Mr Buff is owned and published by TNAADO Inc., 1050 King St W, Toronto, Ontario M6K 0C7, Canada.
No accounts or forms
There are no accounts, comments or contact forms. We do not ask for a name, email address or payment details to use the site. Standard request logs can contain personal information such as an IP address.
Your browser and the tools
The filters, the first-year gym cost estimator, the meal builder, the compare tray and the protein calculator run entirely in your browser. What you type, such as a body weight or a search, stays in your browser: it is not sent to us, it is not written into the page address, and it is not sent to Analytics.
Server logs
Our hosting provider (Vercel) keeps standard server logs, such as IP address and requested page, to deliver and protect the site. Data may be processed in countries other than yours.
Cookies and your choice
Mr Buff sets no cookies itself. The cookie notice stores your accept or decline choice in your browser’s local storage, and nothing else. If you accept, Google Analytics may set cookies; see below and the cookie policy for the full list and how to change your choice.
Analytics
Cookieless traffic counts. We use Cloudflare Web Analytics to count visits in aggregate: pages viewed, referrers, country, browser and device type, and page speed. It sets no cookies, writes nothing to your device, builds no profile and does not track you across sites, so the cookie notice does not gate it. It is not loaded at all if your browser sends Global Privacy Control or Do Not Track. Cloudflare processes the data, including in the United States.
Detailed analytics. If you press Accept in the cookie notice, we load Google Analytics 4 (measurement ID G-6CT1YR5CP2), a service of Google, to count visits and see which pages are used. It records the pages you view, how you arrived, your browser and device type and an approximate location. Google states that Analytics 4 does not log or store IP addresses. Google Analytics sets the cookies _ga and _ga_6CT1YR5CP2 in your browser. The page address we send to Analytics is the path only, with no query string or fragment, and your browser’s referrer is not passed on. If you press Decline after accepting, Analytics is switched off for the rest of the visit and those cookies are deleted. If you decline, or do nothing, no Google Analytics code is requested from Google. We use Google Consent Mode: all consent signals start as denied and accepting upgrades only analytics storage. If your browser sends a Global Privacy Control signal, we treat it as a decline. We do not send Analytics anything you type into the tools. Analytics data is processed by Google, including in the United States, where it may be accessible to courts and authorities under US law. Reports are kept in our Analytics property for the retention period set there, which Google limits to 2 or 14 months for event data; ask us for the current setting. The lawful basis for Analytics is your consent, which you can withdraw at any time from the Cookie settings button in the footer. You can also block measurement with Google’s Analytics opt-out browser add-on. Read how Google uses information from sites that use its services.
Advertising
No advertising code is loaded today, so no advertising cookies are set. We may show Google AdSense ads in future; this policy and the cookie notice will be updated before any ad cookies are used. In the meantime you can manage personalised ads at Google Ads Settings, youradchoices.com (United States) or youradchoices.ca (Canada). We do not sell personal information.
Your rights
Under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec’s Law 25, and comparable law elsewhere, including state privacy laws in the United States, you can ask for access to, correction of, or deletion of personal information we hold about you, withdraw consent to Analytics, and opt out of any sale or sharing of personal information or targeted advertising (we do neither today). We honour the Global Privacy Control signal. Contact contact@tnaado.ca. We hold no account profile, so in practice the personal information is limited to server logs held by our host and Analytics data held in Google’s service if you accepted. If you are not satisfied you may complain to the Office of the Privacy Commissioner of Canada, to the Commission d’accès à l’information du Québec, or to the privacy regulator where you live.
Who is responsible for privacy
The person in charge of personal information at TNAADO Inc. is the Privacy Officer, reachable at contact@tnaado.ca or at 1050 King St W, Toronto, Ontario M6K 0C7, Canada.
Where data is processed
Our host (Vercel) and Google Analytics process data in the United States and other countries, so personal information may be stored or processed outside Canada and be accessible to foreign courts and authorities.
Children
This site is not directed at children and we do not knowingly collect information from them.
Links to other sites
Pages link to retailer, gym, restaurant and government sites. Those destinations control their own privacy practices and may receive your request when you follow a link.
Changes
If this page changes materially, the date at the top changes with it.
Contact
contact@tnaado.ca, TNAADO Inc, 1050 King St W, Toronto, Ontario M6K 0C7, Canada.