This Privacy Policy describes the policies and procedures for the Canadian Shield service (the “Service”) operated by the Canadian Internet Registration Authority (“CIRA”). This Privacy Policy is incorporated into and subject to the Terms and Conditions of the Service.
a. The privacy of users of the Service is very important to CIRA. CIRA will not sell, rent, or license your personal information to any third party.
b. As an open DNS resolver, there is no signup or requirement to disclose personal information to CIRA, other than that which is provided by accessing the Service. The only method by which CIRA can identify end users is by the IP (internet protocol) address of the user.
c. When you use the Service, we collect your IP (internet protocol) address, and your domain name queries. IP addresses may represent individual persons or devices, or they may represent large groups of end users within an organization. The Service does not distinguish between single and multiple users behind a single IP address.
d. Your detailed DNS query data that includes your IP address will be retained by CIRA for up to twenty-four (24) hours, in order to identify and protect the Service from any malicious behaviour, after which time it will be deleted. Beyond 24 hours only aggregated data will be retained in which your domain name queries will no longer be attributable to your IP address.
e. In the event CIRA observes behaviours which CIRA deems to be malicious or anomalous, CIRA may retain detailed DNS query data in the course of normal network defense and mitigation. This collection will be limited to DNS query data associated with IP addresses that CIRA determines are involved in the event.
f. CIRA will use threat feeds provided by intelligence partners. CIRA may share with intelligence partners data about domains and the number of blocks associated with them. This data will not include any Canadian Shield User’s Personally Identifiable Information (PII).
g. CIRA may also share high level anonymized aggregate statistics, including metrics on threat type, geolocation, as well as other vertical metrics including performance of the Service (e.g. number of threats blocked, infrastructure uptime) with the public and with its threat intelligence partners.
h. CIRA Canadian Shield application privacy disclosure: When you use the Canadian Shield application, we may collect certain types of information to enhance your experience and provide you with the best possible service. Below, we outline the types of information we may collect and how we may use it:
- Details about internet, app, or network usage: This may include domain names of websites you visit, data usage (bytes transferred), performance information, crash logs, and other aggregate or statistical information.
- Android application data: We may collect metadata of all applications installed on your Android device, including the names of the apps. We use this information to improve the service, provide customer support, and ensure the security of our systems and users. When you make a support request (located in the app menu, under Support) the above information is transmitted off your device and shared with the application developer for the sole purpose of support and troubleshooting.