Privacy
Privacy
We collect as little as we can. Here is what, why, and for how long.
Updated 17 October 2026
The Loop TO, an independent Toronto city publication. In this notice, "we" means The Loop TO, the publisher. You can write to us at [email protected] about anything below, including asking to see or delete what we hold about you.
Just reading the site
- No cookies from us. We do not set cookies, and we run no advertising or cross-site tracking.
- Analytics. We use Cloudflare Web Analytics, which counts visits without cookies and without following you across sites. We see things like which pages are read and roughly where from, not who you are.
- Your device. Your theme choice and any stories you save are kept in your own browser (local storage) and are never sent to us. Clear your browser data and they are gone.
- Weather. The Toronto weather chip asks Open-Meteo for the temperature. Like any website you visit, Open-Meteo can see your IP address when your browser makes that request.
- Hosting. The site runs on Cloudflare, which processes standard web requests (including your IP address) to deliver pages and keep the site secure.
When you use a form
Our forms are protected by Cloudflare Turnstile, a check that tells people from bots. It looks at your browser to do that, may keep a small token in your browser while it works, and is covered by Cloudflare's own privacy notice. We never see what it looks at.
- Submit an event. What you type (event details, your name and email, your organisation if given) and an optional photo. We use it to check the event and write back to you. Photos are kept in our own storage and are never published without our check.
- Send a tip. Your tip and a link if you add one. Name and email are optional; add them only if you want a reply.
- Contact. Your name, email, the topic and your message, so we can answer.
- Newsletter. Your email address, which letters you ticked, the time you signed up and the page you signed up on, plus the exact wording you agreed to. We use it to send the letters you chose and to show you agreed. We have not started sending yet, and we do not email the list until we do.
- Reactions. If you tap Want to go, Love this or Sharing this on a story, we add one to that story's total. We keep a short-lived, scrambled code made from your IP address so one person cannot count the same reaction twice in a day. It cannot be turned back into your address.
Your IP address
We never store your IP address. For spam limits we keep a salted one-way hash of it. Hashes used for rate limits and reactions are swept within hours to days. A hash kept on a submission or newsletter signup is cleared after about 30 days.
Who handles it
- Cloudflare hosts the site, the database that stores form submissions, and the storage for event photos.
- Resend delivers the email that tells our desk a form was submitted, so what you send passes through its email service on the way to our inbox.
- We do not sell your information or share it with advertisers.
How long we keep it
- Submissions: until the desk has dealt with them, and then deleted if you ask.
- Newsletter signups: until you unsubscribe or ask us to delete your address.
- Everything else on this page: as stated above.
Your choices
You can ask to see, correct or delete what we hold about you at any time by writing to [email protected]. We handle personal information in line with Canada's privacy law (PIPEDA), and we send commercial email only with your consent, in line with Canada's anti-spam law (CASL). Every newsletter will carry an unsubscribe link.
Changes
If this changes, we will update this page and its date.