# Your data at Review Standings: what we keep and what you can ask us to change

> What personal data Review Standings collects, why, how long it is kept and which rights you have under PIPEDA and, for Québec readers, Law 25. Draft pending legal review.

Source: https://reviewstandings.com/privacy/
Updated: 2026-11-13

Review Standings collects as little personal data as it can. Your province choice is stored on your own device, fonts are served from our own domain, and analytics are off by default. If you write to us, we receive your e-mail address and message. This policy is a draft based on PIPEDA and Law 25 and is pending legal review.

## What we collect

**Data and purposes · site records · checked 2026-11-13**

| Data | Purpose | Where it is kept |
|---|---|---|
| Your selected province | Show the age limit, help lines and operators for that province | Your browser's local storage; not sent to us |
| E-mail address and message, if you write to us | Reply to you and, for corrections, fix the page | Our mailbox; retention period: [to be supplied by the owner] |
| Server logs at the hosting provider | Security and delivery of pages | Not confirmed as of 2026-11-13 |
| Analytics | None by default | Not applicable |

We do not ask for your name, your betting history or financial details. Details of browser storage are on the [cookies page](https://reviewstandings.com/cookies/).

## Consent and your rights

We explain the purpose before or when we collect data, and we ask for your agreement where the law requires it. Under PIPEDA you can ask to see the personal information we hold about you, ask us to correct it, and withdraw consent.

To use these rights, write to the address on the [contact page](https://reviewstandings.com/contact/). Corrections to the site itself go through [corrections](https://reviewstandings.com/corrections/).

## Readers in Québec

Law 25 requires consent that is clear, voluntary, informed and specific, and technologies that identify, locate or profile you must be disclosed and not switched on by default. We do not use them.

The person responsible for the protection of personal information: [name or title and contact: to be supplied by the owner]. Whether data sent outside Québec needs a privacy impact assessment is an open question that we have put to a lawyer.

## Who is responsible

Data controller: [legal entity name and registration number: to be supplied by the owner]. See the [about page](https://reviewstandings.com/about/).

## Sources

- [Office of the Privacy Commissioner, PIPEDA fair information principles](https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/p_principle/)
- [CAI Québec, consent](https://www.cai.gouv.qc.ca/protection-renseignements-personnels/information-entreprises-privees/consentement-personnes-entreprises)
- [CAI Québec, responsibility of businesses](https://www.cai.gouv.qc.ca/protection-renseignements-personnels/information-entreprises-privees/responsable-protection-renseignements-personnels-entreprise)

## What changed

- 2026-11-13: first draft, pending legal review.
