This is a plain-English draft describing how SZN SEATS is intended to handle personal information. It has not been reviewed by a lawyer or a privacy adviser and is not in force. Do not rely on it. A reviewed version will replace it before SZN SEATS accepts a paying customer.
In particular, how Quebec’s rules on technology that can identify, locate or profile a person apply to our optional product analytics is our own reading, and is pending legal review.
[BRACKETED PLACEHOLDERS] mark details that are deliberately unfilled — the registered address, the contact details, some storage regions and some retention periods have not been settled. The operating entity is Leslie House Ventures Corp.
The short version
We collect what we need to run your season. We do not sell personal information, and we do not share your season with other holders. The people on your list belong to you, not to us — we hold their details to send the messages you asked us to send, and for nothing else.
Product analytics and advertising are optional, and both are off until you turn them on. Choosing “Necessary only” keeps the full service working. No advertising technology is active in SZN SEATS today.
Separately, this marketing website (sznseats.com) uses Cloudflare Web Analytics to measure page performance. It is always on, Cloudflare states that it uses no cookies, and it is described in section 7.
Who is responsible
SZN SEATS is operated by Leslie House Ventures Corp. of [REGISTERED ADDRESS TO BE CONFIRMED], which is responsible for the personal information described here. Contact details are in section 17.
What we collect
| Category | What it includes |
|---|---|
| Account details | Your name, email address, mobile number, password, and the team or teams you hold seats for. |
| Season information | Your schedule, your seat details, the invoice or figures you upload, what each game cost you, which nights you are attending, and who you recorded as having each of the others. |
| Your list | The names and contact details of people you add so you can send them a game, and whether each of them has asked to be on that list or asked to leave it. |
| SZN CALL waitlist | If you join the SZN CALL list, your email address and, if you gave one, the team or teams you follow. We also record that you confirmed, when, and the wording you agreed to, because the law that governs marketing email puts the burden of proving consent on us. |
| Payment records | What you told us about money for a game, and, if you enable the forwarded-receipt feature, the amount and timestamp in a payment notification you forward to us. We never see your banking credentials. |
| Billing | What you paid for your SZN PASS. Card details are handled by our payment provider and never reach our servers. |
| Technical | IP address, browser and device type, pages viewed, and error logs, kept to keep the service running and secure. |
| Your privacy choice | Whether you turned Analytics and Advertising on or off, when, and which version of this policy was in force at the time. |
| Product analytics (only if you opt in) | Records of product milestones and how features are used, under a pseudonymous ID. Section 7 sets out exactly what is and is not included. |
We do not ask for and do not want government identifiers, health information, or anything else sensitive. Please do not upload it.
Why we collect it
- To run your season. Building your schedule, tracking who has each game, showing what is still open, and keeping your records straight.
- To send the messages you ask for. A SZN DROP goes to the list you built, at your instruction.
- To tell you when SZN CALL opens. SZN CALL is a waitlist today. We use your address to confirm you joined and to tell you once when it opens. Every message carries an unsubscribe link that works.
- To bill you for the SZN PASS and keep the tax records we are required to keep.
- To support you when you contact us, and to fix things when they break.
- To keep the service secure and to detect abuse.
- To improve the service, if you opt in. We use product analytics to understand how SZN Seats is used, identify friction and reliability issues, measure whether features are working as intended, and improve the performance and usability of the service.
- To meet legal obligations where we have them.
Where consent is the basis for something — marketing messages, optional product analytics and advertising, for example — you can withdraw it at any time and we will stop.
Contacts you add
When you add someone to your list, you are giving us their personal information. Two things follow from that.
You are responsible for having their consent. Only add someone who has asked to hear from you. Do not upload a contact list, a customer database, or people who have not asked. This is a requirement of Canada’s Anti-Spam Legislation and of our acceptable use policy.
We use their details only to do what you asked. We do not market to the people on your list, we do not add them to anyone else’s list, and we do not use them to build any audience of our own. Their names, email addresses and phone numbers are never sent to our analytics providers. If one of them asks us directly to remove their details, we will, and we will tell you.
Who else sees it
We do not sell personal information, and we do not disclose it for anyone else’s marketing. We share it only with:
- Service providers who run parts of the service for us — hosting, database, email delivery, text message delivery, error monitoring and payment processing, and, only if you opt in, product analytics. They act on our instructions and may not use your information for their own purposes.
- People you chose. Someone who opens your link sees the games you decided to show them. They do not see your invoice, your other recipients, or anything about your other games unless you show it to them.
- Anyone we are legally required to disclose to, where a valid legal demand is made. We will tell you unless we are prohibited from doing so.
- A buyer of the business, if SZN is ever sold or merged, under the same commitments set out here.
Service providers we can name today:
| Provider | What it does |
|---|---|
| Fly.io | Hosts the app and its database. The app runs in Fly.io’s Toronto region. |
| Cloudflare | Database backups (R2 storage), hosting of this marketing site, our domain’s DNS, performance analytics for this marketing site (Cloudflare Web Analytics), and receiving payment notifications you forward to us. Storage region [R2 REGION TO BE CONFIRMED]. |
| Resend | Sends email, including sign-in links and the messages you ask us to send. |
| Stripe | Processes SZN PASS subscription payments. Stripe handles card details; they never reach our servers. |
| PostHog | Product analytics, session replay and heatmaps — only if you turn Analytics on. Hosted in the EU (Frankfurt, Germany). |
| Google Analytics 4 receives a small number of milestone events — only if you turn Analytics on. Google stores data in its global data centres. |
The full list of service providers, including text message delivery and error monitoring, is [SUB-PROCESSOR LIST TO BE PUBLISHED].
Analytics and advertising
We sort the technology we use into three categories. Only the first is always on.
Necessary — always on
This is what operates the service safely and reliably, and it cannot be switched off: signing you in and keeping your session, security, abuse and fraud prevention, keeping transactions and ticket delivery intact, error, crash and uptime monitoring, operational diagnostics, and remembering your privacy choice. Section 13 lists the cookies involved.
Website performance analytics (Cloudflare Web Analytics, on sznseats.com only). This marketing website uses Cloudflare Web Analytics to count page views and visits and to measure how quickly pages load, broken down by details such as the page, the referring site, country, browser, operating system and device type. It is operational and performance measurement, it is always on, and it is separate from the optional product analytics below. Cloudflare states that it does not use cookies or local storage for this, and does not fingerprint visitors by IP address, user agent or any other data to produce these analytics. It does not run in the SZN SEATS app.
Product analytics — optional, off until you opt in
We use product analytics to understand how SZN Seats is used, identify friction and reliability issues, measure whether features are working as intended, and improve the performance and usability of the service. If you turn Analytics on, that covers the following.
- Product analytics (PostHog, hosted in the EU — Frankfurt, Germany). Our servers send events about product milestones and usage — for example, account created, season created, onboarding steps completed, the stages a claim, payment or ticket moves through, which features are used, and subscription started.
- Google Analytics 4. Our servers send at most five high-level milestone events — sign up, first value reached, season ready, Interac ready, and subscription started — so we can measure which sources and campaigns lead people to get value from SZN SEATS. Google stores this data in its global data centres, outside Canada. No Google Analytics script runs in the app.
- Session replay (PostHog, in your browser). A masked reconstruction of how a page is used — clicks, scrolling and layout — on a short list of non-sensitive product screens only, such as getting started and the schedule. All text and every input you type are masked. Network requests, their contents and their headers are not recorded. Only a sample of sessions is recorded.
- Heatmaps (PostHog, in your browser). Where people click and how far they scroll, on a short list of non-sensitive product screens, such as the dashboard, My Season, the schedule, getting started, Circle, Share My Season controls and local rules. Heatmaps never capture typed text, input values, tokens or payment data.
How you are identified. Analytics events carry a pseudonymous ID derived from your account with a secret key. It is never your email, name or phone number, and never your internal account number. We can link that ID back to your account internally, so this data is pseudonymous, not anonymous. The browser part of PostHog does not identify you to PostHog.
What is never sent to analytics providers: names, email addresses, phone numbers, dollar amounts, payment details, Interac answers, deposit links, ticket-transfer links, invoice contents, free text you type, security and recovery material, and private links or tokens. We do not send your IP address or your location, and IP capture and location lookup are switched off.
Where session replay and heatmaps never run: sign-in and magic-link pages, SZN RELAY, Interac and other payment pages, passkey, recovery and device-pairing screens, invoice upload and review, Ticketmaster transfer screens, payout, billing and account financial settings, activity and notifications, any page showing recipient or buyer information, and any public link page.
Advertising — optional, off until you opt in
This category covers advertising measurement and remarketing, for example through Google Ads or Meta. No advertising technology is active in SZN SEATS today — no advertising pixels, tags, conversion APIs or audience uploads are in use. The choice exists so that, if we enable advertising providers later, they run only for people who opted in. We will update this policy and name the providers before any are enabled.
Your privacy choices
On your first visit, a banner asks you to choose: Accept all, Necessary only, or Manage preferences. Nothing optional runs until you choose, and Necessary only keeps the full service working.
You can change your choice at any time — from the “Privacy choices” link in the app footer, in Account settings, or here:
- If you are signed in, your choice is saved to your account, with the time and the policy version. It applies on every device you use, and it also governs analytics sent from our servers — including events that happen while you are away, such as an invoice finishing processing or a subscription renewing.
- Before you sign in, your choice is saved in the
szn_consentcookie on this device. When you sign in, the most recent choice applies. - Signing out clears the choice from the device, so the next person on a shared device starts fresh. You may be asked again.
- Turning Analytics off stops future product analytics, Google Analytics milestones, session replay and heatmaps for you immediately. Turning Advertising off stops any future advertising sends.
- Switching off does not delete what was already collected. That data is kept for the periods in section 10. You can ask us to delete it, and we will delete the events tied to your pseudonymous ID with the provider.
Each person’s choice governs analytics about that person. People who open a holder’s public link make their own choice, and a holder’s choice never decides it for them. Events about your account are sent only if you opted in. A buyer’s anonymous page visits are counted only if that buyer opted in. Your pseudonymous ID is attached to a buyer’s visit only if you, the holder, opted in.
Accepting the terms is not consent to Analytics or Advertising. They are separate, and neither is a condition of using SZN SEATS.
Where it is held
The app and its database run on Fly.io in Toronto. Some of our service providers store or process personal information outside Canada, and outside Quebec — including in the United States and the European Union. PostHog analytics is hosted in Frankfurt, Germany. Google Analytics data is stored in Google’s global data centres. Other regions are [HOSTING REGIONS TO BE CONFIRMED].
Where information is held outside Canada, it is subject to the laws of that country, including lawful access by its authorities. We put contractual protections in place with each provider, including data processing agreements, and we assess transfers before making them.
How long we keep it
We keep your account and season information while your account is open. After you close it, we keep it for [RETENTION PERIOD TO BE CONFIRMED] so you can come back or export it, and then we delete or anonymise it.
Records of unsubscribe requests are kept indefinitely, because we need them to make sure we never message that person again. Billing and tax records are kept for the period the law requires.
- PostHog analytics events are kept for [ANALYTICS RETENTION TO BE CONFIRMED]. The provider’s maximum is 1 year on its free plan and up to 7 years on paid plans.
- Google Analytics 4 user-level data is kept for 14 months.
- Records of your privacy choice are kept for as long as your account exists, and deleted with it.
- Feedback you send through Help & feedback is kept for 12 months, then deleted.
Your rights
You can ask us to:
- Show you what we hold about you, and where it came from.
- Correct anything that is wrong.
- Export your season in a portable format.
- Delete your account and the information attached to it, subject to records we are required to keep. This includes analytics events tied to your pseudonymous ID.
- Withdraw consent for anything based on it, including messages from us.
You can withdraw consent to Analytics or Advertising yourself, at any time, through Privacy choices.
Quebec residents have the right to be informed when we use technology that can identify, locate or profile them, and of how to turn those functions on. In SZN SEATS, those functions sit inside the optional Analytics and Advertising categories, and both are off by default.
Write to the address in section 17. We will respond within 30 days. We may need to confirm who you are before we act.
Messages you receive
If you are on a holder’s list, you receive messages because you asked that holder to put you there. Every message tells you how to stop, and stopping is immediate and permanent unless you ask to rejoin. You can also write to us directly and we will remove you from that list, whatever the holder does.
Separately from that, we send service messages about your own account — billing, security, and material changes to these policies. You cannot opt out of those while you have an account, because they are part of running it.
Cookies and similar technology
All of our cookies are first-party: they are set by SZN SEATS, not by another company. Necessary cookies are always on. Analytics cookies are set only after you turn Analytics on. Cloudflare Web Analytics on this marketing site is not in the table: Cloudflare states that it does not use cookies or local storage to collect its metrics. “Readable by scripts” means code running on our pages can read the cookie; the others are httpOnly, which means only our servers can.
| Name | Category | Purpose | Readable by scripts | Lifetime | When deleted |
|---|---|---|---|---|---|
szn_session | Necessary | Keeps you signed in. | No | Up to 30 days | On sign-out, or when it expires. |
szn_consent | Necessary | Remembers your privacy choice. Stores only the policy version, Analytics yes or no, Advertising yes or no, and the time of the choice. Shared across sznseats.com subdomains. | Yes, so the banner can show your choice | 1 year | On sign-out, or when it expires. |
szn_circle_… (one per Circle) | Necessary | Remembers that you joined a holder’s Circle, so you are not asked to join again. | No | Up to 1 year | When it expires, or when you clear your cookies. |
szn-theme-preference | Necessary | Remembers whether you chose light, dark or system appearance in the app. | Yes | 1 year | When it expires, or when you clear your cookies. |
szn-theme-resolved | Necessary | Records whether your device is currently in light or dark mode, so the app paints correctly on the first load. | Yes | 1 year | When it expires, or when you clear your cookies. |
szn_aid | Analytics | A random visitor ID that lets us count anonymous visits to public pages without building a profile. | No | Up to 1 year | On sign-out, or when it expires. |
szn_acq | Analytics | First-touch campaign information: UTM source, medium, campaign, content and term, the referring website’s domain name only, and a simplified landing path. Attached to your account’s analytics profile when you sign up. | No | 30 days | When you sign up, on sign-out, or when it expires. |
| PostHog session storage | Analytics | Browser session storage (not a cookie) that PostHog uses for its working state while session replay or heatmaps run. | Yes | Until you close the tab | When you close the tab. |
We do not set advertising cookies today. If we enable advertising providers later, they will run only for people who opted in, and this table will name them first.
Security
We use encryption in transit, access controls, and the ordinary safeguards you would expect of a service handling this kind of information. No system is perfectly secure. If a breach affects you and creates a real risk of significant harm, we will notify you and the relevant regulator as the law requires.
Children
SZN SEATS is for adults. It is not directed at anyone under 18 and we do not knowingly collect information about children. If you believe a child’s information has reached us, tell us and we will remove it.
Changes
We may update this policy. If a change is material, we will tell you by email or in the service before it takes effect. Every version carries a version number and a date, and your saved privacy choice records which version was in force when you made it.
Contact and complaints
Privacy questions and requests go to [PRIVACY CONTACT EMAIL TO BE CONFIRMED], or by post to [REGISTERED ADDRESS TO BE CONFIRMED].
If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada, or to the privacy regulator in your province — in Quebec, the Commission d’accès à l’information.