Privacy Policy

Last updated: October 10, 2026. Applies to CAPSmemo (capsmemo.com)

Operator: Patrick Bossé, sole proprietor, Québec, Canada, contact@CAPSmemo.com

Privacy Policy

CAPSmemo respects privacy and collects personal information only for identified and legitimate purposes related to operating, securing and improving the platform. This policy is intended to describe our practices under applicable Canadian privacy laws, including Québec's Act respecting the protection of personal information in the private sector and, where applicable, the Personal Information Protection and Electronic Documents Act (PIPEDA).

Information we collect

• Account information: email address, username, country, language preference and authentication information.
• Profile information: optional avatar and other profile information you choose to provide.
• Learning and quiz activity: session results, answers, scores, progress, levels, streaks, achievements, capsule balance, saved lists, items marked for review, group participation, friend connections and challenge activity where those features are used.
• Technical and security information: browser/device information, connection timestamps and standard security/server information generated when you access the service.
• Subscription information: plan, subscription status and transaction/subscription identifiers needed to provide paid access. CAPSmemo does not store full payment-card numbers.
• Support information: messages and information you provide when contacting CAPSmemo.

Purposes of collection and use

We use personal information only as reasonably necessary to create and authenticate accounts, provide quizzes and study features, preserve progress, manage subscriptions and entitlements, provide support, maintain security, prevent abuse and fraud, comply with legal obligations, and improve the service using aggregated or de-identified information where appropriate.

We do not sell personal information. We do not use CAPSmemo account creation as automatic consent to unrelated promotional email.

Emails and commercial communications

CAPSmemo may send service messages that are necessary to administer your account, security, purchases or subscriptions. Promotional or commercial electronic messages are sent only where permitted by applicable law and include the required identification and unsubscribe mechanism. You may withdraw marketing consent at any time without affecting necessary service communications.

Payments and Paddle

Payment-card information is collected and processed by Paddle as Merchant of Record and is not stored by CAPSmemo. Paddle may provide CAPSmemo with limited transaction and subscription information necessary to activate, renew, cancel, refund or otherwise administer access to paid features.

AI-assisted features

If you choose to use an AI-assisted feature, the content necessary to provide that feature may be transmitted to an AI service provider such as OpenAI. Do not include unnecessary sensitive personal information in AI prompts or free-text fields. AI processing may occur outside Québec or Canada depending on the provider's infrastructure and applicable service configuration.

Linked CAPSmemo / RXpharmaLAB account infrastructure

CAPSmemo may use shared authentication or account infrastructure with RXpharmaLAB, which is operated by the same sole proprietor. A technical account record may therefore exist across this shared infrastructure for authentication and account administration. This technical linkage does not, by itself, constitute consent to receive unrelated commercial electronic messages.

Service providers and disclosure

Personal information may be disclosed to service providers only where reasonably necessary for platform operation, such as hosting, email delivery, security, payment and billing through Paddle, and AI processing for AI-enabled features. Service providers are expected to use information only for the contracted purpose and subject to applicable legal and contractual safeguards.

Information may also be disclosed where required or authorized by law, to protect rights or security, investigate fraud or abuse, or establish, exercise or defend legal claims.

Processing outside Québec or Canada

For details about where your account data is hosted, contact the Privacy Officer. Certain third-party providers, including Paddle and AI service providers, may process or store information outside Québec or Canada. Such processing remains subject to applicable privacy requirements, including privacy impact assessment and contractual safeguards where required by law.

Retention and destruction

Personal information is retained only for as long as reasonably necessary for the purposes described in this policy or as required by law. Account information is generally retained while the account is active. Quiz-history retention may vary by plan and feature.

When an account is deleted, information that is no longer required is scheduled for deletion or irreversible anonymization, according to the processing periods applicable to the request and systems concerned, subject to any information that must be retained for legal, tax, fraud-prevention, security, dispute-resolution or evidentiary purposes. Information retained for such reasons is kept only for the necessary period and is not used for unrelated purposes.

Security safeguards

CAPSmemo uses reasonable administrative, technical and organizational safeguards proportionate to the sensitivity of the information. Access to personal information is limited to persons and service providers who require it for legitimate duties. No online service can guarantee absolute security.

Cookies and browser storage

CAPSmemo uses cookies, localStorage (persistent browser storage) and sessionStorage (tab-session storage). These mechanisms are different from the progress saved in your account. No Google Analytics, Meta Pixel, Microsoft Clarity or Hotjar integration was identified in the current CAPSmemo code.

Name / key	Purpose	Duration	Storage / category
PHPSESSID	Maintains the session and authentication. The name follows the PHP server configuration, usually PHPSESSID. On the same domain, the session may be shared with RXpharmaLAB.	48 hours under the CAPSmemo configuration; effective duration may depend on an existing session and server settings.	HTTP cookie / necessary
caps_lang	Remembers French or English. Set independently of the banner, including on a first visit.	90 days	HTTP cookie / functional
caps_remember	Random persistent-login token created only after “Accept all” and selection of “Remember me”. “Essential only” deletes it and blocks creation and renewal.	90 days, renewable on automatic sign-in	HTTP cookie / optional persistent sign-in
caps_privacy_choice	Records the versioned choice (“all” or “essential”) for both the server and the browser interface. Replaces the former caps_cookie_consent localStorage key, which is removed.	180 days	HTTP cookie / preference management
caps_muted	Remembers the sound preference.	Until cleared	localStorage / functional
caps_toast_seen	Remembers up to 200 notification identifiers to avoid repeated displays.	Until cleared; older identifiers are replaced	localStorage / functional
caps_popup_d	Remembers the daily-popup date only after “Accept all”. A refusal removes the value and prevents further optional displays and writes.	Until cleared; date updated when displayed	localStorage / optional display preference
caps_anim_[id]	Prevents repeating certain results animations.	Tab session	sessionStorage / functional display
profil_tab / amis_tab	Remembers the selected profile or friends tab.	Tab session	sessionStorage / functional

Your choices and their effects

Optional persistent sign-in and storage of the daily-popup date are disabled until you explicitly choose “Accept all”. Choosing “Essential only” blocks creation and renewal of the “Remember me” token on the server, removes the token from this browser and revokes its server record, and removes the daily-popup date from local storage. The current authenticated session is not ended by this choice.

“Accept all” does not automatically create a persistent-login token: you must also select “Remember me” when signing in. The server records your banner choice in a versioned cookie for 180 days. An absent, expired or unrecognized choice does not authorize optional storage. A new choice is requested when necessary, including after the consent mechanism changes.

Session and language cookies, sound preferences, notification display history, tab selection and results-animation state support authentication, navigation and the interface; they are managed independently of optional persistent sign-in and the daily popup. No advertising or audience-measurement consent is collected for tools that CAPSmemo does not use.

You can change your choice below or through “Cookie preferences” in the footer. Your choice applies only to this browser. If saving fails, the banner remains visible with an error message; please retry so the server records your choice. Browser-side optional features stop immediately upon refusal. Deleting site cookies and data in your browser can sign you out and reset preferences, but does not delete progress saved in your account. Blocking session cookies can prevent sign-in.

Change my cookie preferences

External resources and websites

Some pages load Google Fonts directly from Google. This sends the technical information needed for the request, including your IP address and browser information, even before a banner choice. This is not an audience-measurement tool installed by CAPSmemo. Avatars or advertising images may also load from RXpharmaLAB or other image-hosting addresses; those servers receive the technical information needed to display the resources.

External websites opened through links, including payment services or advertisements, apply their own privacy and cookie policies. Their storage is not controlled by the CAPSmemo banner. Some providers may process technical information outside Québec or Canada. Advertising content does not, by itself, mean that targeted-advertising cookies are used.

Your privacy rights

Subject to applicable law and applicable exceptions, you may request:

• confirmation of whether CAPSmemo holds personal information about you and access to that information;
• correction of inaccurate, incomplete or ambiguous information;
• a copy of eligible computerized information in a structured, commonly used technological format where the right to portability applies;
• withdrawal of consent where processing is based on consent, subject to legal or contractual consequences explained at the time of withdrawal;
• deletion or anonymization of information when it is no longer required, subject to lawful retention obligations;
• where applicable, cessation of dissemination or de-indexing/re-indexing rights provided by Québec law;
• information about how your personal information is used and disclosed.

We may need to verify your identity before processing a privacy request. Requests may be sent to contact@CAPSmemo.com. You may also complain to the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada, as applicable.

Access and rectification requests must be sent in writing to the Privacy Officer. We respond diligently and no later than 30 days after receipt. A refusal must state its reasons and explain applicable remedies. You may ask the Commission d’accès à l’information du Québec to examine a disagreement under the procedures and deadlines provided by law.

Minors

CAPSmemo accounts are intended for persons aged 14 or older. CAPSmemo does not knowingly seek to collect personal information directly from a person under 14 without the consent required by Québec law. If we learn that such information has been collected without the required consent, we will take reasonable steps to delete it.

Privacy governance and complaint process

CAPSmemo maintains privacy-governance practices proportionate to its activities, including rules for access, retention and destruction of personal information, allocation of privacy responsibilities, handling of privacy complaints, and management of confidentiality incidents. Privacy impact assessments are carried out where required by applicable law, including for relevant information-system projects and certain transfers or processing outside Québec.

Privacy complaints may be sent to the Privacy Officer at contact@CAPSmemo.com. The complaint will be reviewed, relevant facts will be examined and a response will be provided within the applicable legal timeframe or, where no specific statutory timeframe applies, within a reasonable period.

Privacy Officer