Privacy policy

Short version: you can use Vikenda without an account, we set no cookies of our own, our analytics are anonymized, and the only personal information we keep is the email address you give us if you subscribe.

Last updated: July 26, 2026

Who we are

Vikenda ("we", "us") is an independent events guide operated from Ontario, Canada. This policy explains what information we collect when you use the site, the API, or our emails, and what we do with it. We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for email, Canada's Anti-Spam Legislation (CASL).

Browsing the site

No account is needed and we set no first-party cookies. Two things happen when you browse:

• Anonymous usage counters. Our own servers count page views and clicks in aggregate (for example, "the wine category was viewed N times today"). These counters store no IP address, no device identifier, and no browsing history tied to you.
• Google Analytics. The production site uses Google Analytics 4, which does not log or store IP addresses, to understand overall traffic. Google sets its own cookies for this; see Google's privacy policy.

The "My plan" shortlist is stored only in your browser's local storage. It is never sent to our servers; sharing a plan works by encoding it in the link itself.

If you subscribe to emails or alerts

If you sign up for the digest or alerts we store your email address, the interests you selected, and — as CASL requires us to keep evidence of consent — the time you confirmed your subscription and the IP address the confirmation came from. Subscription is double opt-in: nothing is sent until you click the confirmation link. Marketing consent is a separate, unticked checkbox, and every email includes a one-click unsubscribe. Unsubscribing takes effect immediately.

If you enable browser push notifications, we store the push subscription your browser issues (an endpoint and keys — not your email) along with the same consent record. You can revoke this at any time in your browser settings.

If you use the API or MCP tools

API and MCP requests are logged for 30 days to understand what people and agents ask for. Logs record the method called and its arguments, plus a coarse client class ("browser", "agent", or "bot") — no IP address, no user-agent string, and no session identifiers. Email addresses appearing in request arguments are redacted before logging.

Service providers

We share data only with the providers needed to run the service:

• Google Analytics 4 — site analytics, without logging IP addresses.
• Resend — sends our confirmation and digest emails; processes subscriber email addresses on our behalf.
• CARTO / OpenStreetMap — serve the map tiles on pages with a map; your browser requests tiles from their servers directly.

Google and Resend process data on servers outside Canada (primarily in the United States), where it is subject to the laws of those jurisdictions. We do not sell personal information, and we do not share it with anyone else except where the law requires.

Retention

API logs are kept for 30 days. Aggregate usage counters contain no personal information and are kept indefinitely. Subscriber records are kept while your subscription is active; after a subscription ends, we retain the consent record for three years so we can demonstrate CASL compliance, then delete it.

Safeguards and breaches

We collect little, and we protect what we do collect with access controls and encrypted connections. If a breach of security safeguards ever creates a real risk of significant harm, we will notify affected individuals and report it to the Privacy Commissioner of Canada as the law requires.

Your rights

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it (which for subscribers means removing your record entirely, not just unsubscribing). Email [email protected] and we'll respond promptly. If you're not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

Children

The site is a general-audience events guide and is not directed at children. We do not knowingly collect personal information from children.

Changes

If we change this policy we'll update this page and the date above. Material changes affecting subscribers will be noted in the digest.

Contact

Our Privacy Officer — the person accountable for Vikenda's handling of personal information — can be reached at [email protected]. Questions, access requests, and complaints all go there first.