Privacy policy

In effect as of October 19, 2026

Language. This is a courtesy translation. Under Quebec's Charter of the French Language, the French version is the official one and prevails in the event of any discrepancy.

1. Person in charge of personal information

Simon Lacroix, doing business as “Bonjour la toile” (NEQ 2274467762), publishes Littero (littero.com) and is responsible for the personal information collected on this site.

In accordance with Quebec's Act respecting the protection of personal information in the private sector, the person in charge of the protection of personal information is:

Simon Lacroix
105-3700 Évariste-Leblanc Street, Laval, Quebec H7V 0C4, Canada

For any question or to exercise your rights: the contact form, or by mail at the address above.

2. Scope

This policy applies to the littero.com website, in all its languages, and to your exchanges with us by email. It does not apply to third-party sites we link to, including the sites presented in the directory and online bookstores.

3. Information we collect

Information you give us

• Site submission: the site's address and name, the category and tags chosen and, if you provide it, your email address.
• Book submission: information about the book (title, author, publisher, synopsis, cover, links) and, if you provide them, your name and email address.
• Category suggestion: the suggested name, your note and, if you provide it, your email address.
• Comments: the display name, published with the comment, its content and, if you provide it, your email address, which is never published.
• Correspondence: the content of your messages, sent through the contact form (name, email address, subject, message) or by email, and our replies, kept in our message centre.

Information collected automatically

• IP address, used for security and rate limiting. With a form, a comment or a vote on a comment, it is kept only as a non-reversible fingerprint, used to slow down repeated submissions.
• Browser and device type.
• Pages viewed, counted per page and per day, and referring site (its domain name only); searches made on the site; outbound links clicked; addresses not found.
• Country, derived from your IP address by our content delivery network, to send a purchase link to the store of your country.
• Technical logs of our servers and of our content delivery network.

We do not collect sensitive information (origin, political opinions, religious beliefs, sexual orientation, health or biometric data), and we do not seek to identify the visitors of the site by name. Littero has no visitor accounts and sends no notifications to visitors.

4. Purposes

• Review the sites and books submitted, publish those that are accepted and write to you about your submission.
• Answer your messages and requests.
• Publish and moderate comments.
• Measure the audience of the site and improve its content and operation.
• Serve advertisements and be paid for our affiliate partnerships.
• Keep the site secure and prevent fraud, spam and abuse.
• Meet our legal, accounting and tax obligations.

We do not use your information for any other purpose without informing you and, where the law requires it, obtaining your consent.

5. Basis of processing and consent

We collect your information either because it is necessary to follow up on your request (submission, message, comment), because the law requires it, or because you have given your free and informed consent.

Where processing relies on your consent (advertising cookies), it is requested separately, for each purpose, and you may withdraw it at any time without affecting the lawfulness of the processing carried out beforehand.

6. Audience measurement

We measure the audience of Littero with our own tool, built into the site, and not with a third-party analytics service. A small script served by the site itself reports each page view; it contacts no third-party domain.

This measurement sets no cookie and builds no individual profile. It keeps neither your IP address, nor a fingerprint, nor an identifier: only counters, per page and per day, and the domain name of the site you came from.

7. Cookies and local storage

A cookie is a small file placed on your device when you visit a site. Littero uses:

• necessary cookies, only where a feature requires them: the protection of a form (contact, site or book submission, category suggestion) and the memory of the universe you chose;
• advertising cookies, set by Google AdSense for the ads, according to your consent.

La Pioche and the event games keep in your browser (local storage) the books already turned over and the progress of the game. La Pioche sends the site the list of books already seen, so as not to offer them to you again, with nothing that identifies you.

Littero sets no audience-measurement cookie. Consent to advertising cookies is collected by Google's consent message, shown according to your region. Your browser also lets you block or delete cookies and local storage; blocking necessary cookies may prevent you from sending a form.

8. Advertising and affiliate links

Littero displays advertisements served by Google AdSense. This network may set its own cookies and collect browsing data to measure the performance of ads and, where you have consented, to personalize the ads shown to you. It then acts on its own behalf, under its own privacy policy, which we invite you to read. Without your consent, ads are shown without personalization.

Book listings and some articles contain affiliate links to online bookstores, Amazon and Les Libraires. When you click such a link, the site records the click (page of origin, destination, date, country) and the merchant receives an affiliate identifier that lets it attribute the commission to us. The merchant then handles your visit under its own policy.

Links to the sites in the directory also go through a click counter, which keeps the listing, the page of origin, the language and the device type, and nothing that identifies you.

We do not sell or trade your personal information.

9. Listed sites and screenshots

To present a site in the directory, our robot, LitteroBot, visits its home page, takes a screenshot published on the listing and regularly checks that the link responds. The screenshot only shows what the site displays publicly. The person responsible for a site may write to us to have its listing or screenshot corrected or removed.

10. Disclosure to third parties

We disclose personal information only to the following categories of recipients, and strictly to the extent necessary:

• our hosting and infrastructure providers: Railway (applications and databases) and bunny.net (content delivery network, media storage, DNS);
• our email sending and receiving services: ZeptoMail and Forward Email;
• the Google AdSense advertising network;
• the merchants of our affiliate programs, which receive only an affiliate identifier;
• our language-model providers, for assisted writing and translation of content, which never receive your personal information;
• our professional advisers (accountant, lawyer), bound by confidentiality;
• a public authority, where the law requires it.

Each of these providers is bound by terms that limit the use of the information to the sole purposes for which it is entrusted.

11. Transfers outside Quebec

Our application servers and databases are operated by Railway in the United States. Our content delivery network and media storage are operated by bunny.net, a company based in Slovenia whose points of presence are spread around the world. Our email providers are based in the United States or the European Union. Your information may therefore be hosted or processed there.

Before any transfer outside Quebec, we carry out the privacy impact assessment required by law, to make sure the information receives adequate protection, and we frame the transfer with the provider's contractual terms.

12. Retention periods

We keep personal information only until the purpose for which it was collected has been achieved, then we destroy it or irreversibly anonymize it. An automated task applies the following periods every day:

• Correspondence: a conversation in our message centre (your messages and our replies, including about a submission) is deleted twelve (12) months after its last message; a conversation classified as unwanted, thirty (30) days after its last message.
• Site submission: if declined, it is deleted thirty (30) days after the decision; if accepted, your email address and the fingerprint of your IP address are erased from it thirty (30) days after acceptance.
• Book submission: whether accepted or declined, your name and email address are erased from it thirty (30) days after the decision; the information about the book remains.
• Comments: a published comment stays online, with the display name, until you ask for its removal; your email address, the fingerprint of your IP address and the browser type are erased from it thirty (30) days after moderation. A declined or unwanted comment is deleted thirty (30) days after moderation.
• Votes on a comment: the IP address fingerprint is deleted thirty (30) days after the vote.
• Category suggestion: deleted, with your email address and your note, thirty (30) days after the decision.
• Audience measurement: aggregated, non-identifying counters, kept four hundred (400) days.
• Technical logs: according to the retention period of our hosting providers (Railway and bunny.net).

A submission, comment or suggestion awaiting a decision is kept until the decision. Searches made on the site, addresses not found and outbound clicks are recorded without personal information.

13. Security

We apply reasonable measures to protect your information: encrypted communications (HTTPS), access to the administration restricted to the operator and protected by a password stored as a hash, regular backups and security updates.

Since no system is infallible, we cannot guarantee absolute security; we do however undertake to respond promptly to any incident.

14. Automated decisions

We make no decision producing legal effects on you based solely on automated processing. Our spam protection systems may automatically set aside a message, a submission or a comment deemed abusive. You may write to us to contest such a refusal and obtain a human review.

15. Your rights

Subject to the conditions provided by law, you have the right:

• of access: to obtain confirmation that we hold information about you and to receive a copy;
• of rectification: to have inaccurate, incomplete or ambiguous information corrected;
• to withdraw consent: at any time, for processing that depends on it;
• to deletion or de-indexing: to have the dissemination of information stopped, or a hyperlink removed, where the dissemination causes you serious harm;
• to portability: to receive, in a structured and commonly used technological format, the computerized information you provided to us;
• to complain: to the Commission d'accès à l'information du Québec.

To exercise a right: the contact form, or by mail at the address in section 1. We may ask you to prove your identity. A written, reasoned reply will be sent to you within thirty (30) days of receiving your request. This service is free of charge.

16. Information about minors

Littero is not intended for children under 14 and we do not knowingly collect their information. If you find that a child has sent us information without the consent of the holder of parental authority, write to us: we will delete it without delay.

17. Confidentiality incidents

In the event of a confidentiality incident presenting a risk of serious harm, we will notify the Commission d'accès à l'information and the persons concerned without delay, and we will keep the incident register required by law.

18. Changes to this policy

We may change this policy to reflect changes in our practices or in the legal framework. The effective date appears at the top of the document. In the event of a significant change, we will inform you by a visible notice on the site.

19. Questions and complaints

First address any question or complaint to our person in charge of the protection of personal information: the contact form, or by mail at the address in section 1.

If our reply does not satisfy you, you may apply to:

• the Commission d'accès à l'information du Québec;
• the Office of the Privacy Commissioner of Canada, for processing covered by PIPEDA.