Privacy Policy

CurbDay tells you when your waste collection happens. To do that we need your address and a way to reach you. This page explains exactly what we hold, why we hold it, and how to get rid of it.

CurbDay is operated from Ontario, Canada, and is the party accountable for the personal information described here. Questions, corrections, or deletion requests: support@curbday.ca.

What we collect

Account

Sign-in is handled by Clerk. Clerk holds your email address and password (or your Google/Apple sign-in), not us. In our own database we store only the user identifier Clerk gives us, whether reminders are switched on, and when you signed up.

Addresses

For each address you save we store the street address, the municipality, the collection zone it maps to, and an optional label you choose. This is the core of the service — without it we cannot tell you your collection day.

Reminders

If you enable push notifications, your browser gives us a push endpoint and two keys that let us deliver messages to that browser. We also keep a log of which reminders we sent you and when, so we don't send the same reminder twice. A push reminder names the address it is about, but it is encrypted with keys only your browser holds — the push service that delivers it cannot read the contents.

Billing

Payments run through Stripe. We never see or store your card number — Stripe handles it. What we store is your Stripe customer and subscription identifiers, your plan, its status, and when the current period ends, so we know whether to unlock Premium. Stripe also collects a billing address at checkout, which it needs to work out tax. That address is held by Stripe, not by us.

Usage and errors

We use PostHog to count page views, plus a small number of events we send ourselves — for example when an address search finds no supported city, which records the city name so we know where to expand. We have turned off PostHog's automatic click tracking and session recording. PostHog stores an anonymous identifier in a cookie and in your browser's local storage; we never link it to your account.

Sentry captures errors when something breaks, including technical details about the request that failed. We do not send it your name, email or address.

Why we collect it

To show your collection schedule, to send the reminders you asked for, to bill you if you subscribe to Premium, to answer your support emails, and to find and fix faults. We do not sell your personal information, and we do not use your address for advertising.

Who else processes it

We use these providers to run CurbDay. Each one only receives what it needs to do its job.

• Clerk — accounts, sign-in, your email address
• Neon — the database holding your addresses and settings
• Render — hosting for the site itself
• Stripe — payments and subscriptions
• Brevo — sending reminder and account emails
• Apple, Google and Mozilla push services — delivering push notifications to your browser
• Mapbox — address search. What you type into the address box is sent to Mapbox so it can suggest matches.
• PostHog and Sentry — usage analytics and error monitoring

We also obtain collection schedules from municipalities and their waste-collection contractors. For some municipalities we relay that request from our own servers, so the provider sees only us. For others your browser contacts the provider directly, which means that provider also receives your IP address alongside the address you looked up. Mapbox address search works the same way.

Most of these providers — Clerk, Stripe, PostHog, Sentry and Mapbox among them — store and process data in the United States, and one collection-schedule contractor serves some requests from a US host. US law may permit access by authorities there.

Who at CurbDay can see it

CurbDay has an internal dashboard, reachable only by the owner, which lists accounts with their email address, signup date and plan so we can run the business. It does not show anyone's home address.

Cookies

Clerk sets cookies that keep you signed in — the site cannot work without them. Clerk's bot protection also loads Cloudflare Turnstile, which checks that you are a real visitor. PostHog stores an anonymous identifier in a cookie and in local storage. We store your light/dark theme choice in your browser's local storage. We do not use advertising cookies.

How long we keep it

We keep your account data while your account exists. You can delete it yourself at any time from your account page, or email us at support@curbday.ca and we will do it for you. Either way we remove your profile, your addresses, your reminder settings, your push subscriptions and your reminder delivery history, and we strip your identifier out of the daily totals we keep for accounting. Records we are required to retain — chiefly billing and tax records held by Stripe — are kept for as long as the law requires.

Your rights

Under Canadian privacy law (PIPEDA) you can ask us for a copy of the personal information we hold about you, ask us to correct it, and withdraw your consent to our using it — though withdrawing consent for your address means we can no longer provide the service. Write to support@curbday.ca and we will respond within 30 days.

If you are not satisfied with our response you can complain to the Office of the Privacy Commissioner of Canada.

Children

CurbDay is not directed at children and we do not knowingly collect personal information from anyone under 13.

Changes

If we change this policy we will update the date at the top of this page. Material changes will be communicated by email.

See also our Terms of Service.