Privacy Policy

1. Who we are

TimsMenus.ca is an independent reference site for the Canadian Tim Hortons menu. Independent site. Not affiliated with Tim Hortons. This policy covers the website at https://timsmenus.ca only. Questions go to [email protected].

2. What we collect, and when

2.1 Things you submit

Two features on this site accept input, and both are optional:

• Star ratings. When you rate an item, we store the item, the star value and a timestamp. Nothing identifies you — no account, no IP address stored against the vote.
• Comments. When you post a comment we store the text, the page it belongs to, the display name you typed (or "Guest" if you left it blank) and a timestamp. If you put your real name or an email address into the comment body, that becomes public — please do not.

Both are held in a Supabase database. There is no account system, so there is nothing to log into and nothing linking one submission to another.

2.2 Things your browser sends

Like any website, our host receives standard request information — IP address, browser and device type, the page requested and the referring page. This is used for security and aggregate traffic understanding, and is not combined with anything you submit.

2.3 Things stored on your own device

Several features keep data in your browser's localStorage. It never leaves your device and we cannot read it:

• th-rated — which items you have rated, so the widget shows your own star instead of resetting.
• th-cmt-last — when you last commented, used only for a short posting cooldown.
• tim-hortons-meal-plan — your saved weekly meal plan and budget, if you press Save Plan.
• Recipe progress — which ingredients and steps you have ticked off on an item page.

Clearing your browser data removes all of it. Nothing is lost except your own convenience.

3. Advertising

This site is funded by advertising and uses Google AdSense. Google and its partners may set cookies to serve and measure ads, and may personalise what you see based on your prior activity across the web. That happens in Google's systems, not ours — we do not receive the profile and cannot see it.

You control it directly:

• Turn off personalised advertising at Google Ad Settings.
• Read how Google uses data at Google's partner sites policy.
• Opt out more broadly through the Digital Advertising Alliance of Canada.

Turning off personalisation does not remove ads — it makes them less relevant, and nothing else changes.

4. Spam protection

The comment and contact forms use Cloudflare Turnstile to tell people from bots. Turnstile runs a check in your browser and may set a short-lived cookie. It does not track you across other sites and does not profile you. Cloudflare's handling is covered by their own privacy policy.

5. Who we share with

We do not sell, rent or trade anything about you. The only third parties involved are the ones needed to run the site:

• Our hosting provider — serves the pages and sees standard request data.
• Supabase — stores ratings and comments.
• Google AdSense — serves advertising.
• Cloudflare — Turnstile spam protection.

6. Children

This site is not directed at children under 13 and we do not knowingly collect anything from them. If a child has posted a comment containing personal details, write to us and we will remove it.

7. Your rights

Under Canadian privacy law (PIPEDA) and comparable rules elsewhere, you may ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. In practice there is rarely anything to find, since ratings carry no identity and comments carry only what you typed. To have a comment removed, email [email protected] with the page and roughly when you posted it.

8. Changes to this policy

If this policy changes materially — a new service, a new category of data — the effective date at the top changes with it. We will not quietly alter what we do and leave the date sitting where it was.

9. Contact

Privacy questions and deletion requests: [email protected], or through the contact page. We reply within two business days.