Privacy Policy

Draft — NOT REVIEWED

Written by reading this website's source code on 2026-08-05. Nobody has reviewed it — not a lawyer, not a privacy officer, not the district. It is not legal advice, and whether Quebec's Law 25 or another privacy law applies here is an open question.

What this site collects

Four places collect information about a person, and no others. There are no visitor accounts, no payments and no file upload on a public form.

• Volunteer applications. Your name, email address, Toastmasters experience, availability and reasons for applying, plus an optional phone number, club and resume link. You must tick a consent box. Your application is stored so that district leaders can read and compare the applications for that position, and so can an operator of the platform, as below. It is never made public, and no IP address or browser information is stored with it.

• Contact form messages. Your name, address and message are emailed to the district and stored nowhere here; your address is used only to reply.

• Accessibility barrier reports. A description of the barrier and, if you want a reply, an email address — nothing else, and no IP address. These reach the people who operate this platform, not the district; a district leader cannot read them.

• The leadership roster. Leaders are listed publicly by name, role and program year; the home addresses, phone numbers and member numbers in the official Toastmasters list are never imported.

Who can see what you send

Your application is read by district leaders — signed-in members with the owner or editor role here. The people who operate this platform can also read it. No operator holds standing access: any may start a support session, which requires a reason that is recorded, ends by itself after 30 minutes, and marks every application they open, change or delete as an operator's action. It is how a fault volunteers cannot repair is reproduced.

How long it is kept

An application is removed once 12 months have passed from the day you applied — not from the day the position closed — and the position has stopped recruiting. A job runs on the first of every month and removes what is due. It has not yet run in production: information held here has never been old enough for it, the database dating from 2026-06-29.

A barrier report is kept for 12 months.

Who else receives information

• Supabase — the database and sign-in system; everything this site stores is stored there.

• Vercel — hosting. Every request passes through its network, which sees your IP address, browser and the page asked for.

• Resend — outgoing email. The notification of an application carries a name, the position title and the applicant's address as reply-to.

• Toastmasters International — the club directory. This site asks toastmasters.org for this district's clubs, with no information about any person.

• DeepL — page translation. No visitor information.

• Sentry — error reports.

• Google — Drive holds the district's images and documents, loaded by your browser.

• Eventbrite and Zeffy — event imports and embedded registration forms.

• GitHub — an administrator's request to change this site.

YouTube and Vimeo are reached only by your browser, on the videos page; an embedded player or form may set cookies this site does not control. No artificial-intelligence service receives anything from this site. Where these companies keep what they receive has not been established.

Cookies and measurement

This site sets no cookie on a visitor who does not sign in. The only two are for signed-in administrators: the sign-in session cookie, and a short-lived one recording that a platform operator is acting on behalf of a district. There is no advertising cookie, no cross-site tracking, no marketing pixel and no consent banner. Vercel Web Analytics and Speed Insights do run on every page; neither sets a cookie, and both send Vercel information about your visit.

Asking to see your information, or to have it deleted

You may ask district leaders to remove your information at any time — or to see it, correct it, or withdraw a consent — at the address at the end of this policy. A leader does it by hand and the deletion is recorded. There is no self-service page and no export.

One exception: do NOT write to the district about a barrier report — district leaders cannot read those. Use the same barrier-report form, quoting what you wrote; a platform operator deletes it.

Who is responsible for this site

This site is published by District901, run by member volunteers. It is the district responsible for the information described above; the platform that operates this website is not.

Write to ron+d901-general@taverns.red about anything in this policy. No person has yet been formally designated as responsible for the protection of personal information for this site, and the questions it leaves open have not been put to anyone qualified.