Privacy Policy
Version of September 2, 2026
Rather than open with several paragraphs of reassurance, here is the operative content of this policy in one table. Everything after it is explanation, not new obligation.
| Category | Purpose | Basis | Retention |
|---|---|---|---|
| Server log line | Availability and security of the site | Necessary to operate the service | Weeks; rotated by the host |
| Email content | Reading and answering your message | Your own decision to write | Up to 24 months |
| Order correspondence | Sending transfer details and the file | Performance of the contract | Up to 24 months |
| Bank transfer reference | Matching a payment to an order | Performance of the contract | Up to 24 months |
| Consent cookie | Not repeating the banner question | Your answer to the banner | 6 months |
Five rows, and no sixth held back. There is no analytics identifier, no advertising tag, no profile and no card data anywhere in the list.
Who stands behind the table
Olivier Gagnon, an individual and not a company, at 2 Place Ville Marie, Montréal, QC H3B 2C9, Canada, reachable at [email protected]. Law 25 requires a named person responsible for the protection of personal information, and that is him.
Three instruments apply: the federal Personal Information Protection and Electronic Documents Act, the Québec Act respecting the protection of personal information in the private sector as amended by Law 25, and Canada’s Anti-Spam Legislation.
Notes on the first row
A web server cannot hand over a file without writing a line about it: the requesting IP address, the browser’s user-agent string, the path, the time and the response code. Those lines are read when something is broken or when automated traffic needs identifying, and they are never merged with anything else or used to work out who a reader is. The host rotates them out within weeks, which is a technical arrangement rather than a promise this site can vary.
Notes on the middle three rows
Nothing on this domain asks for your details. There is no form of any kind, no sign-up field, no comment box and no upload. Information reaches the mailbox because you chose to send it.
An order for the Opening Layout Handbook adds the reference your bank attaches to an Interac e-Transfer, which is how the payment is matched to the correspondence. No card number, expiry date or security code is ever seen by this site or by Olivier Gagnon; a transfer moves between your bank and his, and this domain has no payment page for card details to be typed into.
Order threads are kept a little more deliberately than a general enquiry, so somebody who loses the file six months later can ask again and be recognised rather than treated as a stranger. Earlier deletion is available on request and is carried out without argument.
What never happens
Personal information is not sold, rented, traded, licensed or disclosed to advertisers or data brokers. No commercial electronic message is sent from this address, which is how CASL is satisfied here: there is no mailing list to join, so there is nothing to leave. A reply to your own email is not marketing.
The only third parties involved at all are the hosting provider and the email provider. Both may run infrastructure outside Québec and outside Canada; Law 25 requires that to be assessed rather than ignored, and where it is the case the provider is contractually bound to protections comparable to those required here. What travels is log lines and correspondence, nothing else.
Beyond the edge of this domain
Pages here link to store listings for the applications they discuss. Google Play is operated by Google LLC under its own privacy policy, which this document neither controls nor extends. Once you follow such a link, what happens to your information is entirely a matter for whoever runs the destination.
What you may require
Under PIPEDA and Law 25 you can ask for confirmation that information about you is held and a copy of it, ask for correction of anything inaccurate or incomplete, ask where the information came from, withdraw a consent previously given, and have your correspondence deleted. Write to [email protected] saying which. A first reply usually arrives within a couple of business days; the request itself is completed inside thirty days.
If the answer is unsatisfactory, complaints go to the Commission d’accès à l’information du Québec or to the Office of the Privacy Commissioner of Canada. Neither requires you to have raised the matter here first.
If the site changes in a way that affects the table above, this page is rewritten and its date moves with it.