Privacy

What we collect, and what we don't.

Rangifer is an ecological data platform. The data we sell is about trees, not about you. This page explains the personal data we do handle — to run accounts, take payment, and understand which parts of the site are useful — and how to control it.

Last updated 27 July 2026

Analytics, and your choice

We use Firebase Analytics to count page views and a small number of feature events (for example, that the map's AI assistant was used). It is off by default and does not run at all unless you accept it. Declining changes nothing about how the site works.

Analytics cookies are the only non-essential cookies we set. Everything else in browser storage is functional: your login session, and the API key you paste into the dashboard (kept insessionStorageso it is discarded when you close the tab).

What we collect

Account data: Your email address, display name, and authentication identifiers, held in Firebase Authentication so you can sign in. Provided by you at signup.
Usage records: API request counts, dataset access, and report generation events, linked to your account ID in Firestore. These drive your dashboard and enforce plan limits, so they are necessary to provide the service.
Payment data: Handled entirely by Stripe. We store a Stripe customer ID, your plan, and its status. We never see or store your card number.
Technical logs: Cloudflare records standard request metadata (IP address, user agent, timestamp) for delivery, security, and abuse prevention.
AI assistant prompts: If you use the map's AI assistant, your question is sent to the model provider that answers it. Don't put personal or confidential information in those prompts.

Who processes it

We don't sell personal data or share it for advertising. It is processed on our behalf by: Google Firebase (authentication, database, analytics), Stripe (payments), and Cloudflare (hosting, CDN, security). These providers operate outside Quebec, so your data may be stored or processed in other countries, including the United States.

How long we keep it

Account and usage data is kept while your account is open, and deleted within 30 days of you closing it — except records we are required to retain for tax and accounting purposes, which Stripe holds for the statutory period.

Your rights

Under Quebec's Law 25 and the GDPR you can ask to access your data, correct it, have it deleted, receive a portable copy, or withdraw consent to analytics (the controls above do this immediately). Email [email protected] and we'll respond within 30 days. If you're in Quebec and unsatisfied with our response, you can complain to the Commission d'accès à l'information du Québec.

Contact

Rangifer is operated from Quebec, Canada. For any privacy question, including requests to exercise the rights above, write to [email protected].

Looking for how we handle ecological data instead? See the methodology page.