Skip to content
Building Review

Privacy policy

Last updated 2026-10-11

Building Review collects as little as it needs to run a review site. Here is what that is, who can see it, and how to get it removed.

What we collect

When you create an account: your email address, a username you choose, and a password, which we store only as a one-way hash. We cannot read it.

What you post: reviews, ratings, comments, votes, reports, suggested edits to building details, buildings you add, and issue reports with the dates you enter.

When you sign in: a session cookie, so the site knows who you are from one page to the next.

We do not use advertising or analytics trackers, and we do not ask for your name, phone number or address.

What other people can see

Your username, reviews, comments, ratings and the buildings you added are public, and appear on your profile page. Your email address is never shown to other users. Do not put personal details such as your unit number or phone number in a review.

How we use it

To run the site: signing you in, showing your posts, sending the emails described below, stopping abuse, and letting moderators review reports. We do not sell your information or use it for advertising.

Cookies and local storage

One cookie, condo_session, keeps you signed in. It is HTTP-only, and it lasts up to 30 days, or until you sign out. Your light or dark theme choice is saved in your browser’s local storage. There are no advertising or tracking cookies.

Email

We send email only when you ask for it: confirming your address and resetting your password. These go through Resend, an email delivery service, which receives your address and the message.

Who else handles your data

Hosting. The site and its database run on Microsoft Azure servers in the United States (West US 2). Your information is stored and processed there, not in Canada.

Maps. Map images are loaded from OpenStreetMap’s servers, which see your IP address and the area you are viewing, as with any website that embeds a map.

Usage statistics. We keep counts of requests per page type and response times, so we can tell if the site is slow. They do not include IP addresses, usernames or the exact pages you visit. Your IP address is used briefly in memory to limit repeated sign-in and sign-up attempts, and is not saved to our database.

Public data on building pages

Building facts, permits, bylaw cases, rents and crime figures come from public sources such as the City of Toronto, CMHC and the Toronto Police Service. They describe buildings and neighbourhoods, not you.

Deleting your account and data

You can delete your account yourself at any time, from the bottom of your profile page. Deleting it removes your account, your sign-in sessions, and the reviews, comments, votes, reports, suggested edits and issue reports you posted. It cannot be undone. Buildings you added stay on the site because they describe a place, but we remove the link to your account.

Deleting a review also changes that building’s average rating, since the rating is a plain average of the reviews that remain. Backups of the database may keep copies for a short time before they are overwritten.

Your rights

You can edit or delete what you posted yourself, and delete your account as described above. If you want to know what we hold about you, or have a privacy question, email privacy@overchurned.com. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

Children

The site is not meant for anyone under 16, and we do not knowingly collect their information.

Changes

If this policy changes in a way that matters, we will update the date at the top. Questions go to privacy@overchurned.com.