Privacy Policy

1. Information We Collect

We collect personal information that you voluntarily provide to us, as described below. Until September 24, 2026, the Service also offered an investor inquiry form. It is no longer available, and we retain what it collected from those who submitted it:

• Full name
• Email address
• Phone number
• Firm or organization
• Investment focus (if provided)
• Message (if provided)

If you subscribe to a Hockey.com newsletter, we store your email address, the signup source, subscription status, and timestamps for signup, confirmation, unsubscribe, and email delivery activity. We use a confirmation link to record the subscription choice.

If you create an account, we store your email address, the name you give us, the clubs and players you choose to follow, the stories you save, and your preferences (home league, time zone, and which emails you want). You can sign in with that email and a one-time code, or with Google. When you use Google, we receive the name, email address, and profile picture on that Google account. You may also upload a profile photo of your own. We do not receive or store a password. You can delete the account yourself from its settings page.

To deliver and protect the Service, Hockey.com and its hosting and security providers, including Cloudflare and Vercel, may process IP addresses, requested URLs, request headers, browser and device information, and operational or security logs. Our application also converts an IP address into a one-way keyed hash for short-lived rate limiting; it stores the hash rather than the original address in that rate-limit record.

If you choose Analytics in Cookie Preferences, our analytics providers may collect page paths, page views, selected interaction events, a limited referrer, browser, device and operating-system information, and approximate geographic information. Hockey.com removes URL query strings and fragments from the page and referrer values it sends through its own analytics instrumentation.

2. Legal Basis for Processing

We process your personal information based on:

• Consent: When you submit a form, create an account, confirm a newsletter subscription, or choose optional Analytics in Cookie Preferences
• Legitimate interests: To operate, secure, troubleshoot, and improve the Service
• Legal obligations: When required by applicable law

3. Use of Information

The information we collect is used for the following purposes:

• Operating your account and the features you choose, such as followed clubs and players and saved stories
• Responding to investor inquiries submitted through the former inquiry form
• Confirming subscriptions and delivering requested newsletters
• Sending the account and product emails you choose to receive
• Personalizing your experience based on your preferences
• Protecting against fraud, abuse, and unauthorized access
• Measuring public-site use and content engagement when you have chosen optional Analytics

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

All communications include an unsubscribe link where applicable. You may opt out of communications at any time. We comply with CAN-SPAM (United States) and CASL (Canada) email requirements, including providing clear sender identification, truthful subject lines, and a functioning opt-out mechanism in every commercial email.

4. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. If you unsubscribe from marketing communications, we may retain the minimum information necessary to honour your opt-out. If you request deletion, we will delete or de-identify applicable personal information, subject to legal, security, backup, and record-keeping requirements.

Investor inquiry records submitted through the former form are retained while they are relevant to the inquiry or business relationship. Account records are kept while the account exists, and deleted when you ask us to delete the account, subject to the same backup and legal limits. Newsletter records are retained while a subscription is active and, after an unsubscribe, only as needed to honour that choice and maintain delivery records. Application rate-limit hashes expire with their short rate-limit window. Analytics data and infrastructure or security logs are retained according to our configured settings, operational needs, provider terms, and applicable law; those periods can differ by service and data type.

After you unsubscribe from marketing communications, we retain the information reasonably necessary to honour the opt-out and prevent unwanted mail. Some information may remain for a limited time in backups or provider logs before normal deletion cycles complete.

5. Data Protection and Security

We implement reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or disclosure. These measures include encryption of data in transit, secure database storage, and access controls. While no system can be guaranteed to be completely secure, we take appropriate steps to safeguard the information entrusted to us.

6. Third-Party Services

We use third-party service providers to support our operations, including:

• Email delivery services (Resend)
• CDN and security services (Cloudflare)
• Cloud hosting services (Vercel)
• Database hosting and sign-in (Supabase and PostgreSQL)
• Google, when you choose Sign in with Google
• Optional analytics services, after your choice (Google Analytics 4 and Vercel Web Analytics)

These providers process information for the services they supply, subject to their applicable agreements, terms, and privacy commitments. We may also disclose information where required to comply with applicable laws, regulations, or legal processes.

7. Cookies and Tracking

Our website uses cookies and similar technologies for the following purposes:

• Essential cookies: Necessary for the operation of the site, including your cookie choice, theme preference, and sign-in session when you have an account
• On-device search history: The global search can remember up to five results you selected so they are easy to revisit. This history stays in your browser's local storage and is not a cookie.
• Google Analytics 4 (GA4): We use GA4 to understand how visitors interact with our public website after consent. It can receive page views, scroll depth, selected content, navigation and search interactions, a limited referrer, device, browser and operating-system details, and approximate geographic information. GA4 sets cookies (including _ga and _ga_*) to distinguish unique users and sessions. Data is processed by Google LLC.
• Vercel Web Analytics: After consent, we use Vercel Web Analytics for public-page views and the same privacy-filtered custom interactions sent by Hockey.com. Vercel Web Analytics does not use cookies to identify a visitor in our implementation. Its service derives a one-way visitor identifier that changes daily; Vercel states that the source IP address is not stored as part of Web Analytics. This is separate from operational hosting and security logs described above.
• Posts from X (formerly Twitter): Our social pages show public posts from X as Hockey.com cards, and nothing is loaded from X to show them. When you press play on a video, X's embedded post and player load from X (platform.twitter.com) so the video can play on the page. From then on X may set its own cookies and receive your IP address, device and browser details, and the page you are on, under X's own privacy policy. We ask X not to use this to personalize its content or ads (its "do not track" option). Links to posts open X in a new tab.

Cookie and Local Storage Details:

We do not use advertising cookies or third-party tracking for marketing purposes. X's embedded player, which loads only when you play a video from X, is governed by X. Google Analytics 4 and Vercel Analytics are only enabled after you choose Analytics in Cookie Preferences. If you reject or later disable Analytics, Hockey.com stops sending new analytics events from that browser. You may change your choice at any time through "Cookie Preferences" in the site footer, or clear Hockey.com site data in your browser.

8. Affiliate Links and Commissions

Some links on the Service are affiliate links. If you follow one and then sign up, subscribe, or make a purchase, we may receive a commission from that merchant at no additional cost to you.

Following an affiliate link takes you to a site we do not operate. That site receives the same information any website receives when you visit it, including your IP address and browser details, and it may record that you arrived from Hockey.com so the referral can be credited. Some partners set their own cookies for that purpose.

We do not sell your personal information to affiliate partners, and we do not pass them your name, email address, or account details. Once you leave the Service, the destination site's own privacy policy governs what it collects and how it is used. We encourage you to read it.

9. Embedded Content from Third-Party Platforms

Our articles may embed posts published on X (formerly Twitter) and videos published on YouTube, using the embed features those platforms provide.

Embedded content loads directly from the platform's own servers. The platform therefore receives your IP address and browser details, and may set or read its own cookies, just as it would if you had opened the post on the platform itself. This happens whether or not you hold an account there or are signed in, and it is outside our control.

We send those platforms no information about you beyond the request your browser makes in order to load the content. The platform's own privacy policy governs what it does with that request.

10. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access and Portability: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request permanent deletion of your data
• Withdraw Consent: Unsubscribe from marketing communications at any time
• Restriction: Request that we limit processing of your data
• Objection: Object to processing based on legitimate interests

To exercise these rights, use the unsubscribe link in any of our emails or contact us at [email protected]. We will respond to your request within 30 days.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from your country. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

For transfers to the United States and other countries without an EU adequacy decision, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission, along with additional technical and organizational safeguards including encryption in transit and at rest, access controls, and regular security assessments.

12. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant data protection authorities without undue delay and, where feasible, within 72 hours of becoming aware of the breach. Notification will include the nature of the breach, the categories of data affected, and the measures taken to address it.

13. For European Economic Area (EEA) and UK Residents

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.

If you are located in the United Kingdom, you have equivalent rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

14. For California Residents

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have the right to know what personal information we collect, request deletion or correction of their data, and opt out of the sale or sharing of their personal information. You also have the right to limit the use of sensitive personal information and the right to non-discrimination for exercising your privacy rights. As stated above, we do not sell or share personal information for cross-context behavioral advertising. To exercise your rights, contact us at [email protected].

15. For Canadian Residents

As a Canadian corporation, Hockey.com Corporation is subject to the Personal Information Protection and Electronic Documents Act (PIPEDA). Under PIPEDA, you have the right to access your personal information held by us, challenge its accuracy, and withdraw consent for its collection, use, or disclosure. If you believe we have not handled your personal information in compliance with PIPEDA, you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.

16. Children's Privacy

Our website is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly. If you believe we have collected information from a child under 13, please contact us immediately at [email protected].

17. Changes to This Policy

This Privacy Policy may be updated from time to time as hockey.com evolves. Any material changes will be posted on this page with an updated effective date. Where required by law, we will notify you of significant changes by email. Continued use of the website after such changes constitutes acceptance of the revised policy.

18. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Hockey.com Corporation has not designated a Data Protection Officer. For all data protection inquiries, please contact us using the information above.