Privacy
Provisional version, awaiting legal review.
This page describes the data Cantio collects today. It will be updated if that changes.
Reading without an account or tracking
Reading requires no account and no name. The site uses no tracking cookies and does not measure audience.
Accounts
The interface does not offer them yet. If an account is created, we keep the email address, the password hash or the Google identifier, the creation date, the roles, the history of changes made with the account and the open sessions. The account holder can export or delete their account.
On your device
Your language, your theme, the text size and the alignment of the lyrics are kept in your browser's local storage (keys `cantio.lang`, `cantio.theme`, `cantio.lyricsSize`, `cantio.lyricsAlign` and `cantio.lyricsLang`, the preferred lyrics language). Without an account, nothing is sent to the server. For a signed-in member, the language, the theme and the lyrics display are also saved to the account, to be found again on other devices; until a send has succeeded, the key `cantio.prefsDirty` holds the member's identifier, and it is erased once the send succeeds or when the member signs out. You can erase them from the browser settings. The history of the last songs you opened (title, language and date, never the lyrics) is kept under the key `cantio.recents`, on this device only; the My library page lets you clear it.
To work without a network, the browser caches the site's pages, the list of hymnals, the hymnals you have viewed and the songs you have opened, lyrics included. A copy kept this way (song or hymnal) is no longer shown after 30 days without a connection, and it is erased as soon as the server says it is no longer available. These copies stay on your device; you can erase them from the browser settings.
What the server receives
The application logs record the method, the address of the requested page, the response code and the duration. They contain no IP address, no search text and no identity.
Your IP address is used only to limit the number of requests. It stays in the server's memory while requests are counted: it is not written to the database or to the application logs. The host may keep its own technical logs.
Searches with no result
When a search finds nothing, we keep its text (at most 100 characters), the language, a counter and the dates of the first and last search, to learn which songs are missing. Nothing links it to a person, an address or a device. These lines are deleted at the latest 91 days after the first search. Do not type personal information in the search.
Hosting and applicable laws
We aim to host the service in Canada in production, and we are working to comply with Quebec's Law 25 and, for European visitors, the GDPR.
A question about your data?
Go to the Contact page.