Privacy Policy
Draft prepared October 28, 2026. Last updated: [DATE]
1. About this policy
This policy explains what personal information TheLines collects, why, who sees it, and your choices. The Service is operated by [LEGAL BUSINESS NAME] ("we", "us"). We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and email marketing in line with Canada's Anti-Spam Legislation (CASL). [LAWYER: confirm which laws apply.] Our privacy contact is [PRIVACY OFFICER NAME], [PRIVACY EMAIL].
2. What we collect
| What | Details | Why |
|---|---|---|
| Account | First and last name, email, optional phone number, and your password (kept in scrambled form by our sign-in provider, so we can't read it). When you signed up or signed in. | To create and secure your account and contact you about it. |
| Your choices | Whether you confirmed you're 19 or older, and whether you agreed to promotional emails. A log of each change, with the date and time, the exact wording you agreed to, and the IP address of the device. | To send promotions only to people who agreed, and to keep proof that they did. |
| Activity | The bars you've hearted, and the bars you've asked to get a feed. | To show totals, rank bars, and decide where to reach out. |
| Suggestions | The type, your message, a bar name or bar you chose, linked to your account. | To read and act on your suggestion. |
| Host a Feed requests | Your name, bar, role, email, optional phone, your note, your confirmation that you can speak for the bar, and your account if you were signed in. | To reply to your request. |
| Technical | A sign-in cookie (see section 10). Our hosting provider's server logs may record your IP address, browser details and the pages requested. We briefly use your IP address to limit abuse such as repeated sign-in attempts. [LAWYER/CHECK: confirm what the hosting provider logs and for how long.] | To run the Service and keep it secure. |
| Pictures and counts | See section 4. | To show the live feeds. |
3. How we use it
To run the Service, keep accounts secure, reply to you, improve the Service, send promotional emails only if you agreed, enforce our Terms of Service, and meet legal obligations. We don't sell personal information.
4. Camera feeds and the face blur
- A small computer at the participating bar takes a picture from a camera, automatically finds faces and blurs them, and sends only the blurred picture to our server. The original picture isn't saved or sent.
- It also estimates how many people are in view. The count and capture time are printed on the blurred picture and sent with a frame identifier.
- Cloudflare R2 stores the latest blurred picture per camera, delivered publicly through Cloudflare's CDN. Each accepted new picture overwrites the previous picture, normally about every 30 seconds. Browsers check visible pictures every 15 seconds while the page is visible.
- Supabase stores the current count and count history with timestamps and frame identifiers, not the pictures. Counts become stale after 15 minutes by default. The latest picture remains available until replaced or removed; its capture time is printed on the image. CDN copies may remain briefly after replacement. [Set the count-history retention period.]
- The blur is automatic and can miss faces, for example in poor light or at an odd angle. We don't use facial recognition and don't try to identify anyone. We don't collect or publish audio.
- If you're concerned about a picture or want a feed paused or removed, email [PRIVACY EMAIL]. We'll respond within [X days].
- [LAWYER: what the venue agreements and in-venue signage must say, and whether this section needs to say more about the camera hardware at venues.]
5. Consent and promotional emails
- Promotional emails go only to people who tick both "I am 19 or older" and the promotions box. Neither is ticked for you. You can create an account without ticking either.
- Every promotional email will say who it's from and have an unsubscribe link. You can also change your choices on your Account page at any time. Each change is logged.
- You'll still get emails needed for your account, such as email confirmation and password resets.
6. Who we share it with
We use service providers to run the Service, and they may handle your information only to provide their service to us:
- Sign-in and database provider: Supabase [CONFIRM]
- Website hosting and blurred image storage: Cloudflare
- Email sending provider: [NAME, when chosen]
- Newsletter tool: [NAME, if any]
We may also disclose information if the law requires it or to protect people's safety or our rights. [LAWYER: business sale or merger wording.] Hearts and feed requests are only shown as totals, never with names.
7. Where your information is stored
Our providers may store and process information outside Canada, including in the United States. Laws there may allow authorities to access it. Our sign-in and database provider's region is [REGION], and our hosting region is [REGION].
8. How long we keep it
| What | How long |
|---|---|
| Account, choices, hearts, feed requests, suggestions | Until you delete your account. Deleting it from the Account page removes these, including your consent log. [LAWYER: decide whether to keep consent records for a period after deletion.] |
| Host a Feed requests | Kept separately for [PERIOD] after our last contact, then deleted. Deleting an account doesn't delete these, so ask us if you want one removed. |
| Pictures | See section 4. |
| Server logs | [PERIOD, per hosting provider] |
9. Your choices and rights
- You can ask to see the personal information we hold about you, correct it, delete it, or withdraw your consent.
- On your Account page you can edit your name, phone number and email choices, reset your password, and delete your account.
- Or email [PRIVACY EMAIL]. We'll respond within [30 days].
- If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada (www.priv.gc.ca).
10. Cookies and similar technology
- We use one cookie to keep you signed in and protect our forms. It lasts up to 14 days or until you sign out.
- If you start a suggestion and haven't sent it, your browser keeps the draft on your device so you don't lose it. It's removed when you send it or clear your browser's data.
- We don't currently use advertising or analytics cookies. If that changes, we'll update this page.
11. Security
We use reasonable safeguards, such as encrypted connections, scrambled passwords, limited access to our systems, and limits on sign-in attempts. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we'll notify you as the law requires.
12. Children
The Service isn't directed at children. You must be at least [MINIMUM AGE] to create an account. If we learn we've collected information from someone younger, we'll delete it.
13. Changes to this policy
We'll post updates here with a new date, and tell you by email or on the site for important changes. [BUILD/LAWYER: this policy must be updated before chat, newsletters, new analytics, or audio are added.]
14. Contact
[PRIVACY OFFICER NAME]
[MAILING ADDRESS]
[PRIVACY EMAIL]