Last updated: May 4, 2026
Privacy policy
Singh's Arcade (83 Rue Sainte-Anne, Sainte-Anne-de-Bellevue, Quebec) collects only the personal information needed to take a reservation, send a confirmation, and let staff recognize a returning guest. We follow Quebec's Act respecting the protection of personal information in the private sector ("Law 25"). If you are visiting from elsewhere in Canada or abroad, the same rules apply to you while you use this site.
What we collect
When you create an account or book something, we collect: your first name (required), last name (optional), email (required), phone (optional), preferred language (fr/en), and the password you set for your account (we store a one-way bcrypt hash, never the password itself). When you submit a booking, we store the date, time, party size, product (pool table / Mob Room / birthday / corporate), tier, total and deposit amounts, and any note you typed for staff. When you play Pinball Lite, we store the score, the input log we use to validate the score against cheating, your IP, and your browser user agent. We do not collect any other data about your device, location, or activity unless you explicitly accept analytics cookies (see "Cookies" below).
Why we collect it
Names + emails are used to send booking confirmations and reach you about a specific reservation. Phone number, if you give it, is used only when staff need to call you on the day of an event. Preferred language drives the language of email and on-site copy. The password lets you sign in to /account to see and manage your bookings + pinball rewards. Bookings are processed to fulfill the reservation contract. Pinball score validation data is kept to detect score fraud — we do not sell it, share it, or use it for advertising.
Third parties we share with
To run the site we use four service providers, each handling only the data they need: Supabase (database hosting, EU + US regions; stores customer + booking data), Stripe (payment processing for deposits; Stripe receives your name, email, and the amount; we never see your card number), Postmark (transactional email delivery; Postmark receives your email + the message body), and Vercel (web hosting + edge functions; receives request logs including IP). Each of these providers is bound by their own privacy policy and Quebec Law 25 / GDPR equivalents. We do NOT sell or rent your data to advertisers or other third parties.
Cookies and tracking
Strictly necessary cookies (your sign-in session, your shopping cart, your language preference) are set without consent because the site cannot work without them. Optional analytics cookies (Vercel Analytics) measure aggregate page traffic so we can see what's working — these are NEVER set unless you explicitly accept the cookie banner on your first visit. You can change your choice at any time from the banner footer link. We do not use third-party advertising cookies on this site.
How long we keep your data
Customer accounts are retained as long as you have one. You can ask us to delete it at any time (see "Your rights" below). Bookings are retained for 7 years after the event date for accounting purposes per CRA / Revenu Québec rules. Pinball scores + input logs are kept 30 days for fraud detection, then aggregated and deleted. Server access logs (IP, user agent) are kept 90 days for security purposes, then automatically purged.
Your rights under Law 25
You have the right to (a) access the personal information we hold about you, (b) correct any of it that's inaccurate, (c) request deletion of your account and the personal information attached to it, (d) withdraw consent for any optional processing (e.g. analytics) at any time, and (e) request that we transfer your data to another service in a portable format. To exercise any of these rights, email gursagar@singhsarcade.com with "Privacy request" in the subject line. We will respond within 30 days as required by Law 25.
Privacy officer
Per Law 25, our designated person responsible for the protection of personal information is Gursagar Singh (gursagar@singhsarcade.com). Contact this person directly for any privacy concern, including requests to access, correct, or delete your data, and any complaint about how we handle it. If you are not satisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec at https://www.cai.gouv.qc.ca.
Breach notification
If a confidentiality incident affects your personal information and presents a risk of serious harm, we will notify you and the Commission d'accès à l'information du Québec without delay, as required by Law 25.
Changes to this policy
If we materially change this policy we will post the new version here, update the "last updated" date, and (where the change affects how we handle data we already have) email people with active accounts. Continued use after a change constitutes acceptance of the updated policy.