Privacy

Privacy notice for this website

Written from an inspection of what this site actually does, rather than from a template. If we add anything that changes it, this page changes with it.

Last updated 18 October 2026 (draft, pending publication)

Who we are

MatchPass Labs is a sole proprietorship operating in Ontario, Canada. Contact: karan@matchpasslabs.com.

What this site collects directly

No analytics, no advertising pixels and no cookie-based tracking are installed on this website. We do not set tracking cookies and there is therefore no consent banner.

The Fit Score runs entirely in your browser. Your answers are not transmitted anywhere, are not stored on a server, and are not available to us unless you choose to copy the result and send it yourself.

The Excel workflow demo and the e-commerce reconciliation reference build also run entirely in your browser using synthetic data. Nothing you do in them is uploaded, stored or transmitted.

The contact form

The contact form on the homepage (“Discuss your workflow”) submits through Netlify Forms, the form service provided by our hosting provider. When you submit it, the fields you completed, plus the submission time and your IP address, are stored in the Netlify account for this site and forwarded to our business inbox.

We ask for your name, organization, work email, optionally the tools involved, and a description of the workflow. That is what we need in order to reply. We use it to respond to your enquiry and to keep an ordinary record of the conversation, and we do not add you to a marketing list from it.

The form includes a hidden anti-spam field that is not visible to you and is not used for tracking.

Please do not send client data

The form asks you not to submit transaction exports, credentials, or sensitive client information. It is intended for a description of a workflow, nothing more.

Third-party services involved in serving this site

  • Netlify hosts this website and provides Netlify Forms, which receives and stores contact form submissions. As an infrastructure provider it may also process ordinary request metadata such as IP address and user agent in server logs.
  • Cloudflare provides DNS for the domain and may process request metadata as part of resolving and routing traffic.
  • Google Fonts serves the typefaces used across the site. Loading a font file involves a request to Google's servers from your browser.
  • Cal.com is embedded on the homepage booking section. That embed loads from Cal.com and, if you book a call, the information you enter is handled by Cal.com under their terms.

Each of these providers operates under its own privacy terms. We do not receive analytics or profiles from any of them.

Retention of form submissions

Form submissions are retained in the Netlify account and in our business email for as long as needed to respond and to keep an ordinary business record. You can ask us to delete a submission at any time.

If you email us

Email you send us is held in our business email account for as long as needed to respond and to keep an ordinary business record. We do not add addresses to a marketing list from website contact.

Client engagement data

Information shared during a paid engagement is handled separately from website enquiries, under the engagement agreement. By default it stays in an environment the client approves. The security and data handling page describes the approach.

Your requests

If you want to know what we hold about you, or want it deleted, email karan@matchpasslabs.com and we will respond.

Scope of this notice

This describes the website only, and it describes what the code currently does. It is not a contractual data-processing agreement. Engagement terms are agreed separately in writing.