IRCC.com

Privacy Policy

Last updated: April 2026

This privacy policy describes how IRCC.com (“we,” “us,” or “the site”) collects, uses, and protects personal information of visitors. We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information we collect

1.1 Information you provide

  • Contact form submissions: name, email, message subject, and message contents.
  • Newsletter signups (when launched): email address and any preference data you provide.
  • Account data (when accounts launch): email, hashed password, profile preferences.

1.2 Information collected automatically

  • Server logs: IP address, user agent, referrer, request timestamps, response status codes. Used for security and rate-limiting.
  • Analytics: aggregated, privacy-respecting page-view data (Cloudflare Web Analytics, which does not use cookies or fingerprinting).
  • Optional analytics (only with consent): Google Analytics 4 cookies if you accept them.

2. How we use information

  • To respond to contact-form messages.
  • To prevent abuse and enforce rate limits on forms and APIs.
  • To produce aggregate, anonymized site-usage statistics.
  • To improve content and site functionality.
  • To deliver a newsletter you've subscribed to (with an unsubscribe link in every email).

We do not sell personal information. We do not share personal information with third parties for their marketing.

3. Cookies

IRCC.com uses essential cookies to enable site functionality (e.g., remembering theme preference and consent choices). We do not use first-party cross-site tracking cookies or fingerprinting techniques.

With your consent (via the cookie banner shown on your first visit), we also use:

  • Google Analytics 4 — measures aggregate page-view and engagement data. Cookies: _ga, _ga_*. Retention: 14 months.
  • Google AdSense — serves the advertising you see on the site. Uses cookies such as __gads, __gpi, and the NID cookie set by doubleclick.net to deliver, measure, and (where you have consented) personalise advertising. AdSense is operated by Google LLC.

You can opt out of personalised advertising at any time:

  • Through Google's Ads Settings page.
  • By visiting the Digital Advertising Alliance opt-out (US) or AdChoices Canada.
  • For EEA, UK, and Swiss users: Google's consent management platform displays a separate prompt before any personalised ads serve. Declining personalisation in that prompt limits you to non-personalised contextual ads.

You can also withdraw consent for all non-essential cookies by clearing your browser's cookies for ircc.com — the consent banner will reappear on your next visit.

4. Third-party services

The site uses the following third-party services that may receive limited visitor data:

  • Cloudflare (hosting, security, edge analytics that don't use cookies) — privacy policy
  • Google LLC (AdSense, Analytics 4) — privacy policy. Google is the data controller for the data its services collect.
  • Resend (transactional email for the contact form and operational alerts) — privacy policy
  • GitHub (source-code hosting; not used for visitor data)

Each receives only the data necessary to provide its service. Where required by law (EEA, UK, Switzerland, California, Quebec), we have Data Processing Agreements in place with each.

4a. Third-party advertising disclosure (per Google AdSense policy)

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.

Google's use of advertising cookies enables it and its partners to serve ads to our users based on their visit to this site and/or other sites on the Internet.

Users may opt out of personalised advertising by visiting Google Ads Settings. Alternatively, users may opt out of a third-party vendor's use of cookies for personalised advertising by visiting aboutads.info.

5. Data retention

  • Contact form submissions: retained for 12 months unless you request deletion.
  • Server logs: retained for up to 90 days for security purposes.
  • Newsletter subscribers: retained until you unsubscribe.
  • Account data: retained until you delete your account.

6. Your rights under PIPEDA

You have the right to:

  • Know what personal information we hold about you.
  • Request a copy of that information.
  • Request correction of inaccurate information.
  • Withdraw consent and request deletion (subject to legal retention obligations).
  • Lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

To exercise these rights, contact us via our contact form.

7. International transfers

Some of our service providers (e.g., Cloudflare, Resend) may process data in jurisdictions other than Canada. We use providers with privacy practices reasonably equivalent to Canadian standards.

8. Security

We implement reasonable technical and organizational measures to protect personal information, including HTTPS, secret management for credentials, rate limiting, and access controls. No system is 100% secure; we encourage you to use a strong unique password if/when account features launch.

9. Children

IRCC.com is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date reflects the most recent revision. Material changes will be highlighted on the homepage for at least 30 days.

11. Contact

Privacy questions or requests: contact form. We respond within 30 days (typically much faster).