Privacy Policy

Last updated: October 23, 2026

At KitSpread, we respect your privacy. This policy explains what personal information we collect, why we collect it, who can see it, and what choices you have. It applies to kitspread.com.

Information We Collect

Account information. When you register with an email address, we collect your username, your email address and the password you choose. Your password is stored in a protected (hashed) form, and we cannot read it. When you log in or register using Google or Facebook, we collect only the minimum needed to create and authenticate your account, typically your name, email address and profile picture.

Content you add. This includes your Kits, gear lists, descriptions, locations and activities, and the photos you upload. Photos can contain hidden information, such as the place where they were taken, so please check your photos before uploading them.

Technical information. Like most websites, our servers and security tools record technical information such as your IP address, browser type and the pages you request, so that the site works and stays secure.

How We Use and Share It

We use your information to:

• create and manage your account and let you log in;
• let you create, edit and share Kits;
• send you account emails, such as a link to finish creating your account or to reset your password; and
• protect the site against fraud, spam and automated abuse.

We do not sell your personal information, and we do not use it for advertising. We share it only with the services that help us run KitSpread, and only as needed: our website hosting provider (which also handles our account emails), Cloudflare (see below), and Google or Facebook if you choose to log in with them. We may also disclose information if the law requires it.

What is public. Kits you publish, and the name shown with them, can be seen by anyone who visits the site. Drafts and Kits pending review are visible only to you and to the people who run KitSpread. Your email address is never shown publicly.

Bot Protection (Cloudflare)

When you create an account or request a password reset link, we use Cloudflare Turnstile, a security check provided by Cloudflare, Inc., to confirm that the request comes from a person and not an automated program. While the check runs, Cloudflare receives information from your browser and device, such as your IP address and certain browser and device characteristics, in order to make that decision. We use this only to prevent automated sign-ups and abuse of our email features. Cloudflare handles this information under its own privacy policy: cloudflare.com/privacypolicy.

We also use a security plugin on the site that records suspicious activity, such as repeated failed logins.

Cookies

We use only the cookies and browser storage that the site needs to work, for example to keep you logged in. When you use Google or Facebook to log in, those services may set their own cookies under their own policies. We do not use advertising or tracking cookies.

Storage and Retention

Where it is stored. Your information may be stored or processed by our service providers on servers located outside Quebec, including outside Canada. When that happens, we take reasonable steps to make sure it is protected in line with Quebec privacy law.

How long we keep it. We keep your account information and content for as long as your account exists. If you ask us to delete your account, we delete it, along with the content you added, unless the law requires us to keep something. If you started a registration but never finished it and would like it removed, contact us.

Your Rights

You can ask to see the personal information we hold about you, to have it corrected, to have it deleted, or to withdraw your consent to our use of it. Where it applies, you can also ask for a copy of your information in a commonly used format. To make a request, write to us at contact@kitspread.com. We will reply within 30 days.

Data Deletion

If you created an account using Google or Facebook and want your data removed, please visit our Data Deletion page for full instructions.

Children

KitSpread is not intended for children under 14, and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.

Contact and Changes

The person in charge of the protection of personal information at KitSpread can be reached at contact@kitspread.com. If you are not satisfied with our response to a privacy concern, you may also contact the Commission d’accès à l’information du Québec (cai.gouv.qc.ca).

If we change this policy, we will update the date at the top of this page. For significant changes, we will also let account holders know by email.