Firewood Tracker
Privacy Policy
Last updated: October 28, 2026
1. Introduction
Firewood Tracker is committed to protecting your personal information in accordance with Quebec's Act respecting the protection of personal information in the private sector (Law 25) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). This policy describes what information we collect, how we use it, and the rights available to you.
2. Information We Collect
We collect the information you give us and the information the app needs to work: your email address, your first name and community nickname (optional), your password (hashed with Argon2id, never readable), your sign-in method (email or Facebook), and your language and preferences; the home locations, woodstoves and heating prices you enter; your firewood stacks, stack photos, fire logs and burn-prediction settings; your chat messages and the files you share in chat; your orders and reservations; your invitation history and your community rewards (kindling and rings); your giveaway entries and, if you win, the shipping address you provide (stored encrypted); and, if you verify your account, a selfie that is deleted once it has been reviewed. If a firewood business adds you as a customer, it may record your name, contact details and delivery address for its own use. We also log technical information, such as IP addresses, for security, rate limiting and fraud prevention.
3. Facebook Sign-In
If you choose to sign in with Facebook, we receive your name and email address from Meta Platforms, Inc. servers. We do not store your Facebook password. Your Facebook access token is encrypted at rest using AES-GCM before being stored. You can disconnect Facebook at any time in Settings → Security → Disconnect Facebook, which erases the token and the link to your Facebook account; removing Firewood Tracker in your Facebook settings erases them too. Meta's privacy policy is available at: facebook.com/privacy/policy.
4. Payments via Stripe
Payments are processed by Stripe, Inc. (stripe.com), a PCI-DSS compliant payment service provider. We never store your full card number or sensitive payment data, we only retain a Stripe transaction confirmation token. See Stripe's privacy policy at: stripe.com/privacy.
5. Use of Information
Your information is used to: run your account and the features you use, process your orders and reservations, send transactional emails (confirmations, order updates, reports you subscribe to, password resets), show local weather and your savings figures, calculate and display your community rewards and run giveaways, keep the platform secure and prevent fraud, and meet our legal obligations. We do not use your information for advertising.
6. Sharing of Information
We never sell, trade, or rent your personal information. We share it only as needed to run the service. With the firewood businesses you deal with: a seller sees the name and contact details it recorded for you and your orders with it, never your woodpile, your fire logs or your chats with others. With our service providers: Stripe, Inc. (payments); our transactional email provider; our hosting, storage and security providers, including Cloudflare, Inc. (site protection and bot checks) and Backblaze, Inc. (storage of uploaded photos and files); Sentry (error reports, which may include technical details of your request); Mapbox, Inc. (maps: when a seller plans deliveries, the delivery address of an order is sent to Mapbox to place it on a map); Open-Meteo (weather and place search: the place names you search for and the coordinates of your saved locations); Giphy (the search terms you type in the GIF picker); and Anthropic, PBC (AI features: the questions you ask the firewood assistant in chat, the text of voice entries, the figures behind your burn-prediction summaries, and, for firewood businesses, the equipment manuals they upload and the questions their team asks about them, the receipts they photograph or upload to be read, and the questions their team asks the Help assistant; never your email address or password). These providers may only use your data to provide their service to us. Some of them process data outside Quebec and Canada, including in the United States. Firewood stands are public listings: when a seller publishes a stand, its name, map location, prices, hours, payment methods and photos (and its street address, if the seller chooses to show it) appear on a public page that search engines and AI assistants may index. Members’ personal information is never part of a stand page. Equipment listings are public too: when a seller lists a machine, its title, price, condition, photos, the business’s name and public town (never its yard) and the machine’s service history (with costs only if the seller chooses) appear on a public page that search engines and AI assistants may index. When you press Message the seller, the business owner sees your name or nickname and can reply in chat; a report you send about a listing goes to the site team, not to the seller.
7. Data Retention
We retain your personal information for the duration of your membership. When you delete your account, your data is removed fourteen (14) days after the request, as described on the Data Deletion page, except the anonymized records others rely on, unless a longer retention period is legally required. Transaction data is retained for seven (7) years in accordance with Canadian tax requirements.
8. Security
We apply appropriate technical and organizational measures to protect your data: password hashing with Argon2id, sensitive token encryption with AES-GCM, HTTPS/HSTS-secured communications, role-based access control, and audit logging of sensitive actions.
9. Your Rights
Under Law 25 and PIPEDA, you have the right to access your personal information, to receive it in a structured, commonly used technological format, to have it corrected, and to request its deletion (subject to our legal obligations). You can download a copy of your information yourself at any time in Settings → Your data, and close your account in Settings → Delete my account. For anything else, contact our Privacy Officer at the address below. We commit to responding within thirty (30) days.
10. Cookies
We use only essential cookies, for your sign-in session. They are configured with the HttpOnly, Secure, and SameSite=Lax attributes. Cloudflare, which protects the site, may also set strictly necessary security cookies. We do not use advertising, analytics, or third-party tracking cookies.
11. Changes to This Policy
We may update this policy from time to time. We will notify you of any material changes by email at least fifteen (15) days before they take effect. The date of the last update is shown at the top of this page.
12. Contact, Privacy Officer
For any questions about this policy or to exercise your rights, write to us at: [email protected], Firewood Tracker, Quebec, Canada.
