Legal
Privacy
Enjoy Montréal is a free directory for Montréal. You can use almost all of it without an account and without telling us who you are. This page says exactly what is recorded when you do use it.
Last updated 9 October 2026.
The short version
- Nothing is sold, and no ad network or cross-site tracker runs here. A business can pay for a place marked Sponsored; it is matched to the page you are on, never to who you are.
- No cookie banner, because no cookie here tracks you. Cookies keep you signed in, keep your trip with this browser and remember your language.
- We count page views and clicks, to know which pages are worth keeping.
- Card numbers never reach us. Payments go through Stripe.
- Anything you want removed: email montreal@enjoyhere.ca and say so.
Who is responsible
Ryan Campbell, Founder, is the person responsible for the protection of personal information at Enjoy Montréal. Write to him at montreal@enjoyhere.ca.
What we record when you browse
Each page view, tap, search and swipe is recorded with:
- A visitor id. A random value made in your browser and kept there, plus a second one for the current visit. Neither is derived from anything about you, and neither follows you to another site.
- What you looked at — the page, and the place or event, if it was one. For a search, the words you typed and how many results came back.
- Where you came from — the referring address and any campaign tags on it.
- Your IP address and browser type. The browser type is how we tell people from crawlers.
- Your user id, if you are signed in.
We read this as totals: which pages earn visits, which searches return nothing, which places get clicks. A click on a Sponsored listing is counted the same way, so the business pays once for a real visitor. A business that has claimed its page sees the counts for that page — never who visited.
On a guide to Québec, the visitor id lasts one visit until you say yes to being remembered, and no IP address is kept.
So that a sponsor never pays twice for one visitor, and to stop abuse, we keep a keyed hash of part of your IP address. It cannot be turned back into the address.
Page-load timings come from Vercel Analytics and Speed Insights, which set no cookie and build no profile of anyone.
What happens to a question you ask the guide
The home page and every place and event page answer questions. When you send one:
- Your question goes to Anthropic’s Claude API, which writes the answer from this site’s own places, events and weather.
- The question is counted as a search, as above, so we can see what people ask for and do not find.
- With the first question of a conversation we send a short summary of what this browser did here before: the kinds of places and the towns you added or liked, your last few searches, and your trip’s dates and towns. That is how an answer fits your tastes. On a guide to Québec the guide asks first, once, and sends no summary until you say yes. Settings changes your answer, and turning it off makes us forget what this browser did.
- We use your questions for nothing else, and we train no model on them.
How far to rely on an answer is in the terms.
Your trip and your account
A trip you start is kept on our server and tied to this browser by a cookie. An account is optional: it stores your email address and, through Supabase Auth, a password hash we never see, and signing in moves your trip into it. A trip or an account has an id of its own; that is what makes it yours. With an account we also keep:
- The places and events you save, and the trips you build.
- Your saved conversations with the guide.
- Reviews, check-ins and photos you choose to post. These are public. A check-in needs no account, and stores the name you type and the coordinates your browser reports.
Settings has a button that clears everything this site keeps in this browser and deletes that trip. Signed in, your trips stay with your account; delete one from the trip itself. To have an account deleted, email montreal@enjoyhere.ca from its address.
When you book, request or ask
- A reservation request, a trip request, a deal you claim or a ticket you buy takes your name, how to reach you and what you asked for. We keep it and send it to that business so it can answer you. A request to a business that has not claimed its page goes, as one email, to the address that business publishes.
- A reminder, a venue watch or “email me this trip” takes your email address. Each says what it will send before you confirm.
- Notifications, if you turn them on, are delivered by your browser’s own push service, and we keep the address it gives us. Turning them off in Settings removes it.
What this site keeps in your browser
Your sign-in, your trip and its dates, your language, the conversation in progress with the guide, the settings you chose and the offers you closed. A location you give with the “near me” button stays in your browser. The button in Settings clears all of it except your sign-in.
Email we send, and how to stop it
- The weekend digest. You type your address, we send one confirmation, and you are on the list only once you click its link. Every digest carries an unsubscribe link, and may carry one sponsor, marked Sponsored.
- Reminders and venue watches. Confirmed the same way, and every one carries a link that stops it.
- Invitations to claim a business listing.Sent to the contact address a business publishes, about that business’s own page. Every one carries a one-click unsubscribe link and our postal address, and an address that unsubscribes is never written to again. A reply saying “unsubscribe” works too.
- Mail you asked for — confirmations, booking receipts, sign-in links.
Resend delivers our email and receives the mail you send us.
Payments
Purchases and paid plans run through Stripe Checkout, and money owed to a business through Stripe Connect. Your card details go from your browser to Stripe and never touch this site. We receive the outcome: the item, the amount, the email you gave Stripe and an identifier for the payment.
Stripe processes that under its own privacy policy, as an independent controller.
Who else receives data, and where
- Supabase — the database and sign-in, in the United States.
- Vercel — hosting and page-load timings.
- Anthropic— the model that writes the guide’s answers, in the United States.
- Stripe — payments and payouts.
- Resend — email.
- Sentry — error reports and session recording (below), in the United States.
- OpenFreeMap — map tiles. Your browser asks it for them on a page with a map.
- Google— photographs of places. Your browser loads them from Google’s servers.
- The provincial road agency — road-camera images, loaded by your browser where a guide shows roads.
- Booking and tour partners— a partner link takes you to that partner’s site, which sees your visit.
- The business you write to or buy from — it receives your request or booking, with your name and how to reach you.
Your information is stored and processed in the United States: outside Québec and outside Canada, under that country’s laws and within reach of its courts and authorities. We sell it to no one.
Error reports and session recording
When a page breaks, Sentry receives an error report: the address you were on, your browser and the failure. A report from your browser carries your IP address; a report from our servers carries none.
Sentry also records about one visit in ten, and any visit where an error occurs, as a session recording: where you clicked and scrolled. The page’s text, its images and everything you type are masked. We use it to see what went wrong. A script-blocking extension stops it. On a guide to Québec there is no recording, and no report carries an IP address.
How long we keep it
- We keep page views, clicks and searches for 14 months, then delete them.
- We delete a sign-up you never confirmed after 30 days.
- We delete a trip started without an account 12 months after you last touched it.
- We keep a reservation request for 24 months, then delete it.
- We keep an account, and what is in it, until you ask us to delete it.
- We keep an address you unsubscribed, marked as stopped, so we never write to it again.
To have something removed sooner, email montreal@enjoyhere.ca.
Your rights
Under Canadian federal privacy law (PIPEDA), Québec’s Act respecting the protection of personal information in the private sector and, where it applies to you, the GDPR, you can ask what we hold about you, get a copy in a structured, commonly used format, have it corrected or deleted, withdraw a consent you gave, and have a page or link about you taken down or de-indexed. One address handles all of it: montreal@enjoyhere.ca. We answer within 30 days, and you need no account to ask.
If our answer does not settle it, you can complain to the Office of the Privacy Commissioner of Canada or, in Québec, to the Commission d’accès à l’information du Québec.
A claim on a business listing is usually decided by an automated review. The decision email then says so, and a reply to it has a person review the decision.
This site is not directed at children and we do not knowingly collect anything from them.
Changes
When what the site does changes, this page changes with it and the date at the top moves.
The other document is Terms of use.