Privacy

1Who we are

HR IQ is created and supplied by Matt Laframboise, in Ontario, Canada. That is the person accountable for the information described here, and the person who answers when you write.

Contact: matt@theraspberry.ca

No company is registered for this business yet. When one is, this page names it and the change is dated here rather than made quietly.

2What this website collects

Almost nothing, and it is worth being specific rather than reassuring. Nothing in the list below is built into this site — see §3 for what the hosting provider adds. This site does not:

• set cookies of any kind, including “essential” ones;
• run analytics — no Google Analytics, no Plausible, no Fathom, nothing;
• have accounts, sign-in or passwords;
• have a database or any server-side store;
• use tracking pixels, advertising tags or social embeds;
• write anything to your browser’s local storage;
• load fonts, scripts or images from anyone else — the typefaces are compiled into the site and served from this domain, so your browser never contacts a font provider.

3The exceptions: the host, its logs and its tracker

This site is served by a web host, and web hosts keep request logs. Those typically record your IP address, the page requested, the time, and your browser’s user-agent string. That is standard practice for any website and it is not something we switch off or read routinely, but it is real, and a privacy statement that claimed “we collect nothing at all” would be false. We do not combine the request logs with anything else, do not use them to build a profile of you, and do not share them.

The host also adds its own traffic-analytics script to every page, and this site tells your browser not to run it. The script is not part of the site we build, and the host has confirmed that it cannot be switched off. So every page is sent with a security policy that lets your browser run only scripts this site serves. The host’s script comes from img1.wsimg.com, so it is refused.

Before the policy, that script fetched a second file, sent two requests to csp.secureserver.net and set three cookies on theraspberry.ca, not this site alone: _tccl_visitor for a year, _tccl_visit for 30 minutes and _scc_session for 20. Measured in Chrome on 2 October 2026 with the policy in place, on every page and in the demo: no request left the browser for it, and no cookie was set.

Your developer tools will show the refusal: one blocked script, and a console message about it, on each page. What does run is a few lines the host writes into the page itself, which store some settings for that script and send nothing. The host can change what it adds without telling us, and we check for that each time we publish the site. You are better served by being told all of this than by an absolute you could disprove with your developer tools.

4The access-request form

The form on the home page does not submit to us over the internet. It assembles what you typed into a message and opens your own email program with it ready to send. Nothing leaves your machine until you press send in your own mail client, and if you close it instead, we never see anything.

When you do send it, we receive an ordinary email — your name, your organisation, your email address and whatever you wrote. We use it to answer you, and we keep it in the mailbox in the same way any business keeps correspondence. Ask us to delete it and we will.

5What we never do

• Sell, rent or trade personal information. There is no version of this business that involves that.
• Send marketing email to someone who did not ask us to.
• Pass your details to a third party. What the host collects for itself is described in §3.

6What the HR IQ product stores — a different answer

The product is not a website. It is a folder of files that runs entirely inside your browser, with no server of any kind. Everything a learner creates — progress, notes, the Experience Portfolio, the CPD log, career pathway, examination practice and tool drafts — is written to that browser on that device and goes nowhere else.

We hold no copy of it. Not “we choose not to look”: there is no channel by which it could reach us, and you can confirm that by opening your browser’s network tools and using the product normally. Every release is tested with all off-origin requests blocked at the browser and the count required to be zero.

On the public demo linked from this site, the same host adds the same script, and the same policy stops your browser running it: measured on 2 October 2026, the demo sent no request for it and set no cookie. Neither the script nor the policy is part of the product, and neither is in the copy a customer receives. The demo is for looking around, so use made-up details in it.

Three consequences follow, and buyers should weigh all three:

• That device is the only copy. Clearing browser data deletes the work permanently. There is no account recovery, because there is no account. The in-product export is the only backup.
• The user list is installation-wide. On a shared or kiosk machine, anyone able to open that browser’s developer tools can read the roster set up on it — names, email addresses and roles — and any learner work still resident.
• Roles are display controls, not security boundaries. Administrator, manager and learner change what the product shows; they cannot stop someone holding the device from reaching anything. With no server there is no way to make them do more, and saying otherwise would create a confidence the architecture cannot support.

The product carries its own disclosure page listing every category it stores, with the actual size of each on that device, measured live rather than described. It is reachable from the sign-in screen without signing in.

7If an employer buys seats for its staff

The work stays in each employee’s own browser. Nothing is reported to the employer, and nothing is reported to us. There is no administrator dashboard that can read another person’s portfolio across machines, because there is no channel between machines.

Our reading is that an employer deploying HR IQ is accountable for what sits on its own devices, and that we are neither a processor nor a controller of it, because none of it reaches us. That characterisation is with counsel; if it changes, this page changes.

8Your rights, and the honest limit on them

Under Canadian privacy law you may ask what personal information an organisation holds about you, ask for it to be corrected, and ask for it to be deleted. Write to the address in §1 and we will answer.

The limit is worth stating plainly rather than burying: we cannot delete what we never received. If your concern is data inside a copy of HR IQ, that data is on your device or your employer’s, not with us. The product’s own erase function removes it, and clearing the browser’s storage removes it. We have no ability to reach it and no record that it existed.

9Changes to this page

If what we do changes, this page changes first, with the date at the top updated. If a change is significant — a backend, an analytics tool, anything that makes the statements above less true — it will be described here rather than reflected only in a new date.

10Questions and complaints

Write to matt@theraspberry.ca. If you believe a concern has not been resolved, the Office of the Privacy Commissioner of Canada and the Information and Privacy Commissioner of Ontario each accept complaints within their jurisdiction.