Privacy Policy

CurbDay tells you when your waste collection happens. To do that we need your address and a way to reach you. This page explains exactly what we hold, why we hold it, and how to get rid of it.

CurbDay is operated from Ontario, Canada, and is the party accountable for the personal information described here. Questions, corrections, or deletion requests: support@curbday.ca.

What we collect

Account

Sign-in is handled by Clerk. Clerk holds your email address and password (or your Google/Apple sign-in), not us. In our own database we store only the user identifier Clerk gives us, whether reminders are switched on, and when you signed up.

Addresses

For each address you save we store the street address, the municipality, the collection zone it maps to, and an optional label you choose. This is the core of the service — without it we cannot tell you your collection day.

Reminders

If you enable push notifications, your browser gives us a push endpoint and two keys that let us deliver messages to that browser. We also keep a log of which reminders we sent you and when, so we don't send the same reminder twice. A push reminder names the address it is about, but it is encrypted with keys only your browser holds — the push service that delivers it cannot read the contents.

Billing

Payments run through Stripe. We never see or store your card number — Stripe handles it. What we store is your Stripe customer and subscription identifiers, your plan, its status, and when the current period ends, so we know whether to unlock Premium. Stripe also collects a billing address at checkout, which it needs to work out tax. That address is held by Stripe, not by us.

Usage and errors

We use PostHog to count page views, plus a small number of events we send ourselves — for example when an address search finds no supported city, which records the city name so we know where to expand. We have turned off PostHog's automatic click tracking and session recording. PostHog stores an anonymous identifier in a cookie and in your browser's local storage; we never link it to your account.

Sentry captures errors when something breaks, including technical details about the request that failed. We do not send it your name, email or address.

We also keep our own small record of how the site is used, stored on our own servers rather than sent to anyone else. For each event we record what happened — a page was viewed, an address lookup was started, a schedule was shown, the pricing page was reached — along with which city it concerned, whether it succeeded, and the domain of the site that referred you (for example google.com). To count returning visitors we store a random identifier in a cookie named cd_aid, which lasts a year and means nothing outside CurbDay.

We never record the address you type, or the full web address of the page you are on. Pages are recorded only as a general pattern such as /city/…, never with anything you entered. We delete these records after 180 days. They are not shared with anyone and are never used for advertising.

Advertising

When we run advertising on Facebook or Instagram, a Meta pixel loads on our pages so we can tell whether an ad led to a signup. It records that a page was viewed, along with the page address, your IP address and your browser type, and Meta may match that to a Facebook or Instagram account you are signed in to.

It also records four milestones, so we can tell which ads bring people who go on to use CurbDay: that an address lookup succeeded, that an account was created, that a checkout was started, and that a free trial began. The first two carry nothing else whatsoever. The last two carry the plan price ($3 CAD per month or $30 CAD per year) and nothing else. The lookup milestone records that you looked up an address and never which address.

We have turned off Meta's automatic collection, which by default reads form fields and the text of buttons you click. Because address suggestions are buttons labelled with your address, that setting is what keeps your address away from Meta. We send Meta no address, no email and no account identifier, and no address ever appears in a CurbDay web address. You can block the pixel with any content blocker without affecting how CurbDay works.

Why we collect it

To show your collection schedule, to send the reminders you asked for, to bill you if you subscribe to Premium, to answer your support emails, and to find and fix faults. We do not sell your personal information, and we do not use your address for advertising.

Who else processes it

We use these providers to run CurbDay. Each one only receives what it needs to do its job.

• Clerk — accounts, sign-in, your email address
• Neon — the database holding your addresses and settings
• Render — hosting for the site itself
• Stripe — payments and subscriptions
• Brevo — sending reminder and account emails
• Apple, Google and Mozilla push services — delivering push notifications to your browser
• Mapbox — address search. What you type into the address box is sent to Mapbox so it can suggest matches.
• PostHog and Sentry — usage analytics and error monitoring
• Meta (Facebook, Instagram) — advertising measurement, and only while we are running ads

We also obtain collection schedules from municipalities and their waste-collection contractors. For some municipalities we relay that request from our own servers, so the provider sees only us. For others your browser contacts the provider directly, which means that provider also receives your IP address alongside the address you looked up. Mapbox address search works the same way.

Most of these providers — Clerk, Stripe, PostHog, Sentry, Meta and Mapbox among them — store and process data in the United States, and one collection-schedule contractor serves some requests from a US host. US law may permit access by authorities there.

Who at CurbDay can see it

CurbDay has an internal dashboard, reachable only by the owner, which lists accounts with their email address, signup date and plan so we can run the business. It does not show anyone's home address.

Cookies

Clerk sets cookies that keep you signed in — the site cannot work without them. Clerk's bot protection also loads Cloudflare Turnstile, which checks that you are a real visitor. PostHog stores an anonymous identifier in a cookie and in local storage. We set one cookie of our own, cd_aid, holding a random identifier that lets us count visitors without knowing who they are; it lasts a year. We store your light/dark theme choice in your browser's local storage. We do not use advertising cookies.

How long we keep it

We keep your account data while your account exists. You can delete it yourself at any time from your account page, or email us at support@curbday.ca and we will do it for you. Either way we remove your profile, your addresses, your reminder settings, your push subscriptions and your reminder delivery history, and we strip your identifier out of the daily totals we keep for accounting. Records we are required to retain — chiefly billing and tax records held by Stripe — are kept for as long as the law requires.

The anonymous usage records described above are deleted automatically after 180 days, whether or not you have an account.

Your rights

Under Canadian privacy law (PIPEDA) you can ask us for a copy of the personal information we hold about you, ask us to correct it, and withdraw your consent to our using it — though withdrawing consent for your address means we can no longer provide the service. Write to support@curbday.ca and we will respond within 30 days.

If you are not satisfied with our response you can complain to the Office of the Privacy Commissioner of Canada.

Children

CurbDay is not directed at children and we do not knowingly collect personal information from anyone under 13.

Changes

If we change this policy we will update the date at the top of this page. Material changes will be communicated by email.

See also our Terms of Service.