Privacy Policy

Typealoud ("we," "us," "our") is operated from the Province of British Columbia, Canada. We respect the privacy of every visitor and aim to collect only the personal information that is reasonably necessary to operate the website, keep it secure and improve it over time. This Privacy Policy explains what we collect, why we collect it, how long we keep it, who we share it with, the rights you have over it, and how to reach us if you have a question or a complaint.

This Policy is intended to satisfy our obligations under the British Columbia Personal Information Protection Act ("BC PIPA"), the federal Personal Information Protection and Electronic Documents Act ("PIPEDA") where applicable, the Canada Anti-Spam Legislation ("CASL") in relation to any commercial electronic messages we send, and the privacy principles published by the Office of the Information and Privacy Commissioner for British Columbia ("OIPC BC"). Where you visit us from outside Canada, we still aim to apply these standards as a baseline.

1. Who we are and how to reach our Privacy Officer

Typealoud is published by the operator identified on our contact page. Our records are maintained in British Columbia. As required by BC PIPA section 4, we have designated a Privacy Officer who is responsible for ensuring our compliance with this Policy and with applicable privacy law. The Privacy Officer can be reached at privacy@typealoud.com or by mail at the address provided on request.

2. The personal information we collect

We collect only what we need. The categories below cover everything a typical visitor will encounter, and we describe each category in plain language so you can make an informed choice about using the site.

(a) Automatically collected technical information

Like almost every website, our servers automatically receive your Internet Protocol (IP) address, the type and version of your browser and operating system, the page you requested, the page that referred you (if any), the date and time of the request, and a small amount of diagnostic information that the browser sends by default. This data is used to deliver the page, defend against abuse, debug errors and generate aggregate usage statistics.

(b) Information you give us voluntarily

If you email us, submit a font, send a bug report, or fill in any future form on the site, we receive whatever information you choose to include — typically your name, your email address and the contents of your message. We use that information only to respond to your inquiry and to keep a reasonable history of correspondence.

(c) Preferences stored on your device

We use a single browser localStorage entry to remember your light- or dark-theme choice. That value lives entirely on your device and is never transmitted to our servers. Clearing your browser storage will reset it.

(d) Aggregate analytics

We use privacy-friendly, aggregate analytics to understand which pages get read and how the site performs. Where any IP address is processed, it is truncated or hashed before storage.

3. Why we collect it (purposes)

Under BC PIPA we are required to identify, in advance, the purposes for collecting your personal information. We collect and use the information described above for the following purposes only:

• to operate, secure, monitor and improve the Typealoud website;
• to render font previews and provide the search and browsing experience;
• to respond to messages you send us;
• to detect, investigate and prevent fraud, abuse and security incidents;
• to comply with applicable Canadian and British Columbia law; and
• to compile aggregate, non-identifying statistics about site usage.

We do not sell or rent personal information to anyone.

4. Legal basis and consent

Our processing is grounded in your implied or express consent, as contemplated by sections 6 to 8 of BC PIPA and Schedule 1 of PIPEDA. By using the site you are deemed to have consented to the routine collection of the technical information described in section 2(a) for the purposes described in section 3. Where the law requires express consent — for example before sending a commercial electronic message under CASL — we will ask for it separately and clearly.

You may withdraw consent at any time, subject to reasonable notice and to any legal or contractual restrictions. To withdraw consent, write to our Privacy Officer at the address above. Withdrawing consent may limit the features of the site that we can offer you.

5. Cookies and similar technologies

The site relies on a minimal set of first-party storage entries that perform essential functions such as remembering your theme preference and keeping you logged in to any account feature we may add in the future. Where we introduce optional cookies, we will request your consent the first time you encounter them and provide an interface for changing your choice.

6. Third parties and service providers

We use a small number of carefully chosen service providers to host the site, deliver assets and monitor uptime. These providers act as our processors and are contractually required to handle personal information consistently with this Policy and applicable Canadian privacy law. They include:

• our hosting and content-delivery provider, used to serve pages and static assets;
• open-source font CDNs (such as Google Fonts and Bunny Fonts) used only to render font previews — these providers may see your IP address as part of a normal HTTP request;
• error-monitoring and uptime services used to diagnose outages; and
• aggregate analytics services configured for privacy as described in section 2(d).

We do not knowingly disclose your personal information to any third party for marketing purposes. If a Canadian court order, subpoena or binding regulatory order requires us to disclose information, we will comply only to the extent legally required and, where lawful, we will notify you.

7. Storage location and cross-border transfers

Our infrastructure providers operate data centres in multiple jurisdictions. As a result, your personal information may be stored or processed outside of Canada, including in the United States and the European Economic Area. While the data is outside Canada, it is subject to the laws of the host jurisdiction, which may permit foreign government or law-enforcement access in circumstances that would not be permitted in Canada. By using the site, you acknowledge this possibility. We choose providers that offer contractual protections aligned with Canadian privacy expectations.

8. How long we keep your information

We retain personal information only as long as is reasonably necessary for the purposes for which it was collected, plus any period required by law. Concretely:

• server logs are retained for up to 30 days for security and debugging;
• aggregate analytics are retained in non-identifying form for up to 24 months;
• email correspondence is retained for as long as is reasonably required to handle the inquiry and any follow-up, and is purged on a periodic basis after that; and
• where you have asked us to delete information, we will do so within 30 days unless retention is required by law.

9. How we protect your information

We use reasonable physical, organisational and technological safeguards to protect personal information against loss, theft and unauthorised access, disclosure, copying, use or modification. These measures include encryption of data in transit (HTTPS), encryption of backups at rest, limited and audited access for our team, secrets stored in a managed vault and a least-privilege model for production systems. No safeguard is perfect; we will notify affected users and the OIPC BC as required if a breach occurs that creates a real risk of significant harm.

10. Your rights

Subject to a small number of statutory exceptions, BC PIPA and PIPEDA give you the right to:

• request access to the personal information we hold about you;
• request correction of information that is inaccurate or incomplete;
• withdraw consent (subject to section 4 above);
• ask us to delete information that is no longer required for a lawful purpose; and
• file a complaint with our Privacy Officer or, if unresolved, with the OIPC BC.

To exercise any of these rights, write to privacy@typealoud.com. We will respond within 30 days, and we will not charge a fee for routine access requests. We may ask you for proof of identity before releasing personal information.

11. Children

The site is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact our Privacy Officer and we will delete it promptly.

12. Changes to this Policy

We may update this Policy from time to time as our practices, the law or the services we use change. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be highlighted in a notice on the site for at least 30 days before they take effect.

13. Governing law

This Privacy Policy and any dispute arising out of or in connection with it are governed by the laws in force in the Province of British Columbia and the federal laws of Canada applicable in that province. Any complaint that cannot be resolved with our Privacy Officer may be referred to the Office of the Information and Privacy Commissioner for British Columbia.

14. Contact

Questions, requests and complaints can be sent to the Typealoud Privacy Officer at privacy@typealoud.com. We aim to acknowledge every request within two business days and to provide a substantive response within 30 days.