Draft for review. This page has not yet been reviewed by the owner or a lawyer.

Privacy

This page explains what edunews.ca keeps about people who subscribe to the morning briefing, and why. The site is published by The Iron Lantern Group.

What we store

When you subscribe we store:

• your email address;
• the board you chose;
• when you subscribed, when you confirmed and when you unsubscribed;
• the page you subscribed from;
• the version of the consent wording you agreed to.

Our hosting keeps request logs. Our own code records only the route and the result of a request, never an address.

Why we keep it

• Your address and board: to email you the briefing for your board.
• The dates, the page and the wording version: to show that you agreed, as Canada's anti-spam law requires, and to stop emails once you unsubscribe.

Where it is kept

Subscriber information is kept in Cloudflare's D1 database. It is not guaranteed to be stored in Canada; it may be stored in the United States.

Resend, which sends the email, processes your address in the United States. Cloudflare may process request logs outside Canada. The workflow that builds and sends the briefing runs on a server in Ontario.

Who sees it

These people and services handle your information:

• The Iron Lantern Group, the publisher, and the owner of the site;
• the n8n workflow that builds and sends the briefing, which reads the list of subscribers at send time.

These services process it for us:

• Cloudflare (hosting, the database and request logs);
• Cloudflare Turnstile (the check that you are a person; it processes your IP address);
• Resend (sends the email);
• GitHub (the site's code and the public briefing data, but no subscriber data).

Cloudflare, as our host, processes the IP address of every visitor to serve and protect the site.

No subscriber data is sent to Anthropic. The AI editor that writes the summaries sees only news items.

We do not sell your information.

How long we keep it

• Sign-ups you have not confirmed: deleted 7 days after the confirmation link expires.
• Confirmation emails waiting to be sent: deleted once sent, normally within a minute; at most about two days if the sending service is down.
• Ended subscriptions: we keep the record of your consent, with your address replaced by a one-way hash, and delete it 3 years after the subscription ended.
• Send and bounce records: deleted after 400 days.
• Backups: we keep a private export of the database once a month for 90 days, and the database host keeps point-in-time history for 30 days. An address you ask us to delete can stay in these backups until they age out, within 90 days.
• Failed runs of the workflow that sends email: n8n can keep the addresses and links in a failed run for up to 7 days before it deletes them.

A subscription ends when you unsubscribe, when email to you bounces, or when you report a briefing as spam.

The record of an ended subscription is pseudonymous, not anonymous: it holds a keyed hash of your address, made with a key that stays in our hosting account, so the record alone does not reveal the address.

Cookies and storage

This site sets no cookies when you subscribe. The check is provided by Cloudflare and runs under Cloudflare's own terms.

Your browser's storage holds two things on your own device: the board you chose and your brief tray, the stories you have ticked. This stays in your browser; we never receive it.

There are no analytics or advertising trackers on the site.

Asking about your information

You can ask to see, correct or delete what we hold about you. Write to us:

• Email: info@edunews.ca
• Mailing address: Mailing address to come

If you ask us to delete your information, we delete your subscriber records. The hashed consent record of an ended subscription stays for the period above, because the law asks us to be able to show that you agreed, unless you ask us to delete it too. Copies in backups age out as described above.

You can also unsubscribe at any time with the link in every briefing. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

We answer a request to see, correct or delete your information within 30 days.

Who is responsible for privacy

Privacy officer, The Iron Lantern Group: privacy@edunews.ca

If something goes wrong

If a breach of security involving your information creates a real risk of significant harm, we will tell you and the Office of the Privacy Commissioner of Canada, as the law requires, and keep a record of it.

Quebec

Subscriptions for Quebec boards open once our French-language service is ready.

Changes to this page

This page will change when sign-in opens.