Privacy policy
Last updated November 14, 2026
This policy explains what personal information MapleSyrup ("we") collects when you use maplesyrup.win, why, and your choices. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for people in Quebec, the Act respecting the protection of personal information in the private sector (Law 25).
What we collect
| Account | Email address, password (stored only as a secure hash), and optionally your name, company, job title and province. |
|---|---|
| Your searches | Saved searches, followed projects, notes and tags, and when you last used the site. |
| Whether you confirmed your address, digests we sent you, and bounces or spam complaints reported by our email provider. | |
| Consent | Whether you agreed to receive news and offers, and when. |
| Technical | A session cookie that keeps you logged in. Our hosting providers keep standard server logs (IP address, pages requested) for security. |
We don't use advertising cookies or third-party tracking.
Public records
Our project data comes from documents that public bodies publish. We don't publish the names of private residents who appear in those documents, such as delegations or people who wrote to council. Public officials are named only in their official roles.
How we use it
- To run your account and send the digests and alerts you set up.
- To send service messages, such as email confirmation and password resets.
- To send news and offers, only if you opted in. You can withdraw that consent at any time.
- To keep the service secure and to improve it.
We don't sell personal information.
Who processes it for us
We use service providers to run the site: Render (application hosting and database), Cloudflare (DNS, security and document storage) and our email delivery provider. Some of these providers store data outside Canada, including in the United States, where it may be accessible to authorities under local law. Each provider is bound by contract to protect it.
How long we keep it
Account data is kept while your account is open. When you delete your account we delete your personal information within 30 days, except where we must keep records (for example, invoices) by law. Backups containing it expire within 30 days after that.
Your rights
You can access, correct or delete your information, withdraw consent, and ask how it's used. Most of this is on your account page. For anything else, email our privacy contact at privacy@maplesyrup.win. We answer within 30 days. You can also complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.
Person responsible
The person responsible for protecting personal information at MapleSyrup can be reached at privacy@maplesyrup.win.
Changes
If we change this policy in a way that matters, we'll tell account holders by email before the change takes effect.