Privacy Policy

The short version

This website does not ask you for anything. There is no sign-up form, no newsletter box, no account, no contact form, and no checkout. We set no cookies and store nothing on your device.

Two things happen automatically when you visit, and they are the whole story: our host, Cloudflare, processes ordinary connection data such as your IP address in order to serve the page and block attacks; and we run Cloudflare Web Analytics, which counts page views without cookies and without following you anywhere.

We do not sell, rent, or share personal information. We run no advertising and no third-party tracking or retargeting.

Who we are

Maize Drones (“Maize Drones”, “we”, “us”, “our”) is an agricultural technology team based in British Columbia, Canada. We build an autonomous crop-scanning drone. This policy covers the website at maizedrones.com only. It does not cover our drone hardware, our mobile or desktop applications, or any future product or business relationship; those will carry their own privacy terms when they exist.

Information we collect

Information you give us: none, through this site

The site has no forms and no fields of any kind. There is nowhere on this website to submit your name, email address, farm details, or anything else, so we do not receive that information from it.

If you choose to email us directly, we receive whatever you put in that message. See Email you send us below.

Information collected automatically

Like every website, ours cannot be delivered to you without processing some technical data. Specifically:

• Server and security logs. Our host, Cloudflare, processes your IP address, the page you requested, the date and time, your browser user-agent string, and similar request metadata. This is what makes it possible to send you the page and to detect denial-of-service attacks and abuse. We do not maintain our own separate copy of these logs, and we do not use them to build any profile of you.
• Cookieless visitor analytics. We use Cloudflare Web Analytics to understand, in aggregate, how many people visit and which pages are read. It records things like page views, referring site, country, and general device type. It does not use cookies, does not store anything on your device, does not assign you a persistent identifier, and does not track you across other websites. We cannot identify an individual person from it.

Cookies and similar technologies

This website sets no cookies, and writes nothing to local storage, session storage, or any other store on your device. That is why you are not asked to accept a cookie banner: there is nothing to consent to.

The typefaces used on the site are served from our own domain rather than from a font provider, so viewing the site does not disclose your visit to any third party for that purpose.

Who processes information for us

We keep the list of companies involved in running this site as short as we can. At present it is one:

• Cloudflare, Inc. hosts the site (Cloudflare Pages), provides the content-delivery network and security layer, and provides the cookieless analytics described above. Cloudflare processes the connection data listed above on our behalf. Their handling of it is governed by Cloudflare’s privacy policy.

We do not use any advertising network, data broker, customer-data platform, session-recording tool, heat-mapping tool, or third-party tag manager.

Links to other services

The site links out to our Substack publication and our LinkedIn page. Those are separate services run by other companies. We do not pass any information about you to them when you click, but once you arrive you are on their platform, under their privacy policy and their cookies. If you subscribe to our Substack, the subscription and your email address are held by Substack, and anything you do there is governed by Substack’s terms rather than this policy.

Why we are allowed to do this

In Canada, our handling of personal information in the course of commercial activity is subject to the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, in British Columbia, the Personal Information Protection Act (PIPA). We rely on implied consent for the minimal technical processing that is necessary to deliver a web page you asked for, and on our legitimate interest in keeping the site secure and knowing roughly how many people read it.

If you are in the European Economic Area or the United Kingdom, our legal basis under the GDPR and UK GDPR is legitimate interest (Article 6(1)(f)) for site delivery, security, and aggregate cookieless analytics. Because we place no cookies or similar storage on your device, the consent requirements of the ePrivacy Directive do not arise.

How long information is kept

We hold no database of website visitors, so there is nothing on our side to retain or delete. Connection and security logs are held by Cloudflare for their own limited retention periods, as described in their documentation. Aggregate analytics are just counts; they contain no personal identifiers and are kept for historical comparison. Email you send us is kept in our mailbox for as long as we need it to deal with your message and to keep a record of the correspondence.

Where information is processed

Cloudflare operates a global network and serves this site from whichever data centre is nearest to you, so your request may be handled outside Canada, including in the United States. Where that happens, the information is protected by the contractual and organisational safeguards Cloudflare maintains, and it remains subject to the laws of the country in which it is processed, including lawful access requests by authorities there.

Your rights

Depending on where you live, you may have the right to ask for access to the personal information an organisation holds about you, to have it corrected or deleted, to withdraw consent, to object to or restrict processing, to receive a portable copy, and to complain to a regulator.

We want to be straightforward about the practical effect here: for an ordinary visit to this website, we hold no information that identifies you, so in most cases there is nothing for us to retrieve, correct, or erase. Where we genuinely do hold something, which in practice means email you have sent us, we will act on your request.

To make a request, email hello@maizedrones.com with the subject line “Privacy request”. We aim to respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada, to the Office of the Information and Privacy Commissioner for British Columbia, or to your local supervisory authority.

Children

This site is aimed at farmers and agricultural businesses, not at children, and it collects nothing from anyone. We do not knowingly solicit or collect personal information from children.

Security

The site is served only over HTTPS and is published as static files, which means there is no application server, no database, and no login for an attacker to reach. We also send a set of browser security headers with every page, including a Content Security Policy, HTTP Strict Transport Security, protections against clickjacking and MIME-type sniffing, and a permissions policy that switches off camera, microphone, geolocation, payment, and USB access.

If you believe you have found a security problem with this site, please email hello@maizedrones.com with the subject line “Security disclosure”. We will not pursue good-faith security research that respects privacy and does not degrade the service for others.

Changes to this policy

If we add anything to this site that collects information, for example a waitlist form or an account system, we will update this policy before that feature goes live and change the “last updated” date at the top of the page. Because we have no mailing list, we cannot notify you directly, so the date above is the reliable signal that something changed.

Contact

Questions about this policy can go to hello@maizedrones.com. Maize Drones is based in British Columbia, Canada.