This page explains how Lakeshore Research handles your personal information. Kassem Media Group runs Lakeshore Research. We follow the 10 privacy principles of PIPEDA, Canada’s privacy law for businesses.
The short version
- You give us your name, email, date of birth, phone number and home address when you create an account.
- We ask you survey questions about how you gamble and how operator sites treat you.
- When you click through to an operator from our site, we record that you did, and when.
- We never sell your data. We never give it to operators. We publish grouped results only.
- You can download or delete everything from your account page, any time.
Who is responsible
Kassem Media Group is responsible for your personal information. Our privacy officer answers privacy questions. Ask us, and we tell you who it is. Write to us through the support page.
What we collect, and why
When you create an account
| We collect | Why |
|---|---|
| First and last name | To know one person has one account, and to address you |
| Email address | To log you in, to keep one account per email, and to send account and password emails |
| Password | To protect your account. We never see it in clear: Supabase stores a one-way hash |
| Date of birth | To check that you are 19 or older. Ontario law sets 19 as the age for online gambling |
| Phone number | To keep one account per person, and to reach you if we must talk about your account |
| Home address, province or state, country, postal code | To know where you live. The sites we show are for Ontario residents |
| Referral code, if any | To know which partner shared our link with you |
| The three boxes you ticked, the exact words next to them, the date and time, your IP address and browser type | To prove what you agreed to, as the law requires |
All three boxes start unticked. We save nothing until you press the button. We save these details when Supabase creates your account.
When you take the survey
We store your answers with your account: which sites you have used, what you play, how often, and five yes or no questions about gambling habits. On the sites page you pick where you live and whether you want casino or sportsbook sites; both are kept with your account and you can change them any time.
When you click through to an operator
Every operator link on our site goes through our own server first. When you click one, we record:
- which account clicked
- which operator link
- the date and time
- your IP address and browser type
- the partner who shared our link with you, if any
This is our own record, on our own site. It tells us which sites our members chose to visit. We do not place anything on the operator’s site, and the operator gets nothing from us about you. Operators run their own trackers on their own pages. Those are theirs, under their privacy policies.
When you visit any page
Our web server sees your IP address and browser type for every request, as every website does. We use them to keep the site working and to stop abuse. We keep no third-party analytics, no advertising pixels and no fingerprinting. We do not try to tell who you are from your device.
Cookies
We set a few cookies. None of them track you across other sites.
- Session cookies (
sb-prefix): keep you logged in for up to 24 hours. Your browser’s scripts cannot read them. sc_partner: remembers the partner whose link you used, for 30 days.sc_pending_email: holds your email for one hour after sign-up, so the “check your email” page can show it.sc_recovery: set for 15 minutes after you use a password-reset link, so you can set a new password.
We use no analytics cookies. Logging out ends the session everywhere.
Who helps us, and where your data is
- Supabase stores your account, answers and click records. Our database is in Canada (Central), region ca-central-1. Supabase runs its service logs in the European Union and keeps them for a short time. Its support team works around the world and may see data if we ask for help.
- Render runs our web server in the United States (Oregon). Every page request and every form you send passes through it. Render keeps request logs for a short time.
- Email service: we have not chosen one yet. It will send password emails. We name it here before it gets your data, and we say where it stores it.
Data in another country falls under that country’s laws. Courts, police and security agencies there may be able to see it.
We never sell your data. We never give it to casinos or sportsbooks. We share it with no one else unless the law makes us. A court order is one example.
What we publish
We publish grouped results only: counts, medians and ranges across many players. We never publish your name, your email, your free comments as written, or anything that could point to you. We publish no number for a site until at least 5 players have reported on it.
How long we keep it
- Your account, details and answers: while your account exists.
- IP addresses on click records: 90 days, then removed.
- Accounts that never confirm their email: deleted after 30 days.
- After you delete your account: one record of what you agreed to, with your email replaced by a hash, for 3 years. Canada’s anti-spam law asks us to be able to prove consent for that long.
Your rights
From your account page you can:
- download everything we hold about you, as a file
- delete your account and your data, right away
You can also ask us to fix a detail, or to see how we use your data. We reply within 30 days, free of charge. If we cannot do what you ask, we tell you why in writing. Write to us through the support page.
Not happy with our answer? You can complain to the Office of the Privacy Commissioner of Canada.
Age and where you live
Lakeshore Research is for people 19 and older. The sites we show are for Ontario residents. We do not knowingly collect data from anyone under 19. If we learn that we did, we delete it. We do not aim the site at Quebec.
How we keep it safe
- Every page uses HTTPS.
- Your session lives in cookies that page scripts cannot read.
- Our database lets each member read and write only their own rows. Our web server holds no master key to the database.
- Every operator link is checked against a fixed list of operator addresses before we forward you.
- We log sign-ins, consent changes and deletions.
If a data breach puts you at risk of real harm, we tell you and the Privacy Commissioner as soon as we can.
Changes to this page
When we change this page, we change the date at the top. Big changes get a notice on your account page.