ToyotaWaits.ca🇨🇦 Canada“The piano has been drinking, and your Toyota is still on a boat.”
Back to Wait Times
Zero-PII Guaranteed
PIPEDA Compliant

Privacy Charter & Anonymity Model

At ToyotaWaits.ca, privacy is not a policy addendum—it is our core software architecture. We designed our database and APIs so it is technically impossible for us to collect, store, or sell your personal information.

Zero PII Collected

No names, emails, phone numbers, dealer names, or 17-digit Vehicle Identification Numbers (VINs).

Zero IP Persistence

Client IP addresses are evaluated ephemerally in RAM sliding windows for spam defense and never saved to Postgres.

Cryptographic Edit Keys

Order updates use client-side UUID keys hashed via SHA-256. No user accounts or passwords needed.

1. Zero Personally Identifiable Information (Zero-PII)

When you submit a vehicle timeline on ToyotaWaits.ca, we collect only high-level aggregate metadata:

  • Vehicle configuration: Model (e.g. RAV4), Powertrain (e.g. PHEV), and Trim.
  • Dates: Order deposit date and (optionally) delivery arrival date.
  • Geography: Province (e.g. BC, ON, QC) and optional metropolitan area.
  • Pricing transparency: Whether the vehicle was purchased at MSRP or with dealer add-ons.

All free-text notes submitted to our API pass through regex sanitization filters that reject email addresses, phone numbers, postal codes, and 17-character VIN patterns before touching database persistence.

2. Client-Side Cryptographic Self-Service Updates

Most platforms force you to create an account with an email address and password to update your pending orders. ToyotaWaits.ca eliminates this requirement:

How the Anonymous Secret Key Works:

  1. When you submit an order, your browser creates a random UUIDv4 secret key.
  2. Our server receives the submission, computes a one-way cryptographic SHA-256 hash of your key, and stores only the hash in our PostgreSQL database.
  3. The plaintext secret key is saved exclusively in your device's browser localStorage.
  4. When your car arrives months later, your browser sends the secret key via the x-edit-key-hash header to mark your order as delivered.

3. PIPEDA & Canadian Legal Compliance

ToyotaWaits.ca complies fully with the Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial privacy statutes (PIPA Alberta, PIPA British Columbia, and Quebec Law 25).

Under PIPEDA Principle 4.4 (Limiting Collection), an organization may only collect personal information necessary for specified purposes. Because ToyotaWaits.ca does not collect personal identifiers, no personal data can be intercepted, breached, or subpoenaed from our systems.

4. Open Community Data (RFC 4180 CSV)

All submitted wait-time logs are compiled into public, sanitized datasets accessible via our one-clickCSV exportfeature. Anyone can audit our median wait calculations, analyze allocation disparities between provinces, or verify statistical accuracy.

5. Cookieless Web Analytics & Affiliate Disclosure

We do not use advertising trackers, Google Analytics cookies, or persistent third-party pixels. Our traffic measurement uses first-party, privacy-friendly aggregated page counts that do not track users across websites.

Monetization Disclosure: Curated accessory links under /out/[slug] use first-party redirects that do not set cookies. If you purchase products through these links, we may receive an affiliate referral fee that supports site hosting and open data infrastructure.

Return to Tracker Dashboard