Privacy Policy

Home Rink is an NHL fantasy pool app operated from Alberta, Canada. This page explains what it collects, who can see it, and who helps us run it.

What we collect

• Account: your email address and a password (stored only in hashed form by our sign-in provider), or your Google account's email if you sign in with Google.
• Profile: your username, and optionally an avatar image, a tagline and a favourite team.
• Pool activity: the pools you create or join, your picks, trades, waiver claims, and chat messages.
• Error reports: when something breaks, technical details (the error, the page, browser type) are sent to Sentry so it can be fixed. Sentry receives the request that carries the report, so it can see your IP address as any web service would. We don't record sessions or use advertising trackers. Vercel Analytics gives us aggregate counts of page views and referrers; it doesn't use cookies, doesn't track you across other sites, and doesn't identify you personally.
• Trade offer emails: when another member sends you a trade offer, we send you an email at your account address. It contains their username, the pool's name, the players involved and any message they wrote. You can turn these emails off on your profile page.
• Hosting logs: our host, Vercel, records basic technical details of each request (such as IP address and page) to run and secure the service.

Who can see it

• Your username, avatar, tagline and favourite team are not limited to your pools: they can be seen by anyone who can reach the site, signed in or not. The same goes for pool names, rosters and standings, which are treated as public sports information.
• Chat messages are visible only to the members of that pool. Automatic lines in the chat, such as “a member was removed from the pool”, can include a username.
• Your email address is never shown to other users. Pool commissioners can see who is in their pool by username, not by email.

We do not sell your data or use it for advertising.

Services that handle data for us

• Supabase: database, sign-in and image storage.
• Vercel: hosting.
• Google: only if you choose “Continue with Google”.
• Sentry: error reports, as described above.
• Resend: delivers the trade offer emails described above (United States). It receives the recipient's email address and the email's contents. Sign-in and account emails, such as email confirmation, still go through Supabase.

NHL data comes from the NHL's public web services. Our servers fetch it without sending any personal information. Your browser also loads team logos and player photos from the NHL's servers, and on the new-pool page it asks the NHL's API for the playoff bracket, so the NHL can see your IP address and browser type on those requests, as with any web request. These providers are based in, or may process data in, the United States and other countries outside Canada, where privacy laws can differ from Alberta's. We share data with them only to run Home Rink.

Cookies and local storage

Home Rink uses only what it needs to work. A cookie from our sign-in provider keeps you signed in. Your browser's local storage remembers your team theme and whether you have hidden the homepage intro. There is no advertising or cross-site tracking, so there is no cookie banner to accept. Browser notifications for draft turns are optional and controlled by your browser; they are shown on your device and don't use a push service.

Your rights and deleting your data

You can change your username, avatar, tagline and favourite team on your profile page. You can delete your account there too, without asking us. That removes your login, profile, avatar image, pool memberships, rosters and chat messages. If you run a pool that has other members, it is handed to the member who has been in the longest; a pool with no other members is deleted with you. Waiver and trade history in other people's pools that mention you is removed along with your membership.

To ask for a copy of the personal information we hold about you, to correct it, or to delete it, email hello@homerink.app. Error reports already sent to Sentry, and any backups kept by our providers, are kept for a limited time under their own retention policies.

Security

Passwords are hashed, traffic uses HTTPS, and access to the database is restricted by rules that limit what each signed-in user can read and change. No service is perfectly secure, so please use a password you don't use elsewhere.

Children

Home Rink is not for anyone under 13, and we don't knowingly collect information from children under 13. If you believe a child has signed up, email us and we will remove the account.

Changes

If this policy changes, we will update it and the date at the top.

Contact

Questions about this page? Email hello@homerink.app.