Roger Wilco Imagery — Privacy Policy

DRAFT v0.1 — 25 October 2026 — placeholder, not yet in force. Requires legal review before publication. Items marked DECISION need Kevin's call.

Effective date: DECISION: set on publication

This policy explains how Roger Wilco Imagery ("RWI", "we", "us"), a project of Prime Rogue Inc., Calgary, Alberta, Canada, handles personal information. It covers the RWI website (currently rogerwilcomedia.online), SITREPs, the Wilco Watch / DOGINT series, alerts and any future accounts or API access (together, the "Services"). It should be read with the RWI Terms of Use.

We follow the ten fair information principles in Schedule 1 of the Personal Information Protection and Electronic Documents Act (PIPEDA). Where Alberta's Personal Information Protection Act (PIPA) applies instead, we follow it too.

1. The short version

• Today, RWI has no accounts, no sign-up forms, no analytics, no advertising and no tracking cookies.
• The website stores one setting in your browser (light or dark theme), and our host keeps standard server logs.
• Our reports are about places, installations and vehicles, not people. We work to keep private individuals out of them.
• When journalist and student accounts launch, we will collect only what is needed to verify eligibility. This policy will be updated before that happens.

2. Accountability

Prime Rogue Inc. is responsible for personal information under its control.

Privacy Officer: DECISION: name or role — DECISION: contact address

3. What we collect, and why

3.1 Visiting the website (now)

We do not use analytics, advertising, social-media pixels or tracking cookies.

Third-party resources. Some pages load resources from other providers, which receive your IP address and browser details when your browser fetches them: - Google Fonts (typefaces) - unpkg.com (the Leaflet map library) - OpenStreetMap tile servers (map images on the Sites pages)

Their own privacy policies apply. DECISION: self-host fonts and the map library to remove the first two.

3.2 Contacting us (now)

If you email us, we keep your message and address to reply and to keep a record of the exchange. We do not add you to any list.

3.3 Accounts and verification (planned, not yet live)

When journalist and student accounts launch (Terms section 5), we expect to collect: - name, email address and password (stored hashed); - verification evidence: for journalists, a press card, association membership, newsroom email or links to published work; for students, an institutional email or proof of enrolment; - an API key, and usage logs for rate limiting and abuse prevention; - for commercial licensees, organization details and end-user confirmation (Terms section 7).

We will collect this only to decide eligibility, run accounts, enforce the Terms and prevent abuse. We will ask for the least evidence that does the job, and delete verification documents once a decision is made, keeping only a record of the decision and its date. DECISION: confirm this retention approach.

3.4 Alerts

RWI's push alerts go through ntfy topics. Anyone who subscribes to a public topic can read its messages. We do not collect information about subscribers. We do not put personal information in alerts.

4. People who appear in our data

RWI analyses open sources: satellite imagery, aircraft (ADS-B) and ship (AIS) transponder broadcasts, OpenStreetMap and public reporting.

• Imagery is coarse (10 m per pixel or worse for most products). It shows buildings, vehicles and land, not identifiable people.
• Transponder data identifies aircraft and vessels. We focus on military and government aircraft and vessels. Civilian traffic can appear incidentally. We do not publish analysis aimed at private individuals, and the Terms (section 10) forbid using RWI to locate, track or harass people.
• Wilco Watch covers a residential neighbourhood in Calgary. It marks only the home of Prime Rogue Inc.'s own principal, with his consent. Change reports name streets, never house numbers, and are not about any resident.

Much of this work is journalism. PIPEDA (s. 4(2)(c)) and Alberta's PIPA (s. 4(3)(c)) do not apply to personal information collected, used or disclosed for journalistic purposes. We still apply the protections above as a matter of practice. If you believe an RWI output identifies you or your property unfairly, contact the Privacy Officer and we will review it.

5. Consent

By using the website you consent to the processing in section 3.1. Where consent is required for accounts and verification, we will ask for it clearly at sign-up. You may withdraw consent at any time, subject to legal or contractual limits. Withdrawing may mean we can no longer provide an account or licence.

6. Use, disclosure and retention

We use personal information only for the purposes above. We do not sell personal information, and we do not share it except: - with service providers acting for us (web hosting, code hosting, email), under confidentiality obligations; - where required or permitted by law, for example a valid court order. Consistent with Terms section 7, we do not provide personal information to the restricted parties listed there unless the law compels it, and we will tell affected users where the law allows.

We keep personal information only as long as needed for these purposes, then delete or anonymise it. DECISION: retention periods per category.

7. Where information is stored

Some service providers are outside Canada. GitHub (code, pipeline and published data) is in the United States. Our web host's location is DECISION. Information stored outside Canada may be accessible to foreign courts, law-enforcement and national-security authorities under local law.

8. Safeguards

We protect personal information with measures suited to its sensitivity: - encrypted connections (HTTPS); - access limited to people who need it; - secrets kept out of code and published data (for example, the Wilco Watch address is held only as an encrypted secret and never written to files or logs); - hashed passwords and least-privilege access tokens once accounts exist.

If a breach creates a real risk of significant harm, we will report it to the Office of the Privacy Commissioner of Canada (and Alberta's Commissioner where PIPA applies), notify affected people, and keep a record, as the law requires.

9. Accuracy, access and correction

You may ask what personal information we hold about you, how it has been used and to whom it has been disclosed, and ask us to correct it. Write to the Privacy Officer. We will respond within 30 days, or tell you if we need more time and why, as PIPEDA allows. Access is free. We may need to verify your identity first.

10. Questions and complaints

Contact the Privacy Officer first. If you are not satisfied with our answer, you may complain to: - the Office of the Privacy Commissioner of Canada — priv.gc.ca - the Office of the Information and Privacy Commissioner of Alberta — oipc.ab.ca (where Alberta's PIPA applies)

11. Changes

We will post updates here with a new effective date. We will update this policy, and notify affected users, before we start collecting any new kind of personal information, including before accounts launch.

TBD: French version.