Privacy Policy

1. About this policy

1.1 Who we are

The landing page tnaado.ca is published by TNAADO Inc., a corporation organized under the laws of Ontario, Canada, at 1050 King Street West, Toronto, Ontario, Canada M6K 0C7 ("TNAADO", "we", "us"). This policy covers the landing page at tnaado.ca only. It was last updated on 26 October 2026.

1.2 What this policy covers and does not cover

It explains what information is collected when you open the page at tnaado.ca, how it is used, who receives it and what choices you have. The Dispatch newsroom at dispatch.tnaado.ca, TNAADO's other websites and its apps are separate. The Dispatch has its own privacy policy. The other TNAADO sites have their own documents on this site. Cookies and tracking are described in more detail in Cookies and tracking.

1.3 Privacy contact

Privacy Officer, TNAADO Inc., 1050 King Street West, Toronto, Ontario, Canada M6K 0C7. Email: contact@tnaado.ca.

2. Summary

• The page has no accounts, forms, payments, comments, newsletter or advertising.
• You choose in a banner whether analytics runs. Google Analytics 4 and a first-party page-view counter run only if you choose "Accept all".
• Fonts load from Google, and Cloudflare provides security and, in our test, its own web analytics, for every visitor whatever the choice.
• We do not sell personal information for money.
• You can contact us about your information at contact@tnaado.ca.
• We disclose information to authorities only as the law requires or in narrow emergencies, and we can only produce what we hold. See Legal requests and disclosures.

3. Information collected

3.1 Information you give us

The page has no form. If you choose to email us, we receive your email address, the content of your message and anything else you include. We use it to reply and keep a record of the correspondence.

3.2 Information collected automatically by our hosting providers

The page is hosted by Vercel and is served through Cloudflare, which acts as a proxy and content delivery network. Like most web hosts, they receive your IP address, the page you request, the date and time, your browser's user-agent string and the referring address, and keep standard server and security logs to deliver and protect the page. Cloudflare also runs a bot-protection check and, in our test, loaded its web analytics script before any consent choice was made. We did not see that script set a cookie of its own; Cloudflare's security check set one (see Cookies and tracking).

3.3 Fonts

The page loads fonts from Google Fonts for every visitor. Your browser therefore requests those files directly from Google, which receives your IP address and browser details with the request.

3.4 Analytics, only if you choose "Accept all"

If you choose "Accept all", two things start. Google Analytics 4 (measurement ID G-Y561C98Y8Q) records page views and interactions, the page address and referrer, browser, device and operating-system details, language and an approximate location derived from your IP address, and sets cookies on your browser. In our test it also contacted Google advertising-related addresses (stats.g.doubleclick.net and www.google.ca/ads/ga-audiences); we have not verified which Google Analytics advertising features are switched on for our property. Our first-party page-view counter sends one record per visit to site.tnaado.ca: the page, the referring address, any campaign tags in the address, a first-party browser identifier stored in your browser until you clear it, how long the page was visible, the device type and your browser's user-agent string. The receiving server reads the IP address of the request and records location derived from it, and may record the IP address itself. Requests from browsers that identify themselves as bots are not recorded. If you choose "Reject non-essential", or have not chosen, neither of these starts.

3.5 Google AdSense verification tag

The page's source contains a Google AdSense account-verification tag, and tnaado.ca serves an ads.txt file. They tie our publisher account to the domain. The page loads no AdSense script, shows no ads and does not use AdSense cookies.

4. How we use information

We use information to operate, secure and maintain the page, to understand how many people reach TNAADO and which of its sites they go on to visit (only if you allow analytics), to answer messages sent to us and to meet legal obligations. We do not make automated decisions about you. We do not sell personal information for money.

5. Who receives information

5.1 Service providers

• Vercel Inc. hosts the page.
• Cloudflare, Inc. provides DNS, proxying, caching, security checks and, in our test, web analytics.
• Google LLC provides Google Fonts and, if you allow it, Google Analytics. Google's own privacy policy and the page "How Google uses information from sites or apps that use our services" describe what Google does with data it receives.
• A TNAADO-operated database receives the page-view records of the first-party counter.
• Email sent to us is handled by our email provider.

5.2 Disclosure required by law

We disclose information to authorities where the law requires it and in narrow emergencies. See Legal requests and disclosures and the section of this policy with that name.

6. Your choices

• Choose "Reject non-essential" in the banner, or reopen "Cookie preferences" in the page footer at any time to change your choice. Your choice is stored in your browser for up to a year and then asked again.
• Install the Google Analytics opt-out browser add-on, which stops Google Analytics measurement on all sites you visit.
• Block or delete cookies and site data in your browser settings. The page works without them.
• Turn off personalised advertising in Google Ads Settings.

7. Legal requests and disclosures

7.1 In short

We disclose information to authorities when the law requires it, we disclose without a court order only in the narrow emergencies below, and we can only produce what we actually hold. We do not promise that we will never disclose information. The separate Legal requests and disclosures document sets out the process and how to send us a request.

7.2 When the law requires us to disclose

We comply with valid legal process, for example a court order, search warrant, production order or subpoena from a court or authority with jurisdiction over us, and with a lawful demand or order to preserve data. Some statutes require reports without any request. In Canada, the Act respecting the mandatory reporting of Internet child sexual abuse and exploitation material requires a person who provides an Internet service to the public to report, and to notify police, when it has reasonable grounds to believe its service is being used to commit such an offence. In the United States, 18 U.S.C. 2258A requires providers to report apparent child sexual exploitation to the National Center for Missing and Exploited Children once they have actual knowledge. We say "to the extent the law applies to us" because no lawyer has told us whether this site is a provider under those statutes. Neither statute requires us to search for such material, and we do not. Canada's privacy law (PIPEDA, s. 7(3)) also lists situations where an organization may disclose personal information without consent, including to comply with a subpoena, warrant or court order. Requests may also arrive through mutual legal assistance treaties between Canada and the United States. Because our hosting and delivery providers are United States companies, United States legal process can reach data they hold even though TNAADO is an Ontario company, and Canadian process can reach data we hold.

7.3 When we may disclose without a court order

We may disclose limited information without a court order only where we reasonably believe, in good faith, that (a) there is an imminent risk of death or serious physical harm to a person and disclosure could help prevent it, (b) child sexual abuse or exploitation material is involved and the law requires or permits a report, or (c) disclosure of the minimum necessary is needed to detect or stop fraud or abuse aimed at our systems or to protect our legal rights, and then only to a party with a real need. We do not volunteer information about lawful activity to authorities, and we do not treat an informal request, email or letter from police as enough, on its own, to hand over personal information outside those cases.

7.4 What we do first

When we receive a request we (a) check that it is genuine and comes from an authority with jurisdiction; (b) read what it actually requires, and ask the authority to narrow it if it is too broad, vague or unrelated to what we hold; (c) tell the person affected before disclosing, where the law allows and where we can reach them (for most visitors we hold no contact details); (d) where we believe an order is unlawful, overbroad or would reveal protected information, ask the court or authority to vary or cancel it within the time the law allows (a Canadian production order, for example, gives a short window to give notice that we will apply); (e) disclose only what is required; and (f) keep a record of the request and of what we gave and when.

7.5 What we can produce

• Email you send us and our replies, held in our email system.
• Only if you chose "Accept all" in the privacy banner: one first-party page-view record per visit, sent to site.tnaado.ca (the page, the referring address, campaign tags, a first-party browser identifier that stays in your browser until you clear it, how long the page was visible, device type and your browser's user-agent string). The receiving server also reads the IP address of the request and records location derived from it, and may record the IP address itself. We have not verified how long these records are kept. Requests from browsers that identify themselves as bots are not recorded.
• Nothing else about individual visitors. The page has no accounts, forms, payments or user content.
• Held by others, not by us: Request logs at Vercel and Cloudflare, and Cloudflare Web Analytics, which loaded in our test before any consent choice. Google holds what Google Analytics (after "Accept all") and Google Fonts receive, under Google's own policy. Visitors to the TNAADO sites that this page links to are covered by those sites' own documents. Vercel hosts the site and Cloudflare sits in front of it as a proxy and cache, so both see visitors' requests, including IP addresses. Those providers may receive legal process directly, and their policies, not ours, govern what they do.

7.6 Material you generate with this site

This page generates nothing for you. It has no tools, uploads, forms or accounts, so there is no material of yours that we hold other than email you send us and, if you opted in, the page-view record described above.

7.7 What we do not promise

We do not promise that we will never disclose information to authorities. A court may order us not to tell you that we received a request or what it asked for, in which case we cannot notify you. Deleting something on our side does not guarantee it is gone from backups, caches, provider logs or a copy already preserved under a legal order.

8. Where information is processed

We are based in Canada. Vercel, Cloudflare and Google operate internationally, and the page's origin is hosted by Vercel in the United States and cached by Cloudflare at locations worldwide. Information they receive may be processed outside your province, state or country, including in the United States, where privacy laws may differ from those where you live.

9. Retention

Server and security logs are kept by Vercel and Cloudflare under their own policies. Google Analytics keeps event data for the period set in our Google Analytics property (Google offers 2 months or 14 months); we have not verified our setting. We have not verified how long the first-party counter's records are kept. Your banner choice is stored in your browser for up to a year. Email correspondence is kept for as long as needed to deal with your message and for our records.

10. Your rights

10.1 Canada

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) you may ask what personal information we hold about you, ask to correct it, challenge our compliance, and withdraw consent subject to legal and contractual limits. You may complain to the Office of the Privacy Commissioner of Canada.

10.2 United States

Depending on the state where you live, you may have the right to know or access personal information, to delete or correct it, and to opt out of targeted advertising or the sale or sharing of personal information. We do not sell personal information for money and run no advertising on this page. We include this section so that visitors in any state know how to reach us, whether or not a particular state's law applies to us. We do not discriminate against anyone for making a request.

10.3 How to make a request

Email contact@tnaado.ca and say what you want. A page-view record is tied only to a browser identifier, so to find yours we may ask you to tell us when you visited and to send that identifier from your browser's site data. We may ask you to confirm that the request is yours, and we will respond within the time required by the law that applies. Information held in Google Analytics, by Google, Vercel or Cloudflare is controlled through those providers' own tools, and we will help where we can. If you disagree with how we handled a request, tell us and we will review it.

11. Browser signals and email

Do Not Track: there is no agreed standard for responding to "do not track" browser signals, and we do not respond to them. We also do not read Global Privacy Control or similar signals ourselves. Google Analytics, if you allow it, may collect information about your online activities over time and across other websites, and whether it responds to such signals is for Google. Email: we send no marketing email and no commercial electronic messages from this site, and we have no mailing list. If that changes we will ask for your consent first and include an unsubscribe route, as Canada's anti-spam law (CASL) and the United States CAN-SPAM Act require.

12. Children

The page is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, contact us at contact@tnaado.ca and we will delete it.

13. Visitors outside the United States and Canada

The page is aimed at visitors in Canada and the United States. For visitors in the European Economic Area, the United Kingdom and Switzerland, Google Analytics and the first-party counter do not start until you choose "Accept all". Cloudflare's security and analytics script and Google Fonts load whatever you choose. We do not claim to meet European requirements beyond that.

14. Security

The page is delivered over HTTPS with HTTP Strict Transport Security. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

15. Changes to this policy

We will post changes on this page and update the date at the top. Material changes take effect when posted.