Privacy: what we keep and why

The short version

We keep as little as we can. We collect your email address only if you sign up for updates, and a message only if you send us one. The age question at the door is answered in your own browser and never reaches us. We do not sell or rent anything we hold, and there is no tracking or analytics on this site.

What we collect

When you sign up for updates: your email address, the province or territory you chose (optional), the exact wording you agreed to, and the time you agreed. When you confirm or unsubscribe, we note the time.
When you use the contact form: your email address, the reason you picked and your message.
At the age question: the province or territory you chose is stored in a cookie in your own browser (lp_age), so the question is not asked again on that device. It is not sent to us on purpose and we do not record it anywhere. See Cookies.
In the stack calendar: nothing. What you enter there is stored in your own browser only (see Cookies) and is never sent to us.

We do not collect your date of birth, a copy of an ID, or payment card numbers.

Why we collect it

Your email address: to send the updates you asked for (a library page added or re-verified), and nothing else.
Your province: to know which provincial rules readers care about. It is optional.
The consent wording and time: to show what you agreed to, as Canada's anti-spam law requires.
Contact messages: to answer you.

Where it is kept

Sign-up records are kept in a database run by Supabase in its Canada Central region. Contact messages go to our team inbox by email and are not kept in the database. Only our own staff can read either; the public pages of this site never show an address.

Who it is shared with

Only the service providers that make the site work, and only what each one needs:

our email provider (Resend), which sends the confirmation and update emails;
our hosting provider (Vercel), which serves the pages;
our database provider (Supabase).

Some of these providers may process information outside Canada, where the law of that country applies to it. We never sell, rent or trade your information, and we never share it for advertising.

How long we keep it

Your sign-up stays until you unsubscribe. After that we keep only your address and the time you left, so we never email you again by mistake. Ask us and we delete it completely.
Sign-ups that are never confirmed get no emails. Ask us and we delete them.
Contact messages are kept in our team inbox only as long as we need them to answer you, then deleted.

See, correct or delete what we hold

Use the contact form and say what you want: a copy of what we hold about you, a correction, or deletion. We reply within 10 business days. There is no charge.

You can withdraw your consent at any time. Every email has an unsubscribe link that works straight away, and the contact form works too.

The ten principles we follow

Canada's federal privacy law for businesses (PIPEDA) sets out ten fair information principles. Here is what each means on this site:

Accountability. One person answers for privacy here: our privacy officer, the founder, reached through the contact form.
Identifying purposes. We say why we collect something before we collect it, as on this page.
Consent. We ask before we collect. The sign-up box is never ticked for you.
Limiting collection. We collect only what the purpose needs.
Limiting use, disclosure and retention. We use information only for the reason we gave, and keep it only as long as that reason lasts.
Accuracy. You can correct what we hold at any time.
Safeguards. The database is closed to the public; only our staff can read it, through the server, never through the pages.
Openness. This page is our policy, in plain words.
Individual access. You can ask what we hold about you and get a copy.
Raising a concern. If you think we got something wrong, tell our privacy officer. You can also contact the Office of the Privacy Commissioner of Canada.

Quebec readers (Law 25)

If you live in Quebec, the same rights apply, and our privacy officer is the founder, reached through the contact form. You can withdraw your consent at any time, ask that information about you stop being used or shared, and ask what we hold. If an incident ever puts your information at risk of serious harm, we will tell you and the Commission d'accès à l'information.

Emails and Canada's anti-spam law (CASL)

We email you only after you ticked the box and confirmed by clicking the link we sent. Every email says who it is from and where we are based, and has an unsubscribe link. Unsubscribing takes effect straight away.

Changes to this page

When this page changes, the date at the top changes with it.