Privacy Policy

Who we are

Hash Marks Hockey ("Hash Marks", "we") is a hockey stats app at hashmarkshockey.com. It is run by Hash Marks Hockey Inc., in Alberta, Canada.

Our privacy officer is responsible for how Hash Marks handles personal information. Reach them at support@hashmarkshockey.com.

This policy covers the website and the app. We follow Canada's federal privacy law (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).

What we collect

Your account

• Email address, to log you in and send account emails (confirm your email, reset your password, invitations).
• Password. Our login provider stores it only in a scrambled form (a hash). Nobody at Hash Marks can see it.
• Your name and city, if you choose to add them. Both are optional.
• How you joined: the sign-up code you used, or that you were invited.
• Account dates: when you signed up, confirmed your email and last logged in.

The hockey information you enter

• Players: name, birth year (optional), jersey number and position.
• Teams: name, season, division, level, colour and period lengths.
• Games: date, time, opponent's team name, arena, home or away, game type and score. Calendars you import are read on your device; only the games you add are saved.
• What you track: shifts and ice time, shots and where they were taken, goals, assists, saves, plus/minus, penalties and special teams.
• Game notes you write, and your app settings.

When you contact us

If you email us, we get your email address and what you write. Report a problem in the app also fills in device and sync details: the time, app version, browser and device type, screen size, whether you're online, sync status, changes waiting to upload, the last sync error and how much storage the app uses. It doesn't include player names, notes or stats. The details open in your own email app, so you can read or remove them before you send.

Technical information

When you load a page or log in, our providers record your IP address, browser type and the time, to deliver the site, keep it secure and stop abuse. We don't use this to build a profile of you.

Error reports

When something goes wrong in the app behind the scenes, it sends us a short technical error report so we can fix the problem: what failed and where in the app, the screen you were on, your device and browser type, the app version, the time and your account. It contains none of your players, games, stats or notes, and email addresses are removed from it. Reports are sent only while you're logged in, at most a few a day, and only our administrator can read them. This isn't analytics: it records problems, not how you use the app.

What we don't collect

No payment details (nothing is charged today), no location, contacts or photos, and no gender for players. Reports and Game Cards are made on your device and aren't uploaded.

Players' information

Most players are under 18. Hash Marks is built for parents, guardians and coaches. Players don't have accounts and don't use the app themselves.

• Only add a player if you are their parent or guardian, or have their parent or guardian's permission (for example, as their coach).
• Enter only what's needed. A first name and jersey number are enough; birth year is optional.
• Opponents are recorded by team name only. Stats are kept only for the players you choose to track.
• Game notes are free text. Keep them about hockey, and don't write health details or anything you wouldn't want the other player's family to read.

A parent or guardian can ask us at any time to see, correct or delete a player's information, including when another account entered it. Email support@hashmarkshockey.com.

How we use it

• To run the app: save and sync your data, show your dashboard, and let you log in on other devices.
• To send account emails: confirming your email, password resets and invitations. We don't send marketing email.
• To help you when you ask for support, and to find and fix problems.
• To keep Hash Marks secure and fair: checking sign-up codes, stopping abuse and applying data limits.

We don't sell or rent your information, and we don't share it with advertisers, data brokers, scouting services or anyone else unless you choose to share it. Hash Marks has no ads today. If we ever add sponsors or advertising, we won't use your players' information to target them, and we'll update this policy and tell you before it starts.

Who can see your data

• You, on any device where you log in to your account. Other families' accounts can't see it.
• The person who runs Hash Marks (the administrator) can view an account's details and tracked data: players, teams, games, stats and notes. This is used to give support, fix sync problems and run the service. The view is read-only: it can't change or delete your hockey data. Every look is recorded in an access log. The administrator can also resend invitations, send a password reset email, change an account's data limits and turn off an account.
• Our service providers (below) store or move data for us, only to run Hash Marks.
• People you share with. When you share a PDF report, Game Card, backup file or screenshot, it goes wherever you send it. Team sharing with a coach is planned; when it arrives, a team is shared only if you choose to.
• When the law requires it, for example a valid court order.

Where it's stored, and who helps us

Your account and hockey data are stored in Canada, in Montreal. We use a small number of trusted service providers to run Hash Marks:

• Hosting and database: stores your account and synced hockey data. Montreal, Canada; the provider is a US company.
• Email delivery: sends account emails such as confirmations, password resets and invitations. It handles your email address and keeps delivery records. United States.
• Website delivery and security: serves the website and app, protects them from attacks, and forwards email sent to support@hashmarkshockey.com. Worldwide network; a US company.
• Web fonts: supplies the fonts the site uses. Your browser downloads them, so the provider sees your IP address and browser type. United States.

For a list of our providers, email support@hashmarkshockey.com.

Because some of these providers are based in, or process information in, the United States, your information may be accessible to courts, law enforcement and national security authorities there under US law. Each provider is bound by its own privacy and security commitments, and we give them only what they need to do their job.

On your device

So tracking works at the rink with no signal, the app keeps a copy of your data in your browser's storage on each device you use. It also stores your login, sync status, theme, the last player you looked at on the dashboard, your data limits and any error reports waiting to be sent. An offline copy of the app's files and fonts is kept so it opens without a connection.

No tracking cookies. Hash Marks doesn't set cookies, and we don't use analytics or advertising tools. Our website delivery provider may set a short-lived security cookie if it needs to check for automated traffic.

Logging out keeps your data on that device, so unsaved changes can still upload later. To remove it from a borrowed or shared device, clear the site's data for hashmarkshockey.com in the browser's settings.

Keeping and deleting

• We keep your account and data while your account is open, so your season-over-season history stays complete.
• A turned-off account keeps its data until it is deleted.
• To delete your account, email support@hashmarkshockey.com from the email address on the account. We delete the account and all of its data from our database within 30 days and confirm by email. Copies in our providers' backups are removed as those backups expire, within 7 days. Deleting in the app is planned.
• Support emails are kept as long as needed to help you, then deleted. The administrator access log is kept for 2 years.
• Error reports are deleted 90 days after the problem last happened.
• Data saved on your own devices, and files you downloaded or shared, stay until you remove them.

Your choices

• See and correct. Everything you entered is in the app, where you can edit it: your profile in the account menu, players and teams in Settings, games on the Schedule.
• Get a copy. Backup in Settings › Your data downloads a file with all your players, teams, games and stats. A friendlier export is planned. You can also ask us for a copy of everything we hold about you.
• Delete. Remove a player in Settings, or ask us to delete your whole account (above).
• Withdraw consent. You can stop using Hash Marks at any time. Without an account, we can't store your data.

We answer requests within 30 days. If you're not happy with our answer, you can contact the Office of the Privacy Commissioner of Canada or, in Alberta, the Office of the Information and Privacy Commissioner of Alberta.

Keeping it safe

Every connection is encrypted (HTTPS). Passwords are stored only as hashes. Database rules let each account read and change only its own rows, and the administrator's view is read-only and logged. No system is perfect: use a password you don't use anywhere else, and log out on shared devices. If a breach puts your information at real risk, we'll tell you and the Privacy Commissioner as the law requires.

Changes to this policy

When this policy changes, we'll update the date at the top. For important changes, we'll tell you by email or in the app before they take effect.

Contact

Questions, requests or complaints: support@hashmarkshockey.com.

See also our Terms of Service.