Privacy Policy

1. Information We Collect

We collect personal information that you voluntarily provide to us when joining our waitlist, including:

• Email address (required)
• First name (required)
• Your connection to hockey (e.g., player, coach, fan)
• League and team preferences
• Country of residence

We also automatically collect certain technical information when you visit our website, including your IP address (for rate limiting and security purposes only), browser type, and device information.

2. Legal Basis for Processing

We process your personal information based on:

• Consent: When you join our waitlist and agree to receive marketing communications
• Legitimate interests: For security, fraud prevention, and improving our services
• Legal obligations: When required by applicable law

3. Use of Information

The information we collect is used for the following purposes:

• Communicating updates regarding the development of hockey.com
• Providing information related to early access, platform availability, or product announcements
• Personalizing your experience based on your preferences
• Protecting against fraud, abuse, and unauthorized access

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

All marketing emails include an unsubscribe link. You may unsubscribe from marketing communications at any time without affecting your waitlist status. We comply with CAN-SPAM (United States) and CASL (Canada) email marketing requirements, including providing clear sender identification, truthful subject lines, and a functioning opt-out mechanism in every commercial email.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. If you unsubscribe from marketing communications, we will retain only the minimum information necessary to honor your preferences. If you request deletion of your data, we will permanently remove all your personal information from our systems promptly (typically immediately, and in all cases within 30 days), unless we are required by law to retain it.

Specific retention periods: email addresses and profile data are retained for the duration of your account or waitlist membership; IP addresses collected for rate limiting are retained for no more than 30 days; analytics data is retained according to the default retention periods of Google Analytics (14 months) and Vercel Analytics (30 days).

After you unsubscribe from marketing communications, we retain only your email address and marketing consent status to honor your preferences. If you request full deletion of your data, all personal information is removed promptly.

5. Data Protection and Security

We implement reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or disclosure. These measures include encryption of data in transit, secure database storage, and access controls. While no system can be guaranteed to be completely secure, we take appropriate steps to safeguard the information entrusted to us.

6. Third-Party Services

We use third-party service providers to support our operations, including:

• Email delivery services (Resend)
• Cloud hosting providers (Vercel)
• Database services (PostgreSQL via AWS)
• Analytics services (Google Analytics 4, Vercel Analytics)

These providers are permitted to access personal information only to the extent necessary to perform their services and are contractually obligated to protect such information. We may also disclose information where required to comply with applicable laws, regulations, or legal processes.

7. Cookies and Tracking

Our website uses cookies and similar technologies for the following purposes:

• Essential cookies: Necessary for the operation of the site (e.g., theme preferences, session management)
• Google Analytics 4 (GA4): We use GA4 to understand how visitors interact with our website. GA4 collects information such as pages visited, time spent on pages, scroll depth, button clicks, and device/browser information. GA4 sets cookies (including _ga and _ga_*) to distinguish unique users and sessions. Data is processed by Google LLC.
• Vercel Analytics: We use Vercel Analytics to monitor website performance and page views. Vercel Analytics collects anonymized usage data including page load times and visitor counts.

Cookie Details:

We do not use advertising cookies or third-party tracking for marketing purposes. Analytics cookies, including Google Analytics and Vercel Analytics, are only loaded after you provide consent via our cookie banner. You may withdraw your consent at any time by clicking "Cookie Preferences" in the site footer, or by clearing your browser's local storage and revisiting the site.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access and Portability: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request permanent deletion of your data
• Withdraw Consent: Unsubscribe from marketing communications at any time
• Restriction: Request that we limit processing of your data
• Objection: Object to processing based on legitimate interests

To exercise these rights, use the unsubscribe link in any of our emails or contact us at privacy@hockey.com. We will respond to your request within 30 days.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from your country. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

For transfers to the United States and other countries without an EU adequacy decision, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission, along with additional technical and organizational safeguards including encryption in transit and at rest, access controls, and regular security assessments.

10. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant data protection authorities without undue delay and, where feasible, within 72 hours of becoming aware of the breach. Notification will include the nature of the breach, the categories of data affected, and the measures taken to address it.

11. For European Economic Area (EEA) Residents

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.

12. For California Residents

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have the right to know what personal information we collect, request deletion or correction of their data, and opt out of the sale or sharing of their personal information. You also have the right to limit the use of sensitive personal information and the right to non-discrimination for exercising your privacy rights. As stated above, we do not sell or share personal information for cross-context behavioral advertising. To exercise your rights, contact us at privacy@hockey.com.

13. Children's Privacy

Our website is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly. If you believe we have collected information from a child under 13, please contact us immediately at privacy@hockey.com.

14. Changes to This Policy

This Privacy Policy may be updated from time to time as hockey.com evolves. Any material changes will be posted on this page with an updated effective date. Where required by law, we will notify you of significant changes by email. Continued use of the website after such changes constitutes acceptance of the revised policy.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Hockey.com Corporation has not designated a Data Protection Officer. For all data protection inquiries, please contact us using the information above.