Privacy policy

In effect as of October 26, 2026

1. Person in charge of personal information

Simon Lacroix, doing business as “Bonjour la toile” (NEQ 2274467762), publishes Creattero (creattero.com) and is responsible for the personal information collected on this site.

In accordance with Quebec's Act respecting the protection of personal information in the private sector, the person in charge of the protection of personal information is:

Simon Lacroix
105-3700 Évariste-Leblanc Street, Laval, Quebec H7V 0C4, Canada

For any question or to exercise your rights: the contact form, or by mail at the address above.

2. Scope

This policy applies to the creattero.com website, a guide of gift ideas for people who crochet, knit and quilt, and to your exchanges with us by email. It does not apply to the sites we link to, including Amazon and the other online stores where the products are sold: each of them handles your visit and your purchase under its own policy.

3. Information we collect

Information you give us

• Contact form: your name, your email address, the subject and your message.
• Correspondence: the content of the emails you send us and our replies, kept in our message centre with the messages from the contact form.

Creattero has no visitor accounts and no newsletter, and sells nothing itself: we never ask for a payment or a mailing address.

Information collected automatically

• IP address, used for security and to limit repeated requests. It is held for a few minutes in the server's memory and is not recorded in our database.
• Pages viewed, counted per page and per day, and the referring site (its domain name only).
• Clicks on a purchase link: the product, the page the click came from, the language and the type of device (computer or mobile).
• Searches made on the site, and addresses not found on the site (with the referring page and the browser's identification string).
• The number of gift finder games started and finished each day (see section 9).
• Technical logs of our servers and of our content delivery network, which include IP addresses.

We do not collect sensitive information (origin, political opinions, religious beliefs, sexual orientation, health or biometric data), and we do not seek to identify the visitors of the site by name.

4. Purposes

• Answer your messages and requests.
• Measure the audience of the site, see which gift ideas are useful and improve the site.
• Check that the products we present are still for sale.
• Keep the site secure and prevent spam and abuse.
• Meet our legal, accounting and tax obligations.

We do not use your information for any other purpose without informing you and, where the law requires it, obtaining your consent.

5. Basis of processing and consent

We collect your information either because it is necessary to follow up on your request (a message), because the law requires it, or because you have given your free and informed consent.

Where processing relies on your consent, it is requested separately, for each purpose, and you may withdraw it at any time without affecting the lawfulness of the processing carried out beforehand.

6. Audience measurement

We measure the audience of Creattero with our own tool, built into the site, and not with a third-party analytics service. A small script served by the site itself reports each page view; it contacts no third-party domain.

This measurement sets no cookie and builds no individual profile. It keeps neither your IP address, nor a fingerprint, nor an identifier: only counters, per page and per day, and the domain name of the site you came from.

7. Cookies and local storage

A cookie is a small file placed on your device when you visit a site. Creattero uses only necessary cookies, only where a feature requires them:

• a session cookie, set when you open the contact form, which protects the form against forged submissions. It is deleted when you close your browser;
• a cookie that remembers the section of the site you chose, kept sixty (60) days. It is only set if the site has more than one section, which is not the case today.

During a seasonal event on the site, your browser keeps in its local storage whether you closed the event's message, so that it is not shown to you again. Nothing is sent to us.

Creattero sets neither an audience-measurement cookie nor an advertising cookie. When you follow a purchase link, the store you arrive at may set its own cookies; Amazon uses them, among other things, to attribute qualifying purchases (see section 8). Your browser lets you block or delete cookies and local storage; blocking necessary cookies may prevent you from sending the contact form.

8. Purchase links and Amazon Associates disclosure

Creattero is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.com. As an Amazon Associate, Creattero earns from qualifying purchases. The price you pay is the same.

A purchase button for a product sold on Amazon may carry our Amazon Associates identifier. Amazon then reports to us the items ordered through our links, without your name or your contact details. The buttons for products sold by other stores are plain links, without an affiliate identifier: we earn no commission on them.

Every purchase link first goes through a click counter on our site, which keeps the product, the page of origin, the language and the type of device, and nothing that identifies you. The store then handles your visit and your order under its own policy.

We do not sell or trade your personal information.

9. The gift finder

The gift finder asks you five questions and shows three products. The products are chosen from your answers by fixed rules, without a language model and without a profile. Your answers are written in the address of the result page, so that you can share it; they are not linked to you. We count the games started and finished each day, without any identifier, and the purchase clicks made from a result, as described in section 8.

10. Our robot

Our robot, CreatteroBot, visits the product pages of the stores we link to: to check that the link still responds, and, when we add a product, to fetch the product image, which we copy to our own storage. It collects no personal information.

11. Disclosure to third parties

We disclose personal information only to the following categories of recipients, and strictly to the extent necessary:

• our hosting and infrastructure providers: Railway (applications and databases) and bunny.net (content delivery network, media storage);
• our email services: ZeptoMail (sending) and Forward Email (receiving);
• our professional advisers (accountant, lawyer), bound by confidentiality;
• a public authority, where the law requires it.

Other providers work for the site without receiving personal information about you: OpenRouter (language models, which receive only the facts about products and pages, to draft their texts), our proxy provider (used by our robot) and search-statistics services.

Each of these providers is bound by terms that limit the use of the information to the sole purposes for which it is entrusted.

12. Transfers outside Quebec

Our application servers and databases are operated by Railway in the United States. Our content delivery network and media storage are operated by bunny.net, a company based in Slovenia whose points of presence are spread around the world. Our email providers are based in the United States or the European Union. Your information may therefore be hosted or processed there.

Before any transfer outside Quebec, we carry out the privacy impact assessment required by law, to make sure the information receives adequate protection, and we frame the transfer with the provider's contractual terms.

13. Retention periods

We keep personal information only until the purpose for which it was collected has been achieved, then we destroy it or irreversibly anonymize it. An automated task applies the following periods every day:

• Correspondence: a conversation in our message centre (your messages and our replies) is deleted twelve (12) months after its last message; a conversation classified as unwanted, thirty (30) days after its last message.
• Audience measurement: aggregated, non-identifying counters, kept four hundred (400) days.
• IP address used against abuse: a few minutes, in the server's memory.
• Technical logs: according to the retention period of our hosting providers (Railway and bunny.net).

Purchase-link clicks, searches made on the site, addresses not found and gift finder counters hold no personal information; we keep them as statistics.

14. Security

We apply reasonable measures to protect your information: encrypted communications (HTTPS), access to the administration restricted to the operator and protected by a password stored as a hash, regular backups and security updates.

Since no system is infallible, we cannot guarantee absolute security; we do however undertake to respond promptly to any incident.

15. Automated decisions

We make no decision producing legal effects on you based solely on automated processing. Our spam protection may automatically set aside a message deemed abusive. You may write to us to contest it and obtain a human review.

16. Your rights

Subject to the conditions provided by law, you have the right:

• of access: to obtain confirmation that we hold information about you and to receive a copy;
• of rectification: to have inaccurate, incomplete or ambiguous information corrected;
• to withdraw consent: at any time, for processing that depends on it;
• to deletion or de-indexing: to have the dissemination of information stopped, or a hyperlink removed, where the dissemination causes you serious harm;
• to portability: to receive, in a structured and commonly used technological format, the computerized information you provided to us;
• to complain: to the Commission d'accès à l'information du Québec.

To exercise a right: the contact form, or by mail at the address in section 1. We may ask you to prove your identity. A written, reasoned reply will be sent to you within thirty (30) days of receiving your request. This service is free of charge.

17. Information about minors

Creattero is not intended for children under 14 and we do not knowingly collect their information. If you find that a child has sent us information without the consent of the holder of parental authority, write to us: we will delete it without delay.

18. Confidentiality incidents

In the event of a confidentiality incident presenting a risk of serious harm, we will notify the Commission d'accès à l'information and the persons concerned without delay, and we will keep the incident register required by law.

19. Changes to this policy

We may change this policy to reflect changes in our practices or in the legal framework. The effective date appears at the top of the document. In the event of a significant change, we will inform you by a visible notice on the site.

20. Questions and complaints

First address any question or complaint to our person in charge of the protection of personal information: the contact form, or by mail at the address in section 1.

If our reply does not satisfy you, you may apply to:

• the Commission d'accès à l'information du Québec;
• the Office of the Privacy Commissioner of Canada, for processing covered by PIPEDA.