Privacy Policy

SunshineList runs no analytics, advertising or tracking scripts of our own, and sets no cookies of its own (Cloudflare may set a short-lived security cookie when it challenges a visit). Our CDN, Cloudflare, may run a bot-detection script on each page and provides us with aggregate, non-identifying traffic counts, which we snapshot into a database we run ourselves; Cloudflare and our host, Fly.io, each also necessarily process your IP address and request metadata to deliver and protect the site — see Third-Party Services and Hosting below for what that involves.

In the future, we may display advertisements through Google AdSense, which uses cookies to serve ads based on your visits.

This site also uses Cloudflare as a security and performance processor. Cloudflare may process technical data such as your IP address and request metadata to protect the site from abuse and to deliver it faster. This includes Cloudflare’s Bot Fight Mode, which challenges automated traffic; we keep it on because this site has previously been targeted by large-scale automated scraping, and it does not affect normal browser visitors.

All salary data displayed on this site is public record, published by the Government of Ontario under the Public Sector Salary Disclosure Act, 1996. SunshineList does not collect or publish any private information.

The salary data on this site is sourced from official Ontario government publications. If you wish to have your information removed from the government’s disclosure, please contact the Government of Ontario directly. SunshineList merely republishes publicly available government data.

If you believe this site made an error in how it processes, resolves, or displays a record — as opposed to an error in the underlying government disclosure itself — see our Contact page for how to request a correction.

The application itself is hosted in Canada, on Fly.io’s Toronto region. Every request also passes through Cloudflare first, as our CDN and security layer; Cloudflare is a US-based company, so some processing of your IP address and request metadata happens outside Canada before it reaches our server.

Fly.io and Cloudflare each keep their own brief, short-lived operational request logs (which include your IP address) under their own retention policies, which we do not control and are not able to promise a specific duration for.

Separately, we run our own hourly job that copies Cloudflare’s aggregate traffic counts — visits by hour, country, page, and bot-class — into a database we host ourselves, and we keep those aggregate counts indefinitely, not just for Cloudflare’s own roughly eight-day query window. That database never records an IP address, a user-agent string, or a cookie. One of its tables does record the specific page path when it is among that hour’s most-requested, so a busy page — including an individual person’s page — can appear in this log as a bare path; it is never linked there to any visitor’s IP address, device, or identity.

Under Canadian privacy law (PIPEDA), you can ask what limited technical data we hold about you and request that an error be corrected — see Contact below and the Contact page. As with any small independent site, a reply may take time; we do not have a formal response-time commitment to offer today.

If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada, which oversees compliance with PIPEDA.

For privacy inquiries, email privacy@sunshinelist.fyi.

We may update this privacy policy from time to time. Any changes will be posted on this page.