Privacy policy

Who we are

Dontdoit Inc., based in Montréal, Québec, Canada. Write to hello@dontdoit.club for any privacy question or request, including requests about your own personal information. The person responsible for the protection of personal information can be reached at the same address.

What this site collects

• Your cookie choice. The dd_consent cookie stores which optional tools you allowed, for 12 months.
• Interface preferences. The kimdontdoit-ui cookie stores your theme and layout, for 12 months.
• Sign-in session. If you use the app, a session cookie keeps you signed in until it expires or you sign out.
• Server logs. Cloudflare records each request, including IP address, path, user agent, and time, to deliver the site, cache it, and block abuse.
• Site statistics, without cookies. When you are signed out, each page view sends the page, the referring site, campaign tags, and your country to our own server. We count visitors with a hash of your IP address and browser that changes every day, so no cookie or lasting identifier is used. Your browser keeps the first page of the visit in session storage until the tab closes, so a sign-up can be credited to the page that led to it. The data stays with us on Cloudflare and is only reported in aggregate.
• Analytics, only if you allow it. Google Analytics receives page views and sets its own cookies.
• Ad measurement, only if you allow it. Meta, TikTok, and Pinterest pixels receive events and set their own cookies.
• Newsletter. If you subscribe, your email address and the page you subscribed from are sent to Loops, our email provider.
• Messages. If you use the contact form, we store the name, email address, and message you send.

Product analytics in the app

When you are signed in, the app records product events through our own server and forwards them to PostHog and our warehouse. Those events are keyed to your account. PostHog also receives your account's email address and name, and the page, referring site, and campaign tags of the visit that led you to sign in, so we can see where users come from. They are separate from the cookie banner, and the privacy controls do not switch them off. Signing out stops new events. Ask us to delete your account and we will.

What we do not do

We do not sell personal information for money. We do not load analytics or advertising tools before you allow them.

Who processes it

Cloudflare hosts the site, runs Zaraz, and keeps request logs. Google, Meta, TikTok, and Pinterest receive data only when you allow the matching purpose. Loops sends the newsletter. PostHog and our warehouse receive product events for signed-in users. Each provider processes data under its own terms and privacy policy.

How long we keep it

• Consent choice and interface preferences: 12 months.
• Sign-in session: until it expires or you sign out.
• Server logs: only as long as needed for security and troubleshooting.
• Site statistics: about three months.
• Analytics: the retention period configured in Google Analytics.
• Ad measurement: the retention period set by each advertising platform.
• Newsletter: until you unsubscribe.
• Contact messages and account data: until the request is handled, or until you ask us to delete them.

Your rights

Canada. You can ask for access to your personal information, ask us to correct or delete it, withdraw consent at any time, and ask for it in a portable format. You can also ask that a hyperlink be de-indexed where the law allows it. If you are not satisfied with our answer, you can complain to the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

California and other US states. Where those laws apply, you can ask what we collect, ask us to delete or correct it, opt out of sale or sharing for targeted advertising, and opt out without losing access to the site. Marketing stays off until you enable it in the cookie banner or privacy controls.

European Union and United Kingdom. You can ask for access, rectification, erasure, restriction, portability, and object to processing. You can withdraw consent at any time and complain to your supervisory authority.

To exercise any of these, email hello@dontdoit.club. We answer within 30 days. We may need to confirm your identity first, and we will not use that information for anything else.

Children

The site is not directed to children under 14, and we do not knowingly collect their personal information. If you believe a child has given us information, write to us and we will delete it.

Changes

We update this page when our practices change and change the date at the top. Public iki profile pages set no cookies and run no trackers; their own cookieless policy covers them.