On this page
Not legal advice. This policy is a draft prepared by the LoonieLogic team from Canadian privacy guidance (PIPEDA and CASL). A Canadian lawyer must review it before publication.
The short version
We collect almost nothing. This is a static website: there are no accounts and no tracking cookies. We run privacy-friendly analytics (Umami Cloud, plus Cloudflare Web Analytics for page-view counts and load performance) that counts page views and broad usage patterns without identifying you. Calculator inputs are processed in your browser and never sent to us.
Who we are
This policy covers LoonieLogic (“we”, “our”), an independent Canadian publisher of personal-finance education, run by the LoonieLogic team. For questions about this policy, or to exercise any of the privacy rights described below, email team.loonielogic@outlook.com.
What we do collect
- Server logs: our hosting provider may log standard technical data (IP address, pages requested, timestamps) to keep the site running and secure. We don’t use these logs to identify you.
- Affiliate redirects: when you click a product link, the redirect passes through our
/go/address so we can count clicks in aggregate. We don’t attach your identity to it, and we never see your information on the merchant’s site. - Website analytics: we use Umami Cloud and Cloudflare Web Analytics to understand how the site is used. Both set no cookies, do not fingerprint your device, and do not record your name, email, or any financial details. See “Website analytics” below for exactly what is recorded.
- Newsletter signups (optional): if you choose to subscribe, your email address (and first name, if you give one) goes directly to our email provider, not to this website. See “Email newsletter” below.
What we never collect
We never ask for financial details. The only place we ask for your email or name is the optional newsletter signup. Our calculators run entirely in your browser. The numbers you type never leave your device.
Calculator inputs are not personal information we collect. The numbers you enter (income, balances, home prices) are processed client-side, are never transmitted to our servers, and are never stored by us. Closing the tab erases them. If that ever changes, this policy will be updated first, and we will ask for your consent before the change takes effect.
Website analytics
We use Umami Cloud (hosted analytics, privacy-focused) to learn which pages and tools people use, so we can improve them. We also use Cloudflare Web Analytics, which counts page views and measures real page-load performance; it cannot see anything you do inside the calculators. There is no cookie banner because there are no cookies to consent to.
What is recorded:
- Page views: which pages are visited, counted in aggregate.
- Usage events: a small set of named events, for example which guide path was clicked on the homepage, which hub card was opened, or whether the planner’s results were viewed. Event details are limited to broad classes and bands (for example a province code like “on”, or a savings-rate band). Raw numbers you type into calculators, income, debt, home prices, and anything that could identify you are never sent.
What is not recorded: no cookies, no device fingerprinting, no cross-site tracking, no advertising identifiers, and no attempt to work around content blockers. If your blocker stops the analytics script, the site works exactly the same.
Opting out: because there are no cookies, there is nothing to delete. If you prefer not to be counted at all, block the analytics scripts (served from cloud.umami.is and static.cloudflareinsights.com) with a content blocker.
Email newsletter
Signup is not open yet. This section describes how it will work when it opens, and it will be updated with the provider’s name before the first address is collected.
Why we ask: we use your email only to send the LoonieLogic newsletter (new guides, tool updates, and Canadian money deadlines, about twice a month). It is never sold or shared, and it is never used for advertising.
Who handles it: the signup form sends your address straight to the email service provider that delivers the newsletter. This website never sees, stores, or logs it. We have not chosen a provider yet, so we cannot yet tell you which company that is or which country it stores data in. We will name the provider here, with where it stores data and which companies it relies on, before the signup opens.
Double opt-in: after you subscribe, you get one email with a confirm link that expires in 48 hours. Nothing else is sent until you click it. If you don’t click it, you are not subscribed and you will not get the newsletter.
Consent records: to meet Canada’s Anti-Spam Legislation (CASL), the provider keeps a record of when you subscribed, where on the site, and the exact wording you agreed to. We keep these records for 3 years after your consent ends, then delete them.
Worksheets and other downloads: if you request a free worksheet, we use your email to send you that worksheet. It does not sign you up for the newsletter. That takes a separate box, which starts unticked.
Identification and unsubscribing: every email identifies LoonieLogic, with our mailing address and a way to contact us, and carries an unsubscribe link. Unsubscribing takes one click, with no login and no questions. We process it the same day (the law allows up to 10 business days). After you unsubscribe, you get no further newsletters unless you sign up again.
Measurement: our site analytics count a signup form submission and a confirmation as anonymous events, labelled only with where on the site the form was (for example “homepage”). Your address and name are never part of them. Open and click counts for the emails themselves stay with the email provider.
Email and CASL: the three requirements
Every promotional email we send is built to meet all three requirements of Canada’s Anti-Spam Legislation:
- Consent. We only email people who gave express consent: an active opt-in, with a box that starts unticked, that names the sender and states that consent can be withdrawn at any time. Double opt-in (described above) means typos and sign-ups by strangers never reach the list.
- Identification. Every email identifies LoonieLogic as the sender and includes a working way to contact us.
- Unsubscribe. Every promotional email includes a visible unsubscribe link that works without a login. Requests are honoured within 10 business days at most (in practice, the same day), and the unsubscribe mechanism keeps working for at least 60 days after any email is sent.
Pre-checked boxes are never valid consent on this site. Consent to email does not give us permission to text you, and consent given for one purpose (for example, “send me the worksheet”) does not add you to the newsletter. We never repurpose consent.
Who we share information with
We share the minimum necessary with the service providers that run the site:
- Email provider (newsletter delivery, not yet chosen, see “Email newsletter” above): receives your email address, and first name if you give one, plus your consent record.
- Analytics providers (Umami Cloud and Cloudflare Web Analytics, both cookieless): receive the anonymous usage data described in “Website analytics” above, and nothing more.
- Hosting provider: processes the server logs described above.
- Banks, brokerages, and affiliate networks whose products we compare: receive no personal information from us. When you click an affiliate link you leave our site, and that provider’s own privacy policy applies from there.
We do not sell, rent, or trade personal information, ever. We never buy email lists. We disclose personal information only when legally required (for example, under a court order), and where the law permits, we will tell you first.
How long we keep it
- Newsletter subscriptions: until you unsubscribe. After that, your address is deleted within 30 days, except for a suppression record of the unsubscribed address, kept so we never email you again by accident.
- Consent records: kept for 3 years after consent ends or is withdrawn, then deleted.
- Server logs: 90 days, then deleted.
- Analytics: aggregated and de-identified; any individual-level analytics data is kept no longer than 6 months.
Security and breach notification
We protect personal information with standard safeguards: encrypted connections (HTTPS everywhere), access limited to those who need it, and regular reviews of who has access. No system is perfect. If a breach creates a real risk of significant harm to you, we will report it to the Privacy Commissioner of Canada and notify affected individuals, as PIPEDA requires.
Your rights (PIPEDA)
Under Canada’s Personal Information Protection and Electronic Documents Act, you can, at any time:
- Access: ask what personal information we hold about you. We will answer within 30 days. Given how little we collect, there is usually nothing to access, but the right still applies.
- Correction: ask us to correct inaccurate information, or to delete information we hold about you.
- Withdraw consent: unsubscribe from the newsletter with the link in any email, or by emailing us.
- Challenge our compliance: tell us if you think we have handled your information in a way that breaks this policy or the law, and we will look into it and reply.
To exercise any of these rights, email team.loonielogic@outlook.com.
Complaints: if you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
Quebec residents (Law 25)
Quebec’s Law 25 is stricter than PIPEDA in several areas. If you are in Quebec, we apply the higher standard where we are aware of it. The exact scope of our Law 25 obligations (privacy impact assessments, explicit consent flows, and de-indexing rights) is part of the legal review of this policy, and the policy will be amended if that review requires it.
Changes
If this policy changes, the “last reviewed” date at the top of this page will change with it. Material changes will be noted here in plain language, and once the newsletter is open, subscribers will get an email summarizing any material change before it takes effect. The version in force is always the one on this page.