Privacy

We know when you skate.
That is about all.

Puckdrop exists because the group chat was leaking everyone’s number to everyone. So this page is short, and every promise on it is a rule the software enforces, not a sentence we hope is true.

The short version

We keep the least we can: your name, your email, and a phone number only if you add one.
No password. You sign in with a link we email you. It works once and dies in fifteen minutes.
Your teammates see your name and your answer. Your email goes to your organizer only. Your phone goes where you say it goes.
Not one ad, tracker, analytics script or outside font. Nothing on this site or in the app talks to anyone but us.
We never move money. We write down that it moved.
Ask and we delete you. No dark patterns, no retention period we invented to keep you.

What we keep, and why

Every row below is something the app needs to run a weekly skate. If it is not on this list, we do not have it.

Your name: So the in/out list says who is in. Nothing else on the roster is required.
Your email: It is how you sign in and how the skate reaches you. It is not a username anyone else sees.
A phone number, if you add one: Optional. You choose who sees it: your organizers only (the default) or the whole team. Clear the box and it is gone.
Your answers: In or out for each skate, the position you answered as, and a note if you left one (“late, bringing a stick”). Teammates see these; that is the point.
Money records: When your organizer records that you paid: the amount, the rail (e-transfer, cash, cheque), a reference if they typed one, and the date. Puckdrop never holds or moves the money itself.
An early-access signup: If you left your email on the front page: the address, the word for where the form was, and the time. No name, no IP address, no browser fingerprint.

What we do not keep

Your IP address or browser details. We do not log them against you.
Your location. The app never asks for it.
A password. There is none to leak.
A birthdate, an address, a photo, or anything about your family.
Anything from an ad network, a social network, or a data broker.

There is no password. You type your email, we send a link, you tap it. The link is a random token that works once, expires in fifteen minutes, and is stored only as a hash, so even a copy of our database could not sign in as you.

Tapping the link sets one cookie, pd_session. It lasts sixty days, it is marked HttpOnly andSecure, and it is the only cookie Puckdrop sets. It identifies your session and nothing else. Sign out and it is gone everywhere at once.

Asking for a link never reveals whether an address has an account. The reply is the same, and takes the same time, either way.

Who sees what

These rules live in the server, where the app cannot bend them. Each one has an automated test that fails if it stops being true.

Your teammates see your name, your position, and your answer for each skate.
Your email is shown to the organizers of your team, and to you. Nobody else on the roster sees it.
Your phone number is shown to organizers by default. Flip one switch in your profile and the whole team can see it; flip it back and they cannot. Your screen is not what decides this: the server strips the number before it leaves.
A spare who gets an invite link sees the skate and the team name. Never the roster, never anyone’s contact details.
Other teams see nothing. Being an organizer of one team means nothing on another.
Money: you see your own balance. Organizers see everyone’s. If an organizer opens the books, the team sees two totals, collected and owed, never who owes what.

What organizers can do on your behalf

An organizer can answer for you when you texted them instead of tapping, mark a no-show after the fact, record a payment, or look at the app as you to check what you see. Each of these is written to a log with the organizer’s name and the time, and the confirmation they see says so: “This will be recorded as set by you.”

Third parties

On this site and in the app: none. No analytics, no ad pixels, no social buttons, no fonts from a font service, no chat widget. Every byte your phone loads comes from our own domain. You can check: open your browser’s network tab and look for a second hostname. There is not one.

Behind the scenes: one. Puckdrop runs on Cloudflare, which hosts the application, stores the database, and delivers our email. Cloudflare processes your data on our instructions and does not use it for its own purposes. We do not sell, rent, share, or trade your information with anyone, for any reason, and there is no version of this product where we would.

Emails we send

A sign-in link, when you ask for one.
The ask for a skate, a chase if you have not answered, and the organizer’s morning-of digest, on the schedule your organizer set.
A spare invite, if you are on a team’s spare list and they are short.
A reminder about a balance, only when your organizer presses the button.
One email about early access, if you asked for it. Then nothing.

There is no newsletter, and no “we thought you might like”.

Money

Puckdrop is a ledger, not a wallet. Your organizer records that a payment happened, on whatever rail it happened on. We never hold funds, never see your bank or card, and never move a dollar. If a payment record is wrong, that is a conversation with your organizer, and the app keeps the history of who changed what.

Kids

Puckdrop is for adults organizing themselves. If it ever serves youth hockey, a child will be a record on a parent’s account, never a user with a login, and this page will change before that ships, not after.

Your data is yours

See and change it. Your name, phone number and phone setting are on the You screen in the app.
Leave a team. Ask your organizer; they can remove you, and your contact details leave the roster with you.
Be forgotten. Emailprivacy@puckdrop.netfrom the address on your account and we delete your account and personal details within thirty days. What stays is the bare fact that a skate on a given night had a certain number of skaters and goalies, with your name removed, because your old teammates’ records should not change when you leave. Deleting yourself from inside the app is on the way.
Take it with you. Ask at the same address and we send you what we hold, in a plain file.

How long we keep things

Sign-in links: fifteen minutes, or until used.
Sessions: sixty days, or until you sign out.
Your account and answers: as long as your team uses Puckdrop, or until you ask us to delete them.
Early-access signups: until we send the one email, or until you ask us to drop you.

The legal bit

Puckdrop is made in Canada and handles personal information under Canada’s federal privacy law, PIPEDA. If you think we have got something wrong, write to privacy@puckdrop.net first; we answer. You can also complain to the Office of the Privacy Commissioner of Canada.

If this page changes in a way that matters, everyone with an account gets an email that says what changed, before it takes effect. Small wording fixes just update the date below.

Effective September 10, 2026.

We know when you skate.That is about all.