Privacy Policy

Last updated: June 15, 2026

Mirucity (“we”, “us”) operates an art, live-music, and independent-cinema listings platform for Vancouver and the Pacific Northwest. We respect your privacy and comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Canada’s Anti-Spam Legislation (CASL), and — for visitors in the EU/UK — the General Data Protection Regulation (GDPR).

1. Information we collect

• Account data — your email address and display name when you sign up (directly or via Google), and an optional avatar.
• Content you create — comments, photos you upload, check-ins, favourites, and reminders.
• Usage data — pages viewed and listings saved, collected through privacy-friendly, cookieless analytics (Vercel Analytics & Speed Insights) to improve the product.
• Technical data — IP address and browser/device info, processed transiently for security, rate-limiting, and error monitoring.

2. How we use your information

We use your information only to:

• provide listings and remember your saved items and preferences;
• display content you choose to post publicly (comments, photos);
• send notifications and emails you have opted into (see CASL below);
• keep the service secure and diagnose errors;
• comply with legal obligations.

We do not sell your personal information, and we do not use it for advertising profiling.

3. Legal basis (GDPR)

Where the GDPR applies, we rely on your consent (account creation, opt-in emails), contractual necessity (running your account), and our legitimate interests (security, fraud prevention, product improvement via cookieless analytics).

4. Email & CASL

We send commercial or newsletter emails only with your express, opt-in consent (double opt-in confirmation), and every email includes a one-click unsubscribe. Transactional messages relating to your account may still be sent as needed.

5. Sharing & service providers

We share data only with infrastructure providers acting on our behalf, under contract:

• Neon (PostgreSQL database hosting)
• Vercel (application hosting & cookieless analytics)
• Cloudflare R2 (image/photo storage)
• Google (optional sign-in)
• Sentry (error monitoring, if enabled)

Some providers may process data outside Canada (e.g. the United States). We rely on their contractual safeguards for such transfers.

6. Your rights

You may access, correct, export, or delete your personal information and withdraw consent for non-essential processing at any time. You can delete your account and all associated content yourself from your profile page (Account → Delete account), or contact us at privacy@mirucity.com. EU/UK users also have the right to lodge a complaint with their supervisory authority.

7. Retention

We keep your data while your account is active. When you delete your account, your profile, comments, photos, and other content are removed from our live systems immediately and purged from backups within 30 days.

8. Cookies

We use only strictly-necessary first-party cookies to keep you signed in. Our analytics are cookieless and do not track you across sites. We do not use advertising or third-party tracking cookies.

9. Children

Mirucity is not directed at children under 13, and we do not knowingly collect their personal information.

10. Changes

We may update this policy; material changes will be reflected by the “last updated” date above.

11. Contact

Questions or requests: privacy@mirucity.com.