What we hold, and why.
OneHourOne asks for more than most sign-up forms, because we verify that everyone is a real adult before matching them. This page explains every field, what it is for, and how to have it all deleted.
Last updated 26 October 2026 · Applies to the Ontario beta
Who we are
OneHourOne is a free community project based in Toronto, Ontario. It is currently operated by one person, by hand, as a limited pilot.
For any privacy question, or to have your information deleted, write to [email protected]. That address reaches a person, not a ticketing system.
What we collect, and why
Every field exists either to verify that you are a real adult, or to match you with someone compatible. If a field does neither, we do not ask for it.
| What | Why we need it |
|---|---|
| First name | Shown to the person you are matched with. The only thing they ever see. |
| Full legal name | Confirming you are a real, identifiable person. Never shown to anyone else. |
| Your match details, weekly opt-in, and replies to you. | |
| Your age | Confirming you are 18 or over. We do not filter matches by age, and we do not ask for your date of birth. |
| Whereabouts you are | Confirming the beta runs where you live, and deciding which part of Ontario to grow next. |
| Languages | Matching you with someone you can actually talk to. |
| Available times | Matching you into a slot you can attend. |
| Gender preference | A safety setting. Honoured in both directions, never questioned. We stopped asking about age preference on 13 September 2026 and no longer use the answers. |
| Accessibility needs | Making the conversation work for you. |
| How you heard about us | So we know which recruiting actually worked, and which adverts are worth paying for. Includes whatever campaign details were carried in the link you clicked — which post or advert it was, and the reference the advertising platform attaches to its own links. That describes the advert, not you. Never shown to anyone, and never used to track you across other sites. |
| Ratings you give | Finding and removing people who behave badly. Never shown to anyone. |
What we never ask for
No photograph. No job title or employer. No income, education, relationship status, interests, social media handles, religion or politics.
This is not an oversight. The entire premise is that the person you meet knows nothing about you until you tell them, and every one of those fields would erode it.
We also do not ask you to upload identity documents. Verification is a short video call with a person, not a scan of your passport.
What your match sees
After a conversation, neither of you receives the other's contact details. If you both want to keep talking, you swap them yourselves before the hour ends.
Where it lives
- Your registration and match history are stored in a private spreadsheet accessible only to the person operating OneHourOne. It is not published, shared or exported.
- The website is hosted on Cloudflare Pages, and we use Cloudflare Web Analytics to count visits. It measures pages, not people: it sets no cookies, keeps nothing on your device, and builds no identifier that could follow you to another site. We run no advertising trackers and no third-party cookies, and the site sets no cookies of its own.
- Campaign details from a link you clicked are kept by your own browser, in its local storage, for up to thirty days — so that if you come back later to finish registering, we still know which post or advert brought you. It holds the name of the campaign and nothing about you, it stays in your browser unless you submit the form, and clearing your browsing data removes it.
- Booking your verification call happens on Cal.com. When you pick a time, Cal.com receives your name and email — we fill those in for you from your registration so you do not type them twice — and anything else its booking page asks for. It sends you the calendar invite and reminders.
- Video conversations run on Jitsi as a Service, provided by 8x8. Calls pass through their infrastructure to connect you.
- Emails we send automatically — your welcome, Thursday's question, your match — go out through Cloudflare. When you write to us and we reply, that comes from a Google Workspace mailbox.
Some of these providers operate servers outside Canada, which means your information may be processed outside the country and be subject to the laws of that jurisdiction.
Conversations are not recorded
Recording, transcription and livestreaming are disabled in the access token that lets you into a conversation — not merely hidden from the interface. We hold no audio, video or transcript of anything you say.
Members also agree not to record a conversation.
How long we keep it
- While you are a member — for as long as you want to be matched.
- If you ask us to delete it — removed within 30 days, and you get confirmation.
- If you leave or are removed — registration details are deleted within 90 days. We keep a minimal record where someone was removed for conduct, so they cannot simply re-register.
- Ratings are kept while the person rated is a member, then deleted with their record.
Your rights
Under Canadian federal privacy law (PIPEDA) you can ask us to:
- Show you everything we hold about you
- Correct anything that is wrong
- Delete all of it
- Stop using it, by withdrawing consent — though we cannot match you after that
Email [email protected] and we will respond within 30 days. You never need to give a reason.
If you are unhappy with how we handle a request, you can complain to the Office of the Privacy Commissioner of Canada.
Keeping it safe
Access to member information is restricted to the person operating OneHourOne. The site is served over HTTPS, and conversation links are cryptographically signed so they cannot be forged or reused.
No system is perfect. If we ever discover a breach affecting your information, we will tell you and the Privacy Commissioner, as the law requires.
Children
OneHourOne is for adults. We do not knowingly collect information about anyone under 18, and registrations that fail the age check are refused. If you believe a minor has registered, tell us and we will remove the record immediately.
Changes
If this notice changes in a way that affects how we use your information, we will email you before it takes effect. The date at the top always reflects the current version.