Privacy Policy

1. Who we are

CanadaCRSCalculator ("we", "us", "our") operates the website https://canadacrscalculator.com (the "Site"), which provides a free interactive calculator for estimating Comprehensive Ranking System (CRS) scores under Canada's Express Entry immigration program.

This Privacy Policy explains how we collect, use, and protect information when you use the Site. It is written to comply with the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), the European Union General Data Protection Regulation (GDPR), and the United Kingdom's UK GDPR.

2. Information we collect

The CRS calculator runs entirely in your browser. None of the answers you select in the calculator are transmitted to our servers. Your responses, theme preference, and shareable URL state are stored locally on your device using the browser's localStorage and URL query parameters.

When you visit the Site, our hosting provider (Cloudflare, Inc.) automatically records standard request information, including:

• IP address (used only to route the response and detect abuse)
• User agent string (browser and operating system)
• Requested URL and HTTP referer
• Timestamp of the request

We may also use Google Analytics 4 (GA4) to collect aggregated, anonymized usage data such as page views, session duration, device category, and approximate location at the country level. GA4 sets cookies in your browser. We have configured GA4 with IP anonymization enabled, so the last octet of your IP address is removed before storage.

We do not collect:

• Names, email addresses, phone numbers, or other directly identifying information
• Government-issued identifiers (SIN, passport numbers, etc.)
• Payment information (the Site is free; we process no payments)
• Account credentials (the Site requires no sign-up)

3. Why we collect it

We use the limited information described above for the following purposes:

• To deliver the Site reliably and securely
• To understand which pages and features are used, so we can improve the calculator
• To detect and prevent abuse, fraud, or technical attacks
• To comply with legal obligations

Our legal bases under GDPR are: (a) legitimate interest in operating and improving the Site; and (b) consent, where you actively enable analytics in jurisdictions that require opt-in.

4. Cookies and tracking technologies

The Site uses the following cookies:

• Strictly necessary: none required for core calculator functionality.
• Analytics: GA4 sets _ga and _ga_* cookies. These have a maximum lifespan of 14 months.
• Preferences: we store your theme preference (dark or light) in localStorage; this is not a cookie and is never transmitted off your device.

You can disable cookies through your browser settings. The Site honors Global Privacy Control (GPC) signals where technically possible.

5. Third-party services

We use the following third-party processors:

• Google Analytics 4 (Google Ireland Limited for users in the EEA, UK, and Switzerland; Google LLC elsewhere) — see Google's privacy policy at policies.google.com/privacy.
• Cloudflare, Inc. — content delivery network and security; see cloudflare.com/privacypolicy.

We do not sell, rent, or trade your personal information to any third party.

6. Your rights under PIPEDA (Canada)

You have the right to:

• Know whether we hold personal information about you
• Access that information
• Correct inaccurate information
• Withdraw consent at any time, subject to legal or contractual restrictions
• File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca

7. Your rights under GDPR (EU/UK/EEA)

You have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten") in qualifying circumstances
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with your local supervisory authority

8. International transfers

If you access the Site from outside Canada, your information may be transferred to and processed in countries with data protection laws that differ from those in your jurisdiction. Our processors (Google, Cloudflare) operate global infrastructure and rely on Standard Contractual Clauses (SCCs) and equivalent mechanisms to safeguard transfers from the EEA, UK, and Switzerland.

9. Data retention

GA4 retains user-level and event-level data for 14 months by default, after which it is deleted. Cloudflare request logs are retained according to Cloudflare's stated retention policy. We do not maintain our own database of user information.

10. Children's privacy

The Site is not directed at children under 13 years of age, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us using the address on our Contact Us page and we will take steps to delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be announced on the Site's homepage.

12. Contact

For privacy-related inquiries, please use the address on our Contact Us page.