Privacy

How we look after what you tell us

Last updated November 3, 2026

The highlighted details are being filled in.

The short version

• You can read, colour and try everything on this site without telling us anything.
• There is no advertising here, no tracking pixels and no analytics cookies. We count visits with Cloudflare Web Analytics, which uses no cookies and does not follow you anywhere.
• We never ask a child for anything. Accounts, emails and orders belong to the grown-up.
• If you join our letters, sign in to the library or buy from us, we keep only what that needs, and you can ask us to show it to you or delete it at any time.

Who we are

Snowdrop & Sparrow is a small book studio in Ontario, Canada. [BUSINESS NAME AND OWNER]. We are responsible for the personal information described here, and you can reach us at [email protected] or by post at [MAILING ADDRESS].

Just visiting

Our site is hosted by Cloudflare. Like any web host, its servers see your device's internet address and the pages you ask for, so that they can send them to you and keep the site safe from attacks. We use Cloudflare Web Analytics to count visits: it tells us how many people came, which pages they read, which site they came from, and the country and kind of device, all as totals. It sets no cookies and builds no profile of you.

Some choices you make are kept in your own browser so the site remembers them next time: sound on or off, calm or full motion, the reading voice you picked, your list of picks, the Advent doors you have opened and anything you write on a write-back page. They stay on your device. We never receive them, and clearing your browser's site data removes them.

Our letters

If you give us your email for the monthly colouring page, we keep your email address, the words you agreed to, the date, and the page you signed up on, which is the record Canada's anti-spam law asks us to keep. We send you a link to confirm first; nothing else arrives until you click it. Every letter has an unsubscribe link that works straight away. After you unsubscribe we keep only a note that you did, so that you are never emailed again by mistake.

The library

The library is where your books, their read-aloud narration and your bonus printables live. To open it you give us your email, and we send a sign-in link. There is no password. We keep:

• your email address and the date your account was made;
• which books are in your library and how each one came to you (bought here, or collected with the code in a paperback or printable);
• a scrambled fingerprint of each sign-in link, never the link itself; a link works once and expires after 15 minutes;
• a count of downloads, with the time but never your internet address.

When you sign in, the library sets one cookie, ss_session, which keeps you signed in for up to 30 days. Your browser's scripts cannot read it, and signing out (or "sign out everywhere") ends it.

When you buy from us

Payments are taken by Stripe, our payment processor. Your card details go to Stripe and never reach us. From Stripe we receive your name, email, what you bought, the amount and the tax. For a printed book we also receive the name, postal address and phone number it should go to, and we pass them to the printer (Lulu) so the book can be printed and mailed to you. We email you your receipt, your download links and, for printed books, the tracking.

If you buy one of our books on Etsy or Amazon, that shop's own privacy policy applies; we see only what those shops share with sellers.

Children

Our books are made for children; this site is made for the grown-ups who share them. Nothing here asks a child for a name, an email, a photo or anything else, and there are no children's accounts. The library belongs to the grown-up who signs in. If we ever learn that we hold information from a child, we delete it.

Who helps us

We use a few companies to run the site, each only for its own job and bound to protect what we share:

• Cloudflare: hosting, the visit counts, and the database and file storage behind the library and orders;
• Resend: sending our emails (sign-in links, receipts and our letters);
• Stripe: taking payments and working out the tax;
• Lulu: printing and mailing printed books.

Some of these companies store information in the United States or elsewhere outside Canada, where the local law applies to it. When we add a new partner, we add it here.

How long we keep it

• Letters: until you unsubscribe (then only the note that you did).
• Library: until you ask us to close your account.
• Orders: six years after the order, because Canadian tax law requires us to keep our business records that long.
• Sign-in links: 15 minutes, and they work once.

Your choices

You can ask us what we hold about you, ask us to correct it, ask us to delete it, or withdraw your consent to our letters at any time. Write to [email protected]; we answer within 30 days, and usually much sooner. We may need to keep order records for the tax period above even after closing an account. If you are not happy with our answer, you can contact the Office of the Privacy Commissioner of Canada.

Keeping it safe

Everything travels over an encrypted connection. Download and sign-in links are signed and expire. We do not use passwords, so there are none to steal, and only we can reach the records behind the library and orders.

Changes

If we change this page, the date at the top changes too. If a change matters for what we do with your email, we tell you in our next letter before it takes effect.