CraftBeerEvents
Find Events
For organizers
Sign in
Legal

Privacy Policy

Effective August 25, 2026. How we collect, use, and protect your information.

Plain-English summary. We run a Canadian craft-beer events directory. We collect the minimum information needed to operate the site — submitted event details, listing-claim contacts, verified-organizer profile edits, and basic analytics. We use Google Analytics 4 with IP anonymization. We don't sell your data. You have rights under Canadian privacy law, including the right to access and delete your personal information.

1. Who we are

CraftBeerEvents.ca (the "Site", "we", "us", "our") is an independent Canadian craft-beer events directory. This policy explains how we handle personal information in connection with your use of the Site. If you have questions, contact us at hello@craftbeerevents.ca.

2. What we collect

We collect only what we need to run the Site:

  • Event submissions — when you use /submit-event: your name, email, relationship to the event, and the event details you provide. Stored in our review queue.
  • Listing claims — when you use /claim-listing: your name, business email, role, and any notes. We send a verification link to the email you provide; that link contains a signed, short-lived (24h) token.
  • Verified-organizer profile edits — text and URLs you save from /dashboard for the organization you've claimed.
  • User accounts — when you sign in with a magic link, we store your email address, any events you've saved, and standard session records. No password.
  • Newsletter — if you subscribe from the home page, your email and optional location (city or postal code).
  • Analytics — Google Analytics 4 collects standard anonymized visit data (pages viewed, referrer, device type, coarse city-level location). We enable IP anonymization on all events.
  • Server logs — our web server records normal HTTP request logs (IP, user-agent, path, response code) for operational reasons. Retained for at most 30 days.

We do not knowingly collect information from children under 13.

3. How we use your information

  • To operate the Site — publish verified events, respond to submissions, verify listing claims, deliver newsletters you asked for, and let signed-in users save events.
  • To communicate with you — reply to submissions, send verification emails, send newsletters you've opted into, notify you of account activity you've asked about.
  • To improve the Site — aggregate analytics to understand which pages, cities, and event types are useful.
  • To detect and prevent abuse — rate-limit forms, block spam submissions, respond to security incidents.
  • To comply with legal obligations, and to enforce our Terms of Service.

4. Cookies and similar technologies

The Site uses a small number of cookies:

  • _ga, _ga_<property> — Google Analytics 4 first-party cookies. Used to distinguish visits, not for cross-site tracking. IP is anonymized.
  • cbe_claim_session — our own HttpOnly, Secure, SameSite=Lax session cookie set after you verify a listing claim. Signed with a server secret; expires in 30 days. Contains no personal information other than an opaque claim ID and expiry.
  • next-auth.session-token (and related) — set by the sign-in flow if you create a user account. HttpOnly, Secure, SameSite=Lax. Deleted when you sign out.

You can clear cookies at any time in your browser settings, or block them entirely for this Site — the public Site will still work; personalized features (dashboard, saved events) require the session cookies.

5. Third parties we use

  • Google Analytics 4 — analytics (Google LLC).
  • Google Maps JavaScript API — interactive maps (Google LLC).
  • Google Fonts — Montserrat and Hanken Grotesk. Google may see your IP address and browser when fonts are fetched. See Google's privacy policy.
  • Resend — transactional email delivery for verification links and newsletters (resend.com).
  • WHC.ca — DNS management for the craftbeerevents.ca domain.
  • Our infrastructure provider — the Site is hosted on a virtual private server. IP addresses of visitors reach the server in the normal course of an HTTP request.

Each of these providers has its own privacy policy. We use them for the sole purposes described above and configure them to minimize data collection where the setting is available (e.g. IP anonymization in GA4).

6. Your rights

Under Canadian privacy law (PIPEDA and applicable provincial statutes), you have the right to:

  • Ask what personal information we hold about you.
  • Request correction of inaccurate information.
  • Withdraw consent for optional processing (e.g. unsubscribe from the newsletter).
  • Request deletion of your account and associated personal information, subject to record-keeping obligations.
  • File a complaint with the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, email privacy@craftbeerevents.ca from the email address associated with your account or submission. We aim to respond within 30 days.

If you are in the European Economic Area, the UK, or another jurisdiction with additional rights, we honour those rights to the extent they apply to visitors in your jurisdiction.

7. Data retention

  • Event submissions and claims: retained indefinitely as part of the editorial record, unless you request deletion.
  • User accounts: retained until you delete the account.
  • Analytics: GA4 retention is configured to 14 months.
  • Newsletter subscribers: retained until you unsubscribe.
  • Server logs: at most 30 days.

8. Security

We use HTTPS across the entire Site, HttpOnly cookies for session tokens, HMAC-SHA256 signatures for one-time verification tokens, rate limiting on public forms, and server-side validation on every submission. Passwords are never stored — we use magic-link email sign-in exclusively. No system is perfectly secure; if you become aware of a vulnerability, please report it to security@craftbeerevents.ca.

9. International data transfers

Our infrastructure and some of our third-party providers (notably Google) may store or process personal information outside Canada, including in the United States and the European Union. By using the Site you consent to this processing.

10. Changes to this policy

We may update this policy occasionally. The effective date above will change when we do, and material changes will be summarised at the top of this page for at least 30 days.

11. Contact

Questions about privacy: privacy@craftbeerevents.ca. For all other inquiries: hello@craftbeerevents.ca.

This policy is provided as a template appropriate for a small Canadian directory site and is not a substitute for legal advice. If you materially change how the Site collects or uses information — for example by adding advertising, remarketing, or new third-party integrations — you should have this policy reviewed.