Privacy policy
What we collect, why, where it’s stored, and your rights under PIPEDA and Québec’s Loi 25.
What we collect
Email, username, password hash (held by our authentication provider), province, the content you post, your votes, ratings and reports, the messages you send the team from Contact the team (deleted with your account), and security logs. We do not ask for or infer health information.
If you sign in with Google, Apple or another provider, it shares your email (and usually your name and photo) with our authentication provider. We use them only to sign you in and never show them: you choose a username instead. The provider knows you use Pepforum.
Where it lives
Our database is hosted in Canada (Montréal region). Our web servers run in the United States (Ohio); your requests pass through them. This cross-border processing is disclosed in our Loi 25 notice.
Your rights
Download all your data from Settings › Privacy. Correct your profile anytime. Delete your account from Settings: your profile is anonymised immediately and your login removed within minutes. Your karma history remains as an anonymous record so other members’ standing stays correct.
What we never do
Sell data, list vendors, or target ads by profile or inferred health status.
Contact
Privacy officer: privacy@pepforum.ca