Service Providers

We share personal data only with these providers, and only what each needs for the job described. The Privacy Policy explains where your data is stored and how it is protected when it leaves Canada.

• Amazon Web Services (AWS) — Hosts IMHO: our servers, database, and file storage, which are in Canada, and the content delivery network that serves pages and images from data centres around the world. AWS also sends our invitation emails and runs our monitoring and visitor analytics.
• Google and Microsoft — Sign you in when you choose to use your Google or personal Microsoft account, and share your email address and display name with us.
• Cloudflare — Runs the Turnstile security check that tells people from bots. When you submit a form that has the check, we send Cloudflare its token and your IP address.
• ZKPassport — Provides the app you use if you choose to verify as a human. Your browser connects to ZKPassport's relay service to receive the proof from the app on your phone, and our server sends ZKPassport's verifier only the cryptographic proof and what it should confirm, never your passport data.

Our pages load some fonts, scripts, stylesheets, country flags, and map data directly from these public hosts. As with any site your browser contacts, they receive your IP address and the address of the page that asked for the content:

• Google Fonts — fonts.googleapis.com and fonts.gstatic.com, for fonts.
• jsDelivr and unpkg — cdn.jsdelivr.net and unpkg.com, for open-source scripts and stylesheets.
• GitHub — raw.githubusercontent.com, for country boundaries on maps.
• FlagCDN — flagcdn.com, for country flags.

We update this page whenever we add, replace, or remove a provider, and the date at the top shows when it last changed.