Privacy Policy

Who we are

Tillag is operated by [LEGAL ENTITY NAME], [MAILING ADDRESS].

The person responsible for the protection of personal information is [PRIVACY OFFICER NAME], reachable at [CONTACT EMAIL]. Quebec's Law 25 requires that this person be named, and it reaches us because we send the Tillag brief to readers in Quebec.

What we collect

When you join the waitlist we collect your email address, and optionally the role you select and the free-text note describing what you struggle to keep up with.

Alongside your consent we also record the date and time you gave it, the wording you agreed to, your IP address, and your browser's user-agent string. We record these because Canada's Anti-Spam Legislation places the burden of proving consent on us, and a bare checkbox is not proof.

We do not run analytics, advertising, or tracking scripts, and no third party sets a cookie on this site. Our typefaces are served from our own server, so visiting Tillag does not tell anyone else that you were here.

Cookies

Tillag sets two cookies, both our own, and both only so that signing in works. One keeps you signed in to the news feed; the other keeps an administrator signed in to the admin pages. Neither is set until you sign in or join the waitlist.

They hold a random identifier and nothing else: no email address, no name, no record of what you read. The identifier points to a row in our database, which means signing out genuinely ends the session rather than merely forgetting it on your device.

Because they exist only to make signing in work, we do not ask for your consent to set them, and there is no setting to turn them off, because without them there is no way to stay signed in. You can delete them at any time in your browser, which signs you out.

Why we collect it

To send you the Tillag daily brief and news about early access, the things you consented to.

To understand which feeds to build. If you tell us what you follow, that shapes what gets made.

Where it is stored

Your information is stored in a Postgres database that runs on our own server, a Google Cloud instance in Toronto, Ontario. The database listens only on that machine, so it is not reachable from the internet.

Email delivery is handled by Resend, which processes data in the United States. This means your email address leaves Canada when we send you a message. We are telling you plainly rather than implying that everything stays in the country.

Artificial intelligence

Tillag uses a large language model to summarize news articles. Only publicly published news content is sent to that model. Your email address, your role, and anything you write in the free-text field are never sent to it.

Who else sees it

Google Cloud, which provides the server the site and the database run on. Resend, which delivers email. Nobody else. We do not sell, rent, or share your information, and we do not send it to advertisers.

How long we keep it

Consent records are kept for at least three years after the last message we send you, which is the period during which a regulator may ask us to prove consent.

If you unsubscribe we keep your record rather than deleting it, marked as unsubscribed. Deleting it would destroy the evidence that you opted out and risk you being added again later.

Free-text notes are reviewed after twelve months and removed unless they are still useful.

Withdrawing consent

Every email we send carries a working unsubscribe link. It requires no login and takes one click. We act on it immediately, and in any case within ten business days.

You may also email [CONTACT EMAIL] to withdraw consent, ask what we hold about you, ask for it to be corrected, or ask for it to be deleted.

Changes

If this policy changes we will update the date at the top. If a change affects what you consented to, we will ask you again rather than assume the old consent covers it.