Privacy Policy
Last updated: 2026-04-19
This notice explains how CATaxTools ("we", "us", "the site") handles personal information. It is written to meet the requirements of the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and to provide additional rights for residents of Quebec (under Law 25), Alberta, British Columbia, and other Canadian provinces with privacy statutes.
1. What we collect
- Calculator inputs — income, province, deductions, etc. These never leave your browser. They are stored in the URL (so results can be shared) and may be persisted in
localStorageon your device. We do not receive, transmit, or log them on any server. - Analytics — Google Analytics 4 collects anonymised usage data (pages viewed, referrer, device type, country/province from IP, session duration). See section 3.
- Advertising — Google AdSense may set cookies to deliver and measure ads. See section 4.
- Server logs — our host (Cloudflare Pages) logs request metadata (IP, user-agent, referer, timestamp) for up to 30 days for abuse prevention and debugging.
2. Consent and controls
On your first visit a banner asks whether you accept or reject analytics and advertising cookies. Until you accept — or if you reject — Google Consent Mode v2 stays set to denied, so Google does not store identifiers for analytics or personalised ads. You can change your choice at any time via the "Cookie preferences" link in the footer.
3. Google Analytics 4
We use Google Analytics 4 (property G-0HZ03WXGSH) to understand aggregate usage. Analytics
cookies load only after you accept. IP addresses are truncated by Google before logging. GA4 data
retention is set to the minimum available (2 months event, 14 months user-level). We do not
cross-reference analytics data with any named individual. Google's processing is governed by its
Privacy Policy.
4. Google AdSense
We use Google AdSense (publisher ID ca-pub-8777600112471606) to serve ads. AdSense uses
cookies and similar technologies to serve ads based on prior visits to this and other websites. Under
Consent Mode v2, AdSense initially serves only non-personalised ads. If you grant consent,
personalised ads may be served based on your interests.
Opt out of personalised Google ads at adssettings.google.com. Opt out of other participating advertisers via the Digital Advertising Alliance of Canada AdChoices program.
5. Cookies
A full list of cookies — name, provider, purpose, and duration — is on our Cookie Policy page.
6. Your rights under PIPEDA
Under PIPEDA, you have the right to access the personal information we hold about you, to request correction of inaccurate information, and to withdraw consent for collection or use. Given that financial calculator inputs never leave your browser and analytics/advertising cookies require your opt-in, most exercise of these rights is self-service via the cookie banner.
You can lodge a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca, 1-800-282-1376).
7. Quebec (Law 25)
Residents of Quebec have additional rights under An Act respecting the protection of personal information in the private sector (as amended by Law 25): to access and transfer personal information in a structured format, to request cessation of dissemination, to the right to be forgotten in certain circumstances, and to be notified of significant confidentiality incidents. You can exercise these rights by rejecting cookies (for the categories that apply online); Google, as the processor for GA4 and AdSense, provides further self-service at myactivity.google.com.
Complaints in Quebec go to the Commission d'accès à l'information (cai.gouv.qc.ca).
8. Alberta & British Columbia
Residents of Alberta (PIPA) and British Columbia (PIPA BC) have rights similar to PIPEDA, with complaints handled by the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca) or the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca).
9. International transfers
Analytics and advertising data are processed by Google primarily in the United States. Where required, Google relies on standard contractual clauses for cross-border transfers.
10. Children
CATaxTools is not directed at children under 13. We do not knowingly collect information from children.
11. Changes to this policy
We may update this policy to reflect changes in our practices, hosting, or applicable law. The "Last updated" date at the top indicates the most recent revision.