Privacy Policy

The short version

• We collect your email address and whatever you choose to post.
• No advertising trackers. No third-party analytics. No tracking pixels. None. We do not sell your data and there is nobody to sell it to.
• Your profile and public proof are visible to anyone on the internet, including search engines. That is the point — but know it before you post.
• Private task briefs, submissions and messages are visible only to the people in that task.
• Our servers are outside Canada.
• You can get a copy of your information, correct it, or delete your account.

1. Who is responsible

Taylor Boll, 9 Ebony Street, Lacombe, Alberta, Canada T4M 0A8.

Privacy contact: hello@thestrongsuit.app

2. What you give us

• Email address — to sign you in and send notifications. Seen by you and our admins. Never shown to other members.
• Waitlist application — why you want in, your note, an optional link and an optional photo. Seen only by our admins and by you. The photo is stored privately and opened through a temporary link.
• Profile — name, username, headline, bio, links, photo, your Strong Suits. Visible to anyone on the internet.
• What you want to learn or can teach — seen by you and our admins.
• Proof of work — title, summary, your contribution, links, images. Visible to anyone on the internet unless you hide it.
• Tasks you post — visible to anyone, except the detailed brief if you mark the task confidential.
• Confidential task briefs — only you and the person you accept.
• Applications and pitches — only the person who posted that task.
• Submissions and review feedback — only the two people in that task.
• Messages — task, swap and lounge messages are visible only to the people in that conversation. We do not read them routinely. See section 4.
• Projects, posts, comments, likes, cosigns — visible to anyone on the internet.
• Feedback and bug reports — your message, the page you were on, your browser type and screen size, and an optional screenshot. Seen by our admins. Screenshots are stored privately.

3. What gets created as you use it

• XP, levels, completed tasks, Founding Member number — public. That is the point.
• Product events — a record that something happened and when, kept in our own database. This is not a third-party analytics service and does not follow you around the internet.
• Last-active time — admins only, never shown to other members.
• Invitations you sent and who accepted — you see counts, admins see the detail.
• Moderation records — reports and our decisions.

4. What we do not collect

• We do not store your IP address. Our hosting providers process IP addresses to deliver the service, as any provider does. We do not keep our own record.
• No location data, no contacts, no device identifiers.
• No advertising cookies, no tracking pixels, no session recording, no third-party analytics.
• No payment information — we do not process payments.
• We do not use your content to train AI models and do not give it to anyone else for that.

5. Cookies and browser storage

We do not use tracking or advertising cookies. The site stores four things in your browser, all necessary: your sign-in token; where you were heading if you opened a shared link while signed out; an invite code if you arrived through someone's link; and a one-time flag that lets a stale tab reload itself instead of showing an error.

That is everything. You can clear it in your browser settings at any time — you will just need to sign in again.

6. When we would look at private content

We do not routinely read private messages, submissions or confidential briefs. We may look only where: you ask us to for support; someone reports specific content and we need to review it; we have reasonable grounds to think it is necessary to investigate a breach, fraud or a threat to someone's safety; or the law requires it.

When an admin takes a significant action, we log who, what and why.

7. Who we share it with

We do not sell your information. We do not share it for advertising. We use these providers to run the service:

• Macaly (Czech Republic) — hosting, file storage, sending our email. Processes data in the United States, United Kingdom and Switzerland.
• Convex (United States) — our database. Infrastructure located in Ireland.
• Resend (United States), engaged through Macaly — delivering our emails.

Each can only use your information to provide services to us.

We may also disclose information if you ask us to; to comply with a law or court order; to investigate a suspected breach, fraud or threat to safety; to defend a legal claim; or to a successor if the service is transferred — we would tell you first.

8. Your information leaves Canada

Your information is stored and processed outside Canada — in Ireland, the United States, the United Kingdom and Switzerland.

What that means: while it is in another country it is subject to that country's laws, and it may be accessible to that country's courts, law enforcement and national security authorities under their legal processes.

We stay accountable for your information when we hand it to a provider, and our contracts require them to protect it to a comparable standard.

9. How long we keep it

We keep information for as long as your account is open, and moderation and security-breach records for as long as we need them or the law requires.

We are setting retention periods for messages, feedback and product records, and we will update this policy when they are in place. If you want something removed sooner, ask us.

10. Your rights

Get a copy. Settings, then Your data, then Download my data. You get everything we hold that belongs to you as a single file, straight away. If you would rather ask us, email hello@thestrongsuit.app from your account address and we will respond within 30 days — the law requires it, and there is no charge for a reasonable request. Either way, do it before deleting your account: we cannot rebuild it afterwards.

Correct it. Most things you can edit in Settings. For anything else, email us. If we disagree that something is wrong, we will record your objection alongside it.

Delete your account. See section 11.

Complain. Tell us first at hello@thestrongsuit.app — we would rather fix it. You can also complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca).

11. Deleting your account

Settings, then Delete account. You will type DELETE to confirm. You need to finish or cancel active tasks first — someone else is relying on you.

What we delete:

• Your email address, and the sign-in records attached to it. You are signed out everywhere.
• Your name, headline, bio, links and profile photo. Your username is replaced with a random one.
• Every image you uploaded — your profile photo, proof images, project photos, day-update photos and your application photo.
• Your waitlist application.
• Your day updates.
• Your notifications.

What we change rather than delete:

• Messages, comments and lounge posts you wrote become "[deleted]". The rows stay so the other person's conversation still makes sense, but your words are gone.
• Product records of what happened stay as counts, with your account unlinked from them.

What stays, and why:

• Task-verified proof. When another member reviewed and approved your work, that record is theirs as much as yours, and they relied on it. The record survives — but your name is removed and your images are deleted with everything else.
• Moderation and security records, where we need them to keep the Service safe or because the law requires it.

What we cannot undo: anything that was public may already have been copied — screenshots, search engine caches, people who saved an image. We can remove it from The Strong Suit. We cannot remove copies other people made.

Deletion cannot be reversed. There is no restore. If you are unsure, hide your proof and stop signing in instead.

12. How we protect it

Sign-in is a code emailed to you, so there is no password to steal — but whoever controls your email controls your account. Use two-factor authentication on it.

Every request to our servers checks who you are before returning anything. Private information lives in separate records only the people involved can reach. Application photos and feedback screenshots are private and opened with temporary links. Admin access is restricted and significant admin actions are logged with a reason. All traffic is encrypted.

No service can promise perfect security. If there is a breach that creates a real risk of significant harm to you, we will report it to the Privacy Commissioner of Canada and tell you as soon as we can, as the law requires.

Treat public uploads as permanent. Anything you upload publicly can be copied by anyone who sees it.

13. Children

The Strong Suit is for people 18 and over. We do not knowingly collect information from anyone under 18. If we learn we have, we will delete it and close the account.

14. Where it is available

Canada and the United States only. Not directed to people in Europe, the United Kingdom or elsewhere.

15. Changes

We will update the version and date, and for material changes we will tell you before they take effect.

16. Contact

Taylor Boll, 9 Ebony Street, Lacombe, Alberta, Canada T4M 0A8. hello@thestrongsuit.app