Of Record publishes public records, so most of what is here is not about you at all. This page says exactly what is collected about readers, subscribers and customers, and what happens to it. Last updated 2026-09-26.
No account, no registration, and no personal information is required to read anything.
The pages carry Google Analytics, which records that a visit happened and what was clicked: the page, which council's site it was, whether a link went to the municipality's own portal or elsewhere, a search term typed into the site's search, and how much text was copied. Google receives your IP address and sets its own cookies as part of this; Google's handling of that is governed by its own terms.
No advertising network is present. Nothing here builds a profile of you across other sites, and no reader data is sold, rented or shared with anyone — including with municipalities and with paying customers.
| What is kept | Why |
|---|---|
| Your email address | to send the digest you asked for |
| Which municipality you asked about | to send the right one |
| When you asked, and when you confirmed | to prove the consent is real |
| A random token | to identify your subscription without a password |
| Whether a message bounced or you unsubscribed | to stop sending |
Subscribing is double opt-in: nothing is sent until you click a link in a confirmation email, so an address cannot be signed up by someone else. Every message carries a one-click unsubscribe that works in a single request, and the postal address Canadian anti-spam law requires. Unsubscribing is honoured immediately and permanently unless you subscribe again.
Your address is used for that digest and for nothing else. It is never sold, never shared with the municipality, and never used to advertise the paid products.
An account holds its name, the email addresses of its users, the searches it has saved, which alerts have already been sent to it, and its Stripe customer and subscription identifiers. There are no passwords anywhere: signing in is a single-use link sent to your address. Login tokens, session tokens and API keys are stored as one-way hashes, so a copy of the database does not yield a working key.
Payment is processed by Stripe, which holds the card details; Of Record receives only the identifiers it needs to know what an account has paid for.
Of Record publishes what municipalities publish about people acting in office: the name, title, ward and official contact details a municipality puts on its own council page, the description it writes of its own members, and what the minutes record them doing — moving a motion, voting, being present, declaring an interest.
This is public proceedings of a public body, published for the purpose it was created for. Nothing is collected about officeholders from beyond the municipality's own publications, with one narrow and recorded exception: where minutes print only a surname and the municipality publishes no council page, a full name may be taken from an encyclopaedia entry, only to expand a surname already observed in that council's own roll call, and the source of that name is stored and shown.
If you believe something about you here is inaccurate, write to [email protected] and it will be checked against the source document and corrected within two business days if it is wrong. Where the municipality's own document is what is wrong, the correction has to begin with them, and Of Record will note the dispute in the meantime.
Requests to remove accurate records of public proceedings are generally declined, for the reason the record exists: a council's decisions are the public's.
| Who | What they see | Where |
|---|---|---|
| Google Analytics | reader page views and clicks, IP address | United States |
| Resend | the email address a message is sent to, and its content | United States |
| Stripe | customer name, email, card details | United States |
| Cloudflare | requests to the public sites, in transit | global network |
No other processor is used. The record itself, every account and every subscriber address are stored on a machine in Ontario, Canada, with backups held in the same province.
Subscriber addresses are kept until you unsubscribe, after which the address is kept only as a record that it unsubscribed, so it is never mailed again. Account records are kept while the account exists and for seven years afterwards where tax law requires it; saved searches and alert history are deleted with the account. The public record itself is permanent — that is the point of it.
You may ask what is held about you, ask for it to be corrected, ask for a copy, or ask for it to be deleted where it is not part of the public record, by writing to [email protected]. Requests are answered within thirty days. If you are not satisfied, you may complain to the Office of the Privacy Commissioner of Canada.
Of Record — P.O. Box 637, 1020 Kennedy Cir, Milton, ON L9T 5S0 — [email protected]