Privacy

Draft. Not yet reviewed by a lawyer

What we collect

When you sign up for the Brief we store:

• your email address;
• the exact consent wording you agreed to, the time you agreed and the page you signed up from;
• a hashed version of your IP address (not the address itself);
• the name of your browser;
• a count of sign-up attempts for your address in the last hour, to stop abuse;
• a log of sign-up requests, confirmations and unsubscribes;
• the records that link your unsubscribe links to your email address.

Why

To send you the Brief every Monday, and to prove that you asked for it. Canada's anti-spam law (CASL) requires us to be able to show that.

Where it is stored

We use three services to run this:

• Supabase, our database, holds your sign-up record.
• Resend sends the confirmation email and the Brief.
• Cloudflare hosts this site, runs the Turnstile bot check on the sign-up form and provides cookieless analytics.

How long we keep it

We keep your email address and send you the Brief until you unsubscribe. Every unsubscribe link we send keeps working indefinitely, so we keep a record that links each link to your email address. The consent records (when and how you agreed, and when you unsubscribed) are kept for 3 years after you unsubscribe, as proof under Canada's anti-spam law.

Unsubscribe or ask for deletion

Every email has an unsubscribe link. To ask us to delete your data, or for any privacy question, write to [email protected]. We will delete everything we are not required to keep as proof of consent.

Cookies and analytics

We set no cookies. Cloudflare's bot check (Turnstile) may store a short-lived token in your browser to tell people from bots. We measure visits with Cloudflare Web Analytics, which does not use cookies and does not track you across sites.