What this siteknows about you.

In short

Most of this site does not know who you are.

You can read the whole post-secondary program and browse the entire store without an account, and nothing about you is stored on our side. No analytics, no advertising, no tracking pixels, no third-party cookies.

One feature needs an account: the community events calendar. That is the only place personal information is collected, and most of this page is about that.

Store orders are placed by email at the moment. Nothing is charged through this website and no card details pass through it.

What is collected

Four things, and only if you ask for an account.

What	Why	When
Your email address	It is how you sign in, and how the office tells you whether your access was approved.	When you request calendar access
Your name	So the person reviewing the request knows who is asking. An email alone is not enough to approve a member.	When you request calendar access
Your password	Only if you set one. Hashed by Google’s authentication service, never stored on our side, and nobody at the Nation can see it.	When you request calendar access
Or a Google sign-in	You can use a Google account instead of a password. Google then tells this site your email address and the name on that account, and nothing else: not your contacts, your files, or anything in your inbox.	Only if you choose that option
Approval status	Whether your account is waiting, approved, or turned off. The site does not record who made that decision or when.	When someone decides

Having an account also means the office can email you about the program: deadlines, intake sessions, and notices to the membership. Those messages are sent one at a time rather than as a group, so no member ever sees another member’s address. A copy of what was sent, and to which address, is kept so the office has a record of what went out.

Stored on your device

Three small things, none of them sent anywhere.

The site keeps a little information in your own browser. It never leaves your device, we cannot read it, and clearing your browser data removes all of it.

What	Why	Where
Application checklist ticks	So you can gather documents over a week and come back to where you left off.	Local storage, this device only
A “seen it” flag	So the opening animation on the front page is shortened the second time you visit in a session.	Session storage, cleared when you close the tab
Sign-in token	Only if you have a calendar account. It is what keeps you signed in between visits.	Set by Google’s authentication service

None of these are used to identify you, follow you across sites, or build a profile. There is no advertising on this site and there never will be.

Who else handles it

Companies outside the Nation.

Being straight about this matters more than a paragraph of legalese: some of your information sits on servers the Nation does not own.

Who	What they hold	Why
Vercel	Your IP address and browser, in ordinary server logs, every time a page loads.	They host this website. Every website host sees this.
Google (Firebase)	Your email, name, password hash, and approval status, if you have a calendar account.	It runs the sign-in and the database behind the calendar.
Google (Fonts)	Your IP address and browser, on the pages that still load typefaces from them. Nothing else, and nothing that identifies you by name.	Being removed. The document pages already serve their own.
Payment processor		Not in use. Store orders are placed by email and nothing is charged through this site.

Before launch. Confirm which region the Firebase project sits in. It is chosen once at project creation and cannot be changed afterwards. If member data being held outside Canada is a concern for Council, that decision has to happen now rather than after the calendar has accounts in it.

How long

Until you ask, or until the account is closed.

Approved accounts stay until you ask us to remove them. Denied and abandoned requests are cleared out periodically.

Sent messages are kept as a record of what the office told the membership, and a message already sent cannot be unsent. See Delete my data for exactly what a deletion removes and what survives it.

One limit worth stating plainly: if the office has turned an account off, that account cannot delete itself from this site. Removal then has to go through the office by phone. That is deliberate, because a turned-off account usually means there is a reason the record is still needed, but it does mean the fastest route is a call rather than a button.

Your rights

Ask, and you get an answer from a person.

• See what we hold. Email the office and you get the whole record. It is a handful of fields.
• Fix it. Wrong name, changed email, say so.
• Delete it. Request removal here.
• Complain. To the band office first. If that goes nowhere, the Office of the Privacy Commissioner of Canada takes complaints from the public.

Last reviewed: