Privacy Policy

Last updated: October 28, 2026

This policy explains how ShipTidy ("we", "us") handles personal information when you visit shiptidy.com, join our waitlist or use our website checks. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector as amended by Law 25.

1. Who is responsible

ShipTidy is provided by ShipTidy, a business registered in Ontario, Canada.

Privacy Officer (person in charge of the protection of personal information). Contact: hello@shiptidy.com. Mailing address: 6-2160 Highway 7, Suite 702, Vaughan, ON L4K 1W6, Canada.

2. What we collect and why

• Waitlist: when you join the waitlist, we collect your email address, whether you ticked the consent box, the exact consent wording you saw, and the date/time you signed up. Purpose: to email you about ShipTidy's launch, new checks and offers, and to keep a record that you agreed to receive those emails (required by Canada's Anti-Spam Legislation, CASL).
• Hashed IP address: when you join the waitlist or run a check, we compute a one-way hash (SHA-256 with a secret salt) of your IP address. We do not store the raw IP address. Purpose: to limit abuse (rate limiting) and detect spam signups.
• Website checks: the URL you ask us to check. We fetch that public page and a few standard files (such as robots.txt, sitemap.xml and favicon.ico) and show you the results. We do not save the URL or the results in our database. Purpose: to provide the check you asked for.
• Technical logs: our hosting provider (Cloudflare) records standard request information such as time, path, status code and the domain name you checked, and may process your IP address to deliver and secure the service. Purpose: operating, securing and debugging the service.

We do not use advertising trackers or third-party analytics cookies, and we do not sell or rent personal information. We do not use your information to make automated decisions about you.

3. Consent

We only add you to the waitlist if you tick the (unticked by default) consent box. You can withdraw consent at any time by using the unsubscribe link in any email we send or by emailing hello@shiptidy.com. We will act on unsubscribe requests within 10 business days.

4. How long we keep it

• Waitlist entries: until you unsubscribe or ask us to delete them, and in any case no longer than 24 months after you sign up unless you renew your consent. After you unsubscribe we may keep your email address and the date you unsubscribed on a suppression list, solely so we don't email you again, plus the consent record for as long as needed to show compliance with CASL.
• Rate-limit records (hashed IP): deleted automatically, normally within 48 hours.
• Technical logs: kept by Cloudflare for a short period (currently a few days for our Worker logs) under Cloudflare's own retention policies.

5. Service providers and processing outside Canada and Quebec

We host the site, database and checks on Cloudflare, Inc. (United States), which runs a global network. Your information may therefore be stored or processed in the United States and other countries outside Canada and Quebec, where it may be accessible to courts and authorities under local laws. We use Cloudflare under contract terms that require it to protect personal information. Before relying on providers outside Quebec we assess the privacy risks as required by Law 25. When we add an email-sending provider or payment processor (for example Stripe), we will update this policy to name it.

6. Your rights

You can ask to:

• access the personal information we hold about you and learn how it's used and shared;
• correct information that is inaccurate or incomplete;
• delete your information, or withdraw consent to its use;
• (Quebec residents) receive computerized personal information you gave us in a structured, commonly used format, and ask us to stop disseminating it, as provided by law.

Email hello@shiptidy.com. We'll respond within 30 days and may need to verify your identity. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

7. Security

We use HTTPS everywhere, store IP addresses only as salted hashes, limit access to our database to the account owner, and collect only what we need. If a confidentiality incident creates a risk of serious injury, we will notify affected people and the appropriate regulators as required by law.

8. Children

ShipTidy is intended for people building websites and apps and is not directed to children under 16.

9. Changes

We'll post any changes on this page and update the "Last updated" date. For significant changes we'll notify waitlist members by email.