the app. The consequence of withdrawing is simply that the feature concerned stops working. There is no other effect, and nothing done before you withdrew is undone by it.

Where the ten principles are addressed

PIPEDA's fair information principles are set out in Schedule 1 of the Act. For anyone checking this policy against them:

• Accountability: section 1, section 11, section 13.
• Identifying purposes: section 3 and this section.
• Consent: this section.
• Limiting collection: section 3 and section 9.
• Limiting use, disclosure and retention: section 11 and section 12.
• Accuracy: section 15.
• Safeguards: section 14.
• Openness: this policy as a whole, published at a public address and linked from inside every app it covers.
• Individual access: section 15.
• Challenging compliance: section 15.

Much of what we handle is unlikely to identify you at all. We still treat the anonymous identifier carefully, as though it were personal information, because that is the safer assumption.

11. Who else is involved

We use a small number of other organizations to run our apps. We share only what each one needs:

• Two AI model providers: Cloudflare Workers AI, which serves The Hard Part's free tier, and Anthropic, which serves every other AI feature. Each receives the content you submit to an AI feature so it can generate the response, and handles it under its own terms.
• A cloud infrastructure provider: hosts our server and its logs, and necessarily handles the network traffic between your device and us.
• A subscription-management provider: receives purchase state from the app stores, associated with an anonymous identifier, so entitlements can be checked and restored.
• Apple and Google: distribute our apps and process all payments, under their own privacy policies.
• OneSignal, in Cadge and Quarterday only, delivers the push notifications described in section 8. It receives a push token for your device, your device type and operating system version, and the category labels listed there, and handles them under its own privacy policy.
• RevenueCat tells our apps whether a subscription is active. It receives purchase state from Apple and Google, associated with an anonymous identifier it generates, not your name and not an account you created with us. It never receives payment details. See section 7.
• Google AdMob, in The Hard Part, Flotsam, Cadge and Duskroot only, delivers the advertisements described in section 17 and handles the data described there under Google's own privacy policy.
• Google Analytics for Firebase, in The Hard Part and Flotsam only, counts how the app is used so we can see whether people come back. What it records is listed in section 17, and Google handles it under its own privacy policy. It stays switched off until you have answered the consent prompt.
• eBay, in Flotsam only, and only once you connect it. It receives the listing you asked to post and its photographs, and it publishes them. It is also the source of the token we hold for you, and it tells us if you close your eBay account so we can delete that token. eBay handles everything it receives under its own privacy policy, as the operator of the marketplace you are selling on, not as a provider processing information for us.
• Professional advisers and authorities: only where we are legally required to disclose something, or need advice about a legal claim.

Handing personal information to one of these organizations to process for us is a transfer for processing, not a disclosure to a new owner of it. Under PIPEDA's accountability principle the information stays our responsibility while they hold it, and we are answerable for what happens to it.

We do not sell personal information, and we do not share it for advertising or marketing by anyone.

We will tell you which providers we currently use if you ask by email.

12. How long we keep things

Deleting a report or a usage counter is not something we do by hand when we remember to. It happens on a schedule, without anyone deciding to run it.

13. Sending information outside Canada

Some of the organizations we rely on, in particular the AI provider and our hosting provider, operate internationally. Processing takes place in the United States and in other countries where our service providers operate. eBay is a United States company, so a listing you post through Flotsam goes there, and the paragraph below about the laws of another country applies to it.

PIPEDA does not forbid sending information to other countries. Unlike some other privacy laws, it has no list of approved countries and no standard transfer contract. Its rule is the accountability principle: we stay responsible for your information after we hand it to a provider, wherever that provider processes it, and we must use contracts or other measures to give it a level of protection comparable to the protection it has with us. Sending it somewhere else does not hand off the responsibility for it.

Two practical consequences follow, and you should know both:

• We have to satisfy ourselves that each provider protects your information properly, and we remain answerable (to you, and to the Privacy Commissioner of Canada) if it does not.
• While information is in another country it is subject to the laws of that country, and may be accessible to its courts, law enforcement agencies and national security authorities. No contract we sign can change that, and we are not going to pretend otherwise.

You can ask us which providers process information outside Canada, and what we have in place with them, by emailing [email protected].

14. Security, and what we do if there is a breach

• Traffic between your device, our server and our providers is encrypted in transit.
• The secret keys for our AI provider and our subscription-management provider are held only on our server, never inside the app.
• The anonymous identifier is hashed with a secret value before anything is stored against it, so the stored value cannot be turned back into the identifier.
• Apart from content you deliberately report to us (section 6), we do not store the content of requests or responses, so there is very little to lose in the first place.
• Our logging is designed so that content cannot reach the logs, including when an error occurs.

No system is completely secure. If a breach of our security safeguards occurs and it is reasonable in the circumstances to believe that it creates a real risk of significant harm to someone, PIPEDA requires us to report it to the Office of the Privacy Commissioner of Canada and to notify the people affected, as soon as feasible. Because we hold no contact details for you, notifying you would normally be indirect, a prominent notice in the affected app and at the top of this page, which PIPEDA's breach regulations permit where an organization does not have contact information for the people affected. PIPEDA also requires us to notify any other organization or government institution that can reduce the risk of harm resulting from the breach, for example law enforcement. Significant harm includes humiliation, damage to reputation or relationships, financial loss, identity theft and loss of employment or business opportunities, among other things.

We keep a record of every breach of our security safeguards involving personal information under our control, whether or not it met that threshold, for 24 months, and the Commissioner can require us to produce those records.

15. Your rights, and how to challenge us

PIPEDA gives you a specific set of rights. They are narrower than the rights some other countries' privacy laws give, and we would rather say so plainly than imply you have more than you do.

• Access: you can ask us what personal information we hold about you, how we have used it, and who we have disclosed it to. We must respond within 30 days. PIPEDA lets us extend that by up to a further 30 days in limited circumstances; if we do, we will tell you before the first 30 days are up, tell you why, and tell you that you may complain to the Commissioner about the delay. Access is normally free. We will not charge you anything without telling you the cost in advance and getting your agreement to go ahead.
• Correction: if you show us that personal information we hold about you is inaccurate or incomplete, we will amend it, and where it matters we will pass the correction on to anyone we gave it to.
• Withdraw consent: at any time, subject to legal and contractual restrictions and on reasonable notice. See section 10.
• Challenge our compliance: you can challenge anything in this policy, or anything we actually do, by emailing us. We will investigate every complaint, tell you the outcome, and change our practices where the complaint turns out to be justified. That is a requirement of PIPEDA's tenth principle, not a courtesy.
• Complain to the regulator: to the Office of the Privacy Commissioner of Canada, at priv.gc.ca. We would like the chance to put things right first, but you can go to the Commissioner at any time. If the Commissioner issues a report on your complaint, PIPEDA also lets you take certain matters from that report to the Federal Court of Canada.

Which regulator, and why it is the federal one

Nova Scotia has no private-sector privacy law of general application. The province's Personal Information International Disclosure Protection Act applies to public bodies and municipalities; its Freedom of Information and Protection of Privacy Act applies to public bodies; and its Personal Health Information Act applies to health information custodians. None of them covers a private company's ordinary commercial activities. So the Office of the Information and Privacy Commissioner for Nova Scotia has no jurisdiction over a complaint about us, and the right place to take one is the federal Privacy Commissioner named above.

About deletion, portability and objection

PIPEDA does not give you a general right to have your information erased, a right to receive it in a portable machine-readable format, a right to restrict how it is handled, or a right to object to handling you have consented to. Some other countries' laws create those rights. Canada's does not, and we are not going to describe rights you do not have.

What we will do, as a matter of our own policy and not because the law compels it: if you ask us to delete something we hold that relates to you, and we can find it, we will delete it, unless we are required to keep it or it is needed for a live investigation into abuse. That includes deleting a particular report you sent us, if you can tell us enough for us to identify it. Treat that as a promise we are making here rather than a statutory entitlement, and note that it cannot extend to anything we are unable to locate.

One technical exception: individual server log entries cannot be selectively deleted, but they delete themselves automatically within 7 days.

How to exercise them

Email [email protected]. Tell us which app you are asking about. If you are asking about a specific record, tell us anything that would help us find it.

One honest limitation

Because our apps have no accounts, we hold almost nothing that can be connected to a named person. To find any record relating to your device, we would need the anonymous identifier that your app holds (you can see and copy it in the app's Settings), and if you have already deleted the app, that identifier no longer exists and the remaining records cannot be linked to you by us or by anyone else.

Where we genuinely cannot tell which records are yours, we may not be able to act on an access, correction or deletion request. If that happens we will tell you clearly, explain why, and help where we can, for example by deleting a specific report if you can tell us enough to identify it.

16. Children

Our apps are not directed at children. They are rated for teenagers and above, and are intended for people aged 13 or over. We do not knowingly collect personal information from children under 13.

The Office of the Privacy Commissioner of Canada takes the position that, other than in exceptional cases, a child under 13 cannot give meaningful consent, and that consent has to come from a parent or guardian instead. Our apps are not built to obtain parental consent, which is another reason they are not for younger children.

If you believe a child has provided personal information through one of our apps, email [email protected] and we will take steps to delete it.

17. Advertising and analytics in three of our apps

Four of our apps show advertisements. The Hard Part, Flotsam and Cadge show them in their free tier and also count how the app is used. Duskroot shows only advertisements you choose to watch, and counts nothing. No other app of ours does either. This section says exactly how it works, in the same spirit as the rest of this policy.

• Ads appear in the free tier. In The Hard Part, Flotsam and Cadge they exist so that people who pay nothing can still use these apps without the costs falling on us, and a paid subscription removes them. Duskroot has no advertisement you did not ask for, so there is nothing there to remove.
• Some ads are ones you choose. A rewarded advertisement plays only when you press a button offering it, for example, watching an ad in exchange for a free use of a paid feature. Nothing plays without you starting it. In Duskroot every advertisement is one of these, and there are no others. The Hard Part, Flotsam and Cadge may also show a brief full-screen advertisement at a natural break, such as the end of a session, and one when you come back to the app after leaving it. That last one is not something you choose, it has a limit on how often it can appear, and it never runs for a subscriber. Duskroot shows neither.
• The advertisements are provided by Google AdMob. When an ad is shown, Google receives information from your device so it can select and deliver the ad and measure that it was shown: your device's advertising identifier, your IP address (from which a rough location can be inferred), basic device information, and how you interact with the ad. That information goes directly from the app to Google and is handled under Google's own privacy policy, not ours. We do not receive it.
• Consent. Where the law of your region requires consent before advertising identifiers are used or before ads are personalized, for example in the European Economic Area and the United Kingdom, the app shows a consent prompt before any such ad is shown, and honours your choice, including the choice to see only non-personalized ads. On any device, you can limit or reset the advertising identifier in your device settings at any time.
• Analytics. The Hard Part and Flotsam include Google Analytics for Firebase. It records that the app was opened, which screens were visited and whether you came back on a later day, together with a random identifier the app creates, your device type and operating system version, and an approximate region worked out from your IP address. We use it to answer one question: do people keep using the app. It is switched off until you have answered the consent prompt described above, and it is not used to build a profile of you, is never sold, and is never combined with information from other companies. Cadge and Duskroot include no analytics software at all.
• What has not changed. We still sell nothing about you, we still have no accounts, and everything else in this policy applies to these four apps exactly as it applies to the others.

18. Foretold's duel feature

Foretold has no AI feature, so this policy's AI sections do not reach it. Its predictions feature also does not. A prediction you keep to yourself is never sent anywhere; there is no network call in that part of the app at all. What follows is about the part that is different: duels, where you make a claim against another player.

• Starting or joining a duel sends it to our server. That happens only if you choose to start or join one. What we receive is the statement, a nickname you choose for that duel (up to 20 characters: a handle, not a name field), your confidence and position, the eventual verdict, and, where you use them, the reason on a report or a one-way cryptographic hash of a nickname you block. Every call also carries the same kind of anonymous device identifier described in section 3, itself stored only as a salted hash.
• Text is deleted after a duel resolves, but only after it resolves. Once both sides have graded a duel, we delete the statement, both nicknames, both confidence figures and positions, and any report tied to it, within 90 days of that outcome. What remains after that purge is limited to the duel's code, its state, its dates, its final outcome, and a salted hash of each device involved, enough to keep a record that the duel happened, not what was said in it. A duel nobody finishes is not on that clock. If nobody joins it, or it is joined but never graded by both sides, its statement and both nicknames are kept indefinitely.
• Some things about duels do not expire at all. Your block list, the map from a blocked nickname's hash to a device, the running list of every duel code your device has ever taken part in, and your win/loss tally against past opponents are not covered by the 90-day purge or by any other automatic deletion.
• This is a separate first-party server from the one described in section 4. Nothing you enter into a duel is passed to an AI provider.

19. Flotsam's eBay connection

Flotsam writes a marketplace listing from a photograph of something you want to sell. For most of its life it stopped there: it gave you the text and you pasted it into eBay yourself, and nothing left your phone except the photograph the AI feature needed. Posting straight to eBay is new, it is optional, and it is off until you switch it on. If you never connect it, nothing in this section happens to you and the rest of this policy describes the app completely.

Connecting

Connect opens eBay's own sign-in page, not a page of ours. You sign in to your own eBay account there and eBay asks whether you want to let Flotsam list on your behalf. We never see your eBay password, and we never receive your eBay email address. If you say yes, eBay hands us a token, which is a key that lets us post for you and does nothing else.

What we hold, and what we do not

We store four things, against the same salted hash of the anonymous device identifier described in section 3: the token, the date the token stops working, eBay's own identifier for your account, and the date you connected. That is the complete list.

We do not store your listings, your prices, what sold, what did not, your feedback, your buyers, or anything else eBay's systems know about you. The token is kept for one reason: so that connecting is something you do once rather than every time you post.

Posting a listing

When you tap Post, the listing goes to eBay through our server, which passes it on and keeps no copy. That means the title, the description, the price, the condition, the category and the item details, together with the photographs.

The photographs are stripped of their hidden location data before they leave your phone. A camera photograph of something in your front room usually carries the coordinates of your house inside it, and a public listing carrying those would hand your address to everyone who looked. Flotsam removes that information, and resizes the image, before it is uploaded. This is the same protection described in section 3, applied here deliberately rather than by accident.

Everything you post becomes public, because that is what a listing is. Once it is on eBay it is on eBay's terms and under eBay's privacy policy, it is visible to anyone, and we cannot take it down for you. Use eBay to end a listing, the same way you would end one you wrote yourself.

Disconnecting, and deletion

There are three ways the connection ends, and all three delete what we hold:

• You disconnect in the app. Settings has a Disconnect control. It removes our record immediately.
• You leave it alone. The record carries the token's own expiry, about eighteen months, and deletes itself when that passes. There is nothing to remember and nothing that quietly outlives its usefulness.
• You close your eBay account. eBay notifies us when a seller's account is closed, and we delete the record on that notification. We registered for those notifications for exactly this reason.

Disconnecting stops future posts. It does not remove listings you have already published, which belong to your eBay account and are yours to manage there.

One thing this feature does not change

None of this touches any other app. No other app of ours connects to a marketplace, holds a token for an account of yours, or uploads anything to be published in public. Where this section and an earlier one appear to disagree, this section governs, and only for Flotsam.

20. Changes to this policy

If we change this policy we will update the “last updated” date at the top of this page and publish the new version here.

If a change materially affects what we collect or what we do with it, we will highlight it at the top of this page for a reasonable period, update the privacy declarations we give to the App Store and Google Play, and, where we reasonably can, note it in the release notes of the next app update. Where a change would extend what we do to a new purpose, we will seek your consent for that purpose rather than assume it. Please check this page from time to time.

21. Contact

Midknight Entertainment Ltd
Attn: Privacy Officer
114 Woodlawn Rd Suite 1005
Dartmouth, Nova Scotia
B2W 2S7
Canada

Email: support@midknightltd.com

If you contact us about your information, please tell us which app you are asking about, so we can find the right records.