Privacy Policy
How WomensHealthPrices.ca handles personal information, in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
1. What we collect today
Browsing WomensHealthPrices.ca to compare treatment prices does not require an account, a sign-up, or any personal information. We do not currently operate a working newsletter, price-alert, or waitlist signup. If you notice a form on this site asking for your email address, it is not yet connected to any mailing list — submitting it does not create or store a record of your information, because there is no subscription system running behind it today. If you email us directly (for example, at hello@womenshealthprices.ca), we receive and read that message the same as any other email, and use it only to respond to you.
2. Cookies
This site uses next-auth to power our own administrative sign-in, and its session-checking code runs on every page you visit, not only on the admin dashboard. As a result, two small cookies — next-auth.csrf-token and next-auth.callback-url — are set in your browser on every page load, for every visitor, not only when the site owner signs in. Both are marked HttpOnly and SameSite=Lax. They exist solely to support the login system’s built-in security checks (CSRF protection and post-login redirect handling) — they do not identify you, are not used for advertising, and are not used to build a profile of your browsing. A further, separate session cookie is set only if the site owner actually completes admin sign-in; that one is genuinely restricted to managing prices and content. We do not use advertising cookies, and we do not run Google AdSense on this site.
3. Analytics
This site’s codebase supports two privacy-conscious analytics options — Google Analytics 4 and Umami — but as of the date at the bottom of this page, both are switched off: neither script loads on any page you visit. We have not yet decided which one (if either) to run before this site’s public launch. If we turn one on, we will update this section first. Analytics, when enabled, would record aggregate usage such as which pages are viewed and which outbound provider links are clicked — not your name, email address, or any information that identifies you individually.
4. Error tracking
We use Sentry, an error-monitoring service, in our production environment only. If something on the site breaks, Sentry may capture technical diagnostic information — such as the error message, the page URL, and general browser/device information — to help us find and fix the problem. Session replay (recording what a visitor did on the page) is switched off. This data is used only for debugging, never for marketing, advertising, or profiling.
5. Affiliate and outbound links
Some links on this site lead to third-party telehealth providers or products, and some of those are affiliate links (see our affiliate disclosure). Clicking one takes you to that provider’s own website, which has its own privacy practices — we encourage you to review them. If analytics is enabled in the future, we may record in aggregate that a particular outbound link was clicked from a particular page; we do not receive any personal information you subsequently provide to that third-party site.
6. Hosting and data storage
This site is built on PostgreSQL (hosted by Neon) and served by Vercel. It also uses Redis, a caching service, to temporarily store the results of price and coverage lookups so repeat visits load faster — this cache holds aggregate treatment and price data only, never personal information about a visitor. These providers may store or process data outside of Canada. Under PIPEDA, we are responsible for ensuring our service providers protect information to a comparable standard, and each maintains industry-standard security practices, including encryption in transit. All traffic to this site uses HTTPS.
7. Third-party sharing
We do not sell, rent, or trade personal information. We do not currently operate any feature that collects personal information from visitors, so there is nothing of that kind to share. If that changes — for example, if a newsletter or price-alert signup goes live in the future — we will update this policy before launching it, and it will describe exactly what is collected, why, and who it is shared with.
8. Your rights under PIPEDA
Under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to access, correct, or request deletion of any personal information we hold about you, and to withdraw consent for its use at any time. To exercise any of these rights, email us at hello@womenshealthprices.ca. We will respond within 30 days, as required by PIPEDA. If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada.
9. Changes to this policy
We may update this privacy policy as our practices change — most notably before enabling analytics or any personal-information collection feature. We will update the “Last updated” date at the bottom of this page whenever we do, and material changes affecting an active data-collection feature will be reflected here before that feature goes live.
10. Contact
Questions about this policy or how we handle information? Email us at hello@womenshealthprices.ca.
Last updated: July 24, 2026