The French version of this document is authoritative.

Privacy policy

What we know about you — and what we do not do with it

In short: no advertising, no sale of data, no individual tracking. The simulator can be used without an account; we count our visitors without tracking any of them; and what we keep lives in Quebec.

Who is responsible

Route 127 is a product of Boréal.IA inc. (NEQ 1181479719), doing business as ASGO - Intelligence artificielle, whose data is hosted at OVH in Beauharnois, Quebec. The person responsible for the protection of personal information is Alexandre Gobeil. For any question, access request or complaint about your personal information: write to us.

What we collect, and why

If you consult without an account

• An in-house audience measurement. We count the visitors who arrive, those who try the simulator and those who see the subscription offer — that's all. Technically: a pseudonym derived from your network address (hashed with a secret key, truncated), which does not allow the address to be recovered and does not survive the day; the referrer is limited to the name of the originating site (never the full address of the page, which may carry personal information). These lines are erased after 90 days. No third-party analytics tool — no Google Analytics, no advertising pixel.
• Anti-abuse counters. Certain features (such as postal code search) are rate-limited; the counter relies on the same hashed pseudonym, never on the address in the clear. The postal code searched is used for the calculation and is not kept associated with you.
• Technical logs. Like any server, ours keeps operational and security logs, kept briefly and consulted only to diagnose an outage or an abuse.

If you create an account

• Your email address — it is your identifier. Two doors, your choice: the sign-in code sent by email, or Google Sign-In (Google then confirms your address to us; we do not receive your Google password). We store no password, because we ask you for none.
• The riding and polling division you consult as part of your use of the simulator.
• The channel through which you discovered us (for example "a media outlet" or "a search"), attached to the account when it is created, to know what makes the product known.

If you subscribe

• Payment is processed by Stripe: your card number is entered at Stripe and never passes through our servers. We keep the Stripe customer ID, the status and the period of your subscription — what is needed to open your access — as well as the button on the site that led to the payment, to know what makes people want to subscribe.
• Billing records are kept for as long as tax and accounting obligations require.

Cookies

Three cookies, all set by us, all necessary for operation, none advertising, none tracking across sites:

• The session, which keeps you signed in; it is unreadable by scripts and is erased on sign-out.
• The first-visit origin (90 days), which retains the channel by which you arrived — the channel name and, where applicable, the code of the post that brought you (a post identifier, never you) — so that our audience measurement attributes visits to the right place.
• A technical cookie, temporary, that secures the authorization of agents connected to the account (OAuth) for those who use this feature.

You can block or erase these cookies in your browser's settings: the site continues to work without them — only signing in to an account requires the session cookie.

One exception to note: riding pages display candidate photos by loading them directly from the political parties' servers. Your browser therefore sends them a request, which makes your IP address visible to them — without the page viewed (referrer masked). We draw no measurement from this and receive nothing from it.

Where your information lives

Our servers and our database are in Quebec (OVH, Beauharnois). Three providers process certain information for us, which may involve a disclosure outside Quebec (mainly to the United States), governed by their contractual protection commitments:

• Stripe — subscription payment;
• Resend — sending our emails (sign-in links, confirmations);
• Google — only if you choose Google sign-in.

We do not sell or rent your information to anyone, and we do not disclose it to any other third party, except where legally required.

How long

• Audience measurement: 90 days, automatic erasure.
• Anti-abuse counters: 7 days, automatic erasure.
• Sign-in traces (expired sessions, consumed sign-in codes): 30 days after they expire, automatic erasure.
• Account: as long as it exists; you may request its deletion at any time.
• Billing: for as long as tax laws require.

Your rights

Law 25 gives you, and we honour: the right to access the information we hold about you, to have it rectified, to withdraw your consent, to request its deletion or the cessation of its disclosure, and to obtain a copy of it in a structured format (portability). Write to us; we respond within thirty days. If our response does not satisfy you, you may contact the Commission d'accès à l'information du Québec.

What we do not do

No profiling, no automated decision-making about you: the simulator's projections concern ridings and polling divisions — territories, never people. In the event of an incident affecting your information, we will notify you as well as the Commission d'accès à l'information, as the law requires.

Last updated: August 2026. Any substantial change will be dated here. See also the terms of use.