Privacy Policy

The Vancouver List ("we", "us", "the Site") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding that information. By using the Site, you agree to the practices described here.

Account information: When you create an account, we collect your email address, date of birth (to verify you are 18+), and a hashed password. Your date of birth is never displayed publicly.

Provider profile information: Providers may optionally provide a display name, age, gender, contact email, and phone number. This information is displayed publicly on their listings.

Listing content: Text, images, and metadata submitted as part of a listing are stored and displayed publicly on the Site.

Usage data: We collect anonymised view counts per listing using a one-way HMAC derived from your session — no personally identifiable information is stored in analytics records.

IP addresses: IP addresses are used transiently for rate limiting (e.g. login attempts, review submissions) and are not stored beyond the sliding rate-limit window.

• To create and maintain your account
• To display provider listings and profiles to visitors
• To send transactional emails (password resets, invite codes)
• To enforce rate limits and prevent abuse
• To provide providers with anonymised analytics about their listings
• To comply with applicable law and respond to lawful requests

We do not sell, rent, or share your personal information with third parties for marketing purposes.

We use a single session cookie to keep you logged in. This cookie is HTTP-only and expires after 7 days of inactivity. We do not use third-party tracking cookies or advertising cookies.

Account data is retained for as long as your account is active. Listing images uploaded by providers are retained for up to 6 months after a listing is removed, after which they are permanently deleted. You may request deletion of your account and associated data at any time (see Section 7).

We use Resend to deliver transactional emails. Your email address is transmitted to Resend solely for the purpose of sending emails you have requested (e.g. password reset). We do not share any other personal data with Resend.

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and personal data
• Withdraw consent at any time by closing your account

To exercise any of these rights, contact us at legal@vancouverlist.cc.

Passwords are stored as bcrypt hashes and are never recoverable in plain text. Sessions are managed via signed, HTTP-only cookies. We apply rate limiting to authentication endpoints to protect against brute-force attacks.

This Site is strictly for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, their account will be terminated immediately.

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the Site after changes are posted constitutes acceptance of the updated policy.

This Privacy Policy is governed by the laws of the Province of British Columbia and the federal laws of Canada applicable therein, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

For any privacy-related questions or requests, contact us at legal@vancouverlist.cc.