← Bluenose

Privacy

Bluenose intends to comply with PIPEDA and applicable Canadian privacy law.

Last revised: September 30, 2026.

No tracking

Our public pages carry no analytics, no advertising trackers, no marketing cookies, and no third-party scripts beyond Stripe (which handles payments). We use only the essential cookie the site needs to work — your login session. We measure success by sales, not by watching you browse.

Your shop's data is yours

If you run a shop, your customer list and order history belong to you. You can export all of it anytime, and it leaves with you if you close your shop. We never sell, rent, or broker anyone's data, and we never profile shoppers across shops for advertising.

What we collect, and why

• Shop owners: your email, a hashed password, your shop details, and — through Stripe — the billing and payout information Stripe needs to pay you and to charge the monthly fee. We keep a record of your subscription status.
• Buyers: your email and, if you're shipping, your delivery address, so the shop can fulfill your order. This is shared with the shop you bought from, which is the seller. There are no buyer accounts — checkout is guest-only.

We collect only what's needed to run the storefront, take payment, and let a shop fulfill an order. We don't ask for more.

Who processes it for us

We use a small set of service providers, only to run the service, and only with the data each needs:

• Stripe — payments, payouts, and the monthly subscription.
• Cloudflare — hosting, the database, and photo storage.
• Resend — the transactional emails we send (verification, receipts, order notices).

Where your data is processed: some of these providers process data on servers in the United States, so running Bluenose involves transferring personal information outside Canada, where it may be accessible under the laws of that country. We use reputable providers bound to protect it, and we share only what each one needs.

How long we keep it

We keep shop and order data while your shop is open and for a reasonable period afterward to meet tax and legal obligations, then remove it. Payment records are retained by Stripe under its own policies. Ask us to delete your data and we'll remove what we're not legally required to keep.

How we protect it

Passwords are hashed, never stored in plain text. Traffic is encrypted in transit (HTTPS everywhere), and access to data is limited to what's needed to operate the service. No system is perfectly secure, but we treat your data as if it were our own.

Your rights

Under Canadian privacy law you can ask to see the personal information we hold about you, correct it, get a copy, or have it deleted, and you can withdraw consent. Shop owners can export everything from the dashboard at any time. To make any of these requests, just reach out — see below.

Aggregate numbers

We may one day publish province-wide totals — like "dollars kept in Nova Scotia" — but only as aggregates large enough that no single shop or person can be identified. Never anything that exposes one shop's numbers.

Children

Bluenose isn't directed at children, and shops on Bluenose sell to adults. We don't knowingly collect personal information from children.

Changes to this policy

If we change how we handle data, we'll post the new version here with a fresh date and, for material changes, tell shop owners by email.

Reaching us

Want your data, or want it deleted? Email sam@bluenoseapp.ca — we'll help.