Revised: October 31, 2026 · Covers cybershuriken.com and network.cybershuriken.com
Contents
1. Who operates the sites
Cyber Shuriken Technologies Corporation operates the corporate website at cybershuriken.com and the Cyber Shuriken Network at network.cybershuriken.com. The corporate site presents our capabilities and products and lets visitors contact us. The Network is a free community for professional discussion, knowledge sharing and collaboration.
Send privacy questions or requests to contact@cybershuriken.com, using the subject “Privacy”.
2. Minimum account information
You may use an alias or pseudonym. Your real name is optional. We do not ask for a phone number, date of birth or proof of legal identity as part of ordinary community registration.
- Username or alias: WordPress needs a username to identify your account. You can choose an alias; it does not need to be your legal name.
- Working email address: your email address is needed for verification, account setup and recovery, security notices and account administration. You must control this address and keep it current.
- Password and authentication records: WordPress stores a password hash and records needed to authenticate and manage your account.
- Multi-factor authentication (MFA), when enabled: the authentication tools process the enrollment secret and verification or recovery records needed for your chosen supported method. Authenticator-app MFA does not require a phone number. Keep setup keys and recovery codes private.
Other profile details, a profile image and a signature are optional. A photograph of your face and your real first or last name are not required.
If you contact us, we receive the email address and message you send, together with any optional alias or other information you choose to include. The corporate enquiry form prepares an email draft in your email application; it does not send your enquiry until you choose to send that email. Please share only the information needed for your enquiry.
3. Public profiles and contributions
Network profiles and forum discussions are publicly readable. Your chosen public name or alias, profile details you publish, profile image, signature, topics, replies, tags, uploaded images and documents, and associated posting dates may be visible to people who are not members. A profile or post URL may also contain your username or a version of it, so choose an alias you are comfortable making public.
Your account email address, password and MFA secrets are not public profile fields. If you include an email address, real name or other identifying information in a public post, signature, profile description or attachment, that information becomes part of your public contribution.
Public content can be indexed by search engines, quoted, downloaded or copied by others. Uploads can have directly accessible file URLs; hiding an attachment link or placing its post in a moderation queue does not necessarily make the uploaded file private. Images and documents may also contain identifying information in their metadata. Do not upload confidential information, credentials, recovery codes or another person’s personal information without appropriate permission.
Account registration and publication in a browsable member directory are separate choices. Any optional directory must explain what it publishes and obtain the relevant choice before listing members. Public forum profiles can remain accessible even where a directory is not enabled.
4. Technical and security information
The websites, WordPress, bbPress and hosting/security tools also process technical information needed to deliver and protect the service. This can include IP addresses, browser or device information, requested pages, timestamps, login attempts, session identifiers, posting activity and moderation records. Forum records may retain an author’s IP address for authorised administration and security purposes; it is not intended to be displayed to ordinary visitors or members.
These technical records are separate from the personal details we ask you to enter. Using an alias does not make all activity anonymous to the website operator or hosting provider.
5. How information is used
- To create, verify, secure and recover accounts.
- To publish the profile details and contributions you choose to share.
- To operate discussions, signatures, attachments, subscriptions and other enabled community features.
- To respond to enquiries, privacy requests and support questions.
- To moderate reports, prevent spam and misuse, investigate security incidents and meet applicable legal obligations.
We do not sell personal information. We ask for information relevant to the purpose involved. Optional profile fields and public contributions are your choice. You can ask about withdrawing consent or closing an account using the process below; we will explain any effect on features that depend on that information.
6. Hosting and service providers
The sites are hosted with Web Hosting Canada (WHC). Hosting, database, email delivery, authentication, backup and security services process information as needed to operate the sites. Authorised administrators and moderators can access the information needed for their responsibilities.
Using WordPress or installing a plugin does not, by itself, mean every plugin author receives your account data. Any enabled feature that sends information to an external service must be assessed and reflected in this policy where relevant. Our intended profile-photo setup uses locally hosted images.
Where a service provider processes information outside Canada, it can be subject to the laws and lawful access requirements of that location. We remain responsible for the personal information entrusted to providers for processing on our behalf. We do not promise that every provider, backup or email route is confined to Canada.
We may disclose information where required by applicable law, or where legally permitted and necessary to address fraud, security incidents or threats to people’s rights or safety.
8. Retention and security
Account information is retained while needed to operate an account. Enquiries, authentication/security records and moderation records are kept for the purposes they serve and any applicable legal requirements. Public discussions may remain available after account closure, subject to review of requests to remove or anonymise your information. We do not use account closure as permission to retain identifying information indefinitely without a valid purpose.
Deletion from the active site may not immediately remove a record from backups. Backup copies remain subject to their retention cycle and appropriate access restrictions. Where information must be retained for a legal obligation or an unresolved security or abuse matter, we will explain the relevant limitation when responding to your request.
Security depends on hosting controls, software updates, access permissions and the authentication features in use. MFA is an additional account safeguard, not a guarantee that all information is encrypted or that incidents cannot occur. Do not use public uploads to store sensitive information.
9. Access, correction and deletion requests
Email contact@cybershuriken.com from your registered address where possible. Tell us whether you want access to or correction of account information, account closure, removal of identifying details, or review of particular posts or files. Include the relevant account alias and page URLs; do not send your password, MFA secret or recovery codes.
We may ask you to confirm control of the account or registered email address before acting. A phone number or legal name is not our default method of checking an ordinary account request. Any additional verification should be proportionate to the request and the information involved.
We review requests individually and explain the action taken, any lawful retention requirement and any limits on removing copies held by others. Depending on the request and applicable obligations, this can include removing a profile, deleting a file, removing identifying details from a contribution or deleting content. Closing an account does not by itself remove every public contribution or third-party copy.
Applicable privacy law, including Canada’s Personal Information Protection and Electronic Documents Act where it applies, provides rights concerning access, correction, consent and complaints. We respond within the applicable legal time limits and explain any permitted extension or exception. You may also contact the Office of the Privacy Commissioner of Canada about a privacy concern.
10. Changes and contact
We will update the revision date when this policy changes and provide appropriate notice of material changes. A new purpose for personal information may require a separate explanation and consent; publishing an updated policy alone does not replace that requirement.
Privacy contact: contact@cybershuriken.com.