Privacy

This is my site, and I run it myself. This page explains what it collects when you visit, why, who else handles it, and how to have it removed. I don’t sell anything about you, I don’t run ads here, and there are no advertising pixels on the site.

Andrew Harris, 347 Queen St. South, Hamilton, ON L8P 3T8. contact@andrewbharris.com

If you just look around

The site uses Google Analytics to count visits. It records which pages you open, how long you stay, the site or link that sent you, your device and browser type, and your approximate location (city level at most). It sets cookies in your browser (named _ga) so a return visit isn’t counted as a new person. I see totals and trends, not who you are. Google handles this data under its own privacy policy. You can block it with your browser’s cookie settings, a content blocker, or Google’s opt-out add-on, and the site works the same without it.

Like any website, the servers that deliver these pages see your IP address and browser details with each request, and may keep them briefly in their logs.

Videos are played through Vimeo and YouTube (in YouTube’s privacy-enhanced mode). Those services receive your request when a video loads, under their own policies.

If you find a hidden object

The gallery has objects hidden in it, and finding them is a contest (the rules are here). The moment you find your first one, the site starts a record so your finds are kept honestly on the server rather than in your browser, where they could be edited. That record holds:

• a random ID, stored in a cookie (abh_hunt) that lasts 90 days and only this site can read;
• which objects you found, and when;
• your IP address, stored only as a one-way salted hash so duplicate entries can be spotted without keeping the address itself;
• your browser’s user-agent string (the line that names your browser and device), for the same reason.

There is no name or email in it at this point. If you never find anything, no record is made.

If you enter the contest

Entering adds your email address, your province or territory, your confirmation that you’re of age, the version of the rules you accepted, your answer to the skill-testing question, and, if you arrived through a tagged link, which one (so I know where people heard about it).

This is used only to run the contest: checking entries are genuine, drawing a winner and contacting them. Contest records, including the find records above, are kept for twelve months after the contest closes on October 31, 2026, then deleted.

Email about new work is a separate choice.I only send it if you tick the optional box when you enter. Every message has an unsubscribe link, or you can email me and I’ll take you off.

If you get in touch

If you email me, I keep the conversation the way anyone keeps their email. If you message me on Instagram, that conversation is also covered by Instagram’s own policy.

Who else handles it

A few services do the work of running the site. Each only gets what it needs to do its job, and some of them store data outside Canada, where it is subject to local law.

• Netlify hosts the site and delivers every page.
• Supabase stores the hunt and contest records.
• Google provides the analytics described above.
• Sanity stores and delivers the photographs and page content.
• Vimeo and YouTube play the videos.

Your choices

You can ask what I hold about you, ask me to correct it, or ask me to delete it, by writing to contact@andrewbharris.com. Deleting a contest record also withdraws that entry. If you’re not happy with how I’ve handled something, you can contact the Office of the Privacy Commissioner of Canada.

If any of this changes, this page changes with it, and the date at the top moves.