Xavier de Belle

Law 25 — Québec

Privacy

One policy for the whole site and every tool on it. Last updated October 8, 2026.

The short version

  • Most tools collect nothing. Your photos, plans, budgets and ideas stay in your browser, on your device. I never see them.
  • Information leaves your device only when you choose to: when you sign in, turn on sync, sign up for an event, or send a form.
  • No ads. Your information is never sold or rented. No tracking cookies.
  • You can ask to see, correct, take a copy of, or delete your information at any time: xavier@debellephotography.com.

01

Who’s responsible

This website, xavierdebelle.com, and every tool on it are run by Xavier de Belle, in Montréal, Québec.

I am the person in charge of the protection of personal information. Questions, requests and complaints all come to me:

xavier@debellephotography.com

Some tools are made for de Belle Photography clients (Package Builder, Video Corrections, Wedding Day Schedule). When one of them sends information to the studio, de Belle Photography handles it under this same policy, and I answer for it.

02

What’s collected, tool by tool

Visiting any pageHosting & fonts

The site is hosted by GitHub Pages. Like any web server, GitHub receives your IP address and browser details when a page loads, and keeps them in its logs for security. I don’t receive those logs, and the site itself runs no analytics.

A few tools load their typefaces from Google Fonts (Activity Planner, Budget Tracker, Cycle Calendar, Package Builder, Project Phases, Video Corrections, Wedding Activities) or Adobe Fonts (Project Phases). Your browser then asks Google or Adobe for the font file, which shows them your IP address.

Tools that keep everything on your deviceNothing sent

Feed Planner, Carousel Planner, Portfolio Grid, Portfolio Masonry, FreeCanvas, Package Builder, Wedding Day Schedule, Neural Mind Map, Liquid Silver and Organic Loops — and the synced tools listed below when you aren’t signed in.

What you put in them is saved in your browser’s own storage, on your device. It never reaches me. Clearing the tool, or your browser’s data for this site, deletes it. The installable versions of Feed Planner and Carousel Planner work the same way, offline.

Sign in & syncAccount · Project Phases · Budget Tracker · Idea Bank · Notes · Journal · Kitchen · Cycle Calendar

When you sign in with Google, Google shares your name, email address, profile photo and Google account ID with the site, through Firebase Authentication. Signing in sends me an access request, which I approve or decline.

If you’re approved, Project Phases, Budget Tracker, Idea Bank, Notes, Journal, Kitchen and Cycle Calendar save your work in a database (Firebase Realtime Database) so it follows you between devices. Only your account can read your synced data. As the database administrator I could technically open it; I don’t, unless you ask me to fix a problem or the law requires it.

Kitchen with ClaudeOptional · only when a Claude key is added

If a Claude API key is added in Kitchen, four buttons send things to Anthropic to be read: Read it for me sends the photo of a recipe card, Guess the recipe sends a photo of a dish, What’s in there? sends the fridge photo, and Ideas from Claude sends a short text summary of your kitchen (what’s in the fridge, your diet and dislikes, what you cook most, and your recipe titles). Nothing is sent unless you press one. Anthropic returns the answer and handles what it receives under its own commercial terms and privacy policy. The key itself is kept on your device and in your account’s private synced data.

Activity PlannerEvents

Organisers sign in with Google (see above). Guests give their first and last name, email, phone number, an optional note, the activities they pick and how many spots.

Anyone with the event link sees the guest list: first name, last name and spots. Email, phone, notes and payment records are visible only to the organiser, and to me as administrator. Payments are never processed on this site; the organiser records them by hand. The organiser decides how guest information is used for their event, and is responsible for that use.

PotluckEvents

Guests give their name and how many people they’re bringing, and claim a dish. Anyone with the potluck link sees that list. Organisers sign in with Google.

Volley & BBQ ZineEvents

Players give their name and claim a dish. It’s stored in a separate database for the Monday games, and anyone with the link sees the list.

Wedding ActivitiesXavier & Maria

Guests give their name, email, phone number, notes and the activities they sign up for; the couple records payments. It’s stored in a separate database for the wedding. Names and activities appear on the page for other guests. The page reads the guest list from that database as a whole, so only enter details you’re comfortable sharing with the other guests.

This page was built with HighLevel (GoHighLevel) and loads some of its files from HighLevel’s servers. It also uses Cloudflare Web Analytics, which counts visits without cookies.

Video Correctionsde Belle Photography

You give your name, your partner’s name, your email, the wedding date, the link to the video, and your notes. When you send the form, it goes to de Belle Photography’s client system (HighLevel) so the editors can make your corrections. Until then, the draft stays in your browser only.

Reading pagesFood for Thought · About pages

Read-only for visitors. Nothing is collected.

03

Why, and your consent

Information is used only to do what you asked: keep your work in sync, run the event you signed up for, make your video corrections, answer your message.

It isn’t used to advertise to you. It’s never sold or rented. No profile is built about you, and no decision about you is made automatically.

Using a feature that needs information is how you consent to that use. You can withdraw your consent at any time: tell me, and I’ll stop and delete what’s no longer needed. Some features stop working without it; sync, for example, needs an account.

04

Who else handles it

A few service providers process information only to provide their service:

  • Google — Firebase Authentication, Firebase Realtime Database, Google Fonts
  • GitHub — hosts the website
  • HighLevel — de Belle Photography’s client system (Video Corrections) and the Wedding Activities page
  • Cloudflare — visit counts on the Wedding Activities page
  • Adobe Fonts — typefaces in Project Phases
  • Anthropic — reads photos and suggests dishes in Kitchen, only when a Claude key is added and a Claude button is pressed
  • jsDelivr — serves the code Kitchen uses to talk to Claude, the first time a Claude button is used

Their servers are outside Québec, mostly in the United States, so your information may be stored there and be subject to the laws of that country. I chose providers with strong security and privacy commitments.

05

Cookies & browser storage

No advertising or tracking cookies. The site uses your browser’s storage to:

  • save your work in the tools;
  • keep you signed in;
  • let the installed apps open without a connection.

None of it is used to identify, locate or profile you. You can clear it at any time in your browser’s settings.

06

How long it’s kept

  • On your device: until you delete it.
  • Your account and synced work: for as long as you use them. Ask, and I’ll delete them within 30 days. If I decline an access request, I keep that record so the account isn’t asked about again, until I allow it.
  • Events and potlucks: until the organiser deletes them. I delete any still there 12 months after their date.
  • Video correction requests: in de Belle Photography’s client file, for as long as your project and the studio’s records need them.

When information is no longer needed, it’s destroyed or anonymized.

07

Your rights

Under Québec law, you can:

  • know what information I hold about you, and get a copy;
  • have it corrected if it’s wrong, incomplete or out of date;
  • have it deleted, or have its dissemination stopped, when the law allows;
  • withdraw your consent;
  • receive the information you gave in a structured, commonly used format;
  • know who has access to it and how long it’s kept.

Email xavier@debellephotography.com. I’ll answer within 30 days, free of charge. I may first need to confirm it’s really you.

If you’re not satisfied with my answer, you can file a complaint with the Commission d’accès à l’information du Québec: cai.gouv.qc.ca.

08

Security

  • Every connection is encrypted (HTTPS).
  • Database rules decide who can read and write each piece of information.
  • Booking lookups in the Activity Planner use a scrambled key, not your email address.
  • No card numbers are ever entered or stored on this site.

If a confidentiality incident ever creates a risk of serious harm, I’ll notify you and the Commission d’accès à l’information, and I keep a register of incidents, as the law requires.

09

Children

The tools aren’t designed for children. If you’re under 14, ask a parent or guardian before signing up for anything here.

10

Changes

When this policy changes, the date at the top changes too, and important changes are announced on What’s New.