Cookie Policy

1. What cookies are

Cookies are small text files a website stores on your device so it can recognise your browser on the next request — most usefully, to know you are still signed in. Related technologies do the same job in different ways: local storage keeps information in your browser and, unlike a cookie, is never sent to a server.

This policy covers both, because from your point of view they are the same question: what is this site keeping on my device, and why.

2. Cookies we set

All of these are strictly necessary: the portal cannot keep you signed in without them. They are set only in connection with signing in — a visitor who only reads the public website is not given a login cookie.

These cookies are marked HttpOnly and Secure, meaning they cannot be read by scripts and are only ever sent over an encrypted connection. They are first-party cookies set by paragonmediacanada.ca.

Blocking them stops sign-in from working. Nothing else on the site depends on them.

Optional: Google Analytics — only if you allow it

We use Google Analytics 4 to count visits to the public website — which pages are read, roughly where visitors come from. It runs only after you accept the consent card shown on your first visit; decline it and these cookies are never set. It is never loaded inside the client portal or admin areas.

Analytics data reaches Google as the operator of the service; we do not use it for advertising, remarketing or profiling, and we have not enabled any Google Ads features. To change your mind later, clear this site’s browser storage (the consent card will ask again on your next visit).

3. What we keep in your browser's local storage

These are preferences, stored on your device and never transmitted to us. Clearing your browser storage resets them and breaks nothing.

None of these identify you to us, none are shared, and none are used to build a profile or to follow you to another website.

4. Third parties

Google Analytics

Covered in section 2 above: opt-in only, first-party cookies, no advertising features. The script itself is served by Google (googletagmanager.com), so when you allow it, that request — like any request to another server — discloses your IP address and basic browser details to Google.

Typefaces

This website’s typefaces are served from our own domain. (They previously loaded from Google Fonts; since August 2026 no font request leaves paragonmediacanada.ca, so that disclosure no longer applies.)

Google Sign-In

If you sign in to the portal with a Google account, Google sets its own cookies on google.com as part of that process. Those are Google’s, governed by Google’s privacy policy, and we cannot read them.

Stripe

If you pay an invoice, the payment is completed on Stripe’s own pages. Stripe sets cookies there for fraud prevention and to run the checkout, under Stripe’s policies.

Push notifications

If you allow browser notifications in the portal, your browser creates a subscription with its own push service (Apple, Google, Mozilla or another, depending on your browser). That is not a cookie, and you can revoke it in your browser’s site settings or in the portal at any time.

What we deliberately do not use

No Google Tag Manager. No Meta, Google Ads or LinkedIn pixel. No advertising or retargeting network. No social media embeds that track you. No cross-site tracking of any kind. Analytics is the one measurement tool we use, and only with your consent, as set out above.

5. Websites we build for our clients

This policy covers paragonmediacanada.ca only. A website we built or host for a client is operated by that client, and its cookies are their responsibility and are described in their own cookie or privacy notice.

Where a client’s website sends its contact-form submissions to us, that is not a cookie — it is a form submission, and what is recorded with it is set out in section 8 of our Privacy Policy. If a client asks us to add analytics or an advertising pixel to their own site, we will also tell them that their site then needs a consent mechanism and a cookie notice of its own.

6. Consent, and how we ask for it

Under PIPEDA, an organization must obtain meaningful consent for collecting and using personal information — consent that a reasonable person would understand. For cookies, the guidance treats consent as implied where a cookie is strictly necessary to deliver the service the person asked for, and expects express, opt-in consent for tracking that goes beyond that, such as analytics or behavioural advertising.

So that is how this site works. The sign-in cookies in section 2 are strictly necessary and set only when you sign in. The one thing beyond that — Google Analytics — is behind a consent card that asks before anything runs: say no (or say nothing) and the script is never loaded. An earlier version of this page promised that if we ever added analytics we would ask first; the card is that promise kept, not a change of position.

If you are visiting from the EU or the UK, the same conclusion applies under the ePrivacy rules: strictly necessary cookies do not require prior consent, and everything else here waits for yours.

7. How to control cookies

You can view, block and delete cookies in your browser settings. Blocking the strictly necessary cookies above will prevent you from signing in to the portal; the public website will still work normally.

• Chrome: Settings > Privacy and security > Third-party cookies / Site data
• Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Settings > Privacy > Manage Website Data
• Edge: Settings > Cookies and site permissions

To clear the preferences in section 3, clear this site’s data in the same settings screen.

8. Do Not Track and Global Privacy Control

Browsers can send a “Do Not Track” or Global Privacy Control signal. We do not act on them for a simple reason: they ask a site to stop tracking, and this site does no tracking to stop. Should we ever add analytics or advertising technology, we will honour those signals as part of doing so.

9. Changes to this policy

We will update this page whenever what we set on your device changes, and update the “Last updated” date above. This policy forms part of our Terms of Service and should be read with our Privacy Policy.

10. Contact us

Questions about anything on this page, or about something you have found stored in your browser by this site:

Paragon Media Canada

Email: dax@paragonmediacanada.ca · Phone: +1 (905) 341-8775 · Serving the Niagara Region, Ontario, Canada

Further reading: Office of the Privacy Commissioner of Canada — online tracking and cookies.