Privacy · The Canada Brief

Who is responsible

Reading The Canada Brief needs no account and no cookie, and the site shows no advertising. Google Analytics and the Meta pixel set cookies only if you accept them (see “Cookies”).
To rank the stories, we anonymously record how each one is read: time spent, pages viewed, whether it was read to the end, pauses, moving on to the next story, shares, and where you came from in one word (Instagram, Google…). These records contain no identifier and no IP address, and are erased after 30 days.
Cloudflare, which serves the site, also counts visits anonymously (Web Analytics): no cookie, no identifier, no tracking you from one site to another.
Your browser keeps the list of stories you have already seen, to grey out their ring, and the number of your visits to each. This list never leaves your device: only the visit number is sent with the anonymous record.

tcb_session: set only when you like a story (♥) or sign in. It holds nothing but a randomly generated identifier, so we can remember your likes and your sign-in. It expires after 30 days without a visit, or one year if you are signed in; your likes are then forgotten, but stay counted in each story's total.
tcb_oauth: set during sign-in with Google, it keeps the page to return to and a check value. It is erased on your return, after 10 minutes at the latest.
Google Tag Manager loads on every page, in Google's Consent Mode. Until you click “Accept”, it sets no cookie and Google Analytics only receives cookieless signals (a page was viewed), with no identifier. If you accept, Google Analytics sets its cookies (_ga) to count visits and the pages read, and the Meta pixel sets Meta's cookies (_fbp) and tells Meta that you visited The Canada Brief, and which stories you opened and shared, to measure and target our ads on Facebook and Instagram. If you decline, no cookie is set and The Canada Brief works the same way. Your choice stays in your browser; to change it, use the button below.

To comment, you sign in with Google. We receive and keep the identifier of your Google account, your email, your first name and your last name. They are never displayed, and we do not email you.
Only the name you choose (your first name, to start with) appears under your comments.

Each new comment is checked by a moderation service before it appears. This service receives the text of the comment and the title of the story: not your name, not your email.
Until then, only you can see it. A rejected comment is permanently deleted.
A published comment stays online until you ask for your account to be erased, which also erases your comments.

Accounts, comments, likes and reading records are in a database, on a single server rented from Hetzner [to complete: server country].
Cloudflare sits in front of the site: it serves it, and every visit goes through it. The story images are stored with Cloudflare (R2).
Google is used for sign-in, the moderation service for comments and Google (Tag Manager, Analytics) receives the cookieless signals described under “Cookies”; if you accept, Google Analytics and Meta receive what they measure. Nobody else receives your data, and nothing is sold.

Reading records: 30 days.
tcb_session cookie and your likes: 30 days without a visit, one year if you are signed in.
tcb_oauth cookie: 10 minutes at most.
Meta cookies (_fbp), if you accepted them: up to 90 days.
Account and comments: until you ask for them to be erased.
Rejected comment: deleted as soon as it is rejected.

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you can ask to see the personal information we hold about you, ask for it to be corrected, and withdraw your consent.
To do so, write to [email protected].
To erase what your browser keeps, delete the data for this site in its settings.
You can also contact the Office of the Privacy Commissioner of Canada.