The short version: we keep as little as we can.

Who we are. IceStats Pro is operated by TechAdvise, LLC, which is responsible for the data this policy describes. Questions? Write to us.

On this website

What we collect. If you request beta access, we collect your email address and the platform you'll test on (iPhone/iPad or Android). For Android, that email is the Google account you'll use, because Google Play adds testers by Google account. If you came from a tagged link (a Facebook post of ours, say) or from another website, your request also records the tag, the page you first landed on and the name of the site that linked you, so we know which posts bring testers in.

What we use it for. Sending your beta invite. To do that we add your email to Apple's TestFlight or Google Play's tester list; that's how their beta invites work. Beyond that we don't sell it, share it, or add you to anything else.

Where it lives. Your request is stored by our form provider, which also emails a copy to our inbox. The form provider keeps your IP address and browser details with each submission to filter spam. Once you're invited, Apple or Google (whichever you picked) also holds your email as a tester for as long as you're in the beta.

Getting off the list. Write to us and we'll delete your request and remove you as a tester. No questions, no follow-ups.

The contact form. If you write to us, we get your email address and your message. They're stored by our form provider (with the same IP address and browser details), emailed to our inbox, and used for one thing: replying to you. No lists, no sharing.

Cookies and analytics. This site sets no cookies. To see which pages get read and which sites send people here, it uses Cloudflare Web Analytics, which counts visits without cookies and without building a profile of you. For each visit it records the address of the page you loaded (including any tags in the link), the page that linked you here, your country, your browser, operating system and device type, and technical details such as how fast the page loaded. Separately, the copy of the tag and link details that we attach to your beta request stays in your browser tab until you submit the form; it's cleared then, or when your browsing session ends.

In the app

Your account. Your email address, the username you pick, and an identifier from our identity provider — signing in happens there, so we never see or store your password. We also note when you signed up, when you last signed in, and when you accepted our Terms and this policy.

What you record. The stats you enter — games, teams, players, and everything that happens on the ice. A player entry includes a name, jersey number and position, so you're recording information about other people, usually kids. Add only the players you're entitled to track.

Where it lives. On your device first, because rinks don't have signal and the app has to work without it. When you're back online it syncs to our servers so your data survives a lost phone and follows you to a new one. The services named under "Who handles your data" below store it for us; nobody else gets it.

Publishing a stats site. A published microsite is a public web page that anyone with the link can open. It shows your username and the month you joined; your seasons, leagues, teams and games, with each game's date, score and location; and, for each player, their name, jersey number, position, team and stats. We deliberately block the whole site from search engines, so it shouldn't turn up in a search — but a link you share works for whoever has it. A site stays up for three years after your most recent report (see the Terms of Use), and we'll email you before it comes down at the three-year mark. Deleting your account takes it down sooner (see below).

Report tokens. When you buy tokens we keep a record of the purchase: what you bought, when, and the receipt. The payment itself goes through the app store — we never see your card.

Promo codes and IP addresses. If you redeem a promo code we record the IP address it came from, to catch people farming codes. That's the only IP address we store ourselves. Separately — as on any website — the providers sitting in front of the app see the address your device connects from and keep it in their own security and anti-abuse logs. We don't use those to track you.

Crash reports. When the app or our servers run into an error, they can send a crash report to Sentry, a service that collects them so we can find and fix the bug. A report says what went wrong and where in our code it happened, basic facts about your device (things like model, operating system version, screen size, language, time zone, battery level and free memory and storage), the app version and build, and a short trail of what the app did just before, like the taps leading up to it. The app also tags each report with a random ID made when it's installed. That ID isn't tied to your account, and it normally starts over if you delete and reinstall the app. Like any service your phone connects to, Sentry also sees the IP address a report comes from, and keeps it with the report.

What a crash report leaves out. We've set it up to leave out who you are and what you send us: no name, email or account details, no sign-in details, and none of the contents of what the app sends to our servers, like your stats and players. It leaves out the app's own log messages too. When a report notes that the app talked to our servers, it keeps only which of our addresses it called and whether it worked, with any username you tried replaced by a placeholder. There's no screen recording, and nothing about how you use the app is collected except that short trail, which only travels with a report. Sentry keeps each report for up to 90 days.

Feedback. When you send feedback from the app, it goes to Sentry too, the same service that collects crash reports. It carries what you type, the same basic facts about your device and the app version and build, and the same short trail of what the app did just before. Your account email is attached only if you turn on "OK to contact me", so we can reply. Unless you turn that on, it carries no name, email or account details, only what you type. As with a crash report, Sentry also sees the IP address it comes from, and keeps it with the feedback.

No ads, no tracking. Apart from those crash reports and feedback, the app carries no analytics, no advertising SDKs and no third-party trackers. The website has no advertising or third-party trackers either; the only measurement it does is the cookieless visit counting described above. Crash reports and feedback are for fixing bugs and improving the app, never for following you or selling ads.

Deleting your account. You can delete your account yourself in the app: open the Account tab, tap Delete Account and confirm. Your account and everything recorded under it — players, teams, games, leagues, seasons and reports — are deleted from our database right away, with no grace period, and the app wipes its copy off your device. It can't be undone. PowerSync, which keeps the app in sync, holds a record of past changes for a while after that; it's cleared within 30 days, as are the restore history and backups our database host, Neon, keeps. Just signing out also wipes the copy on your device, but leaves your account and stats on our servers. If you no longer have the app, ask us through the contact form instead.

Your stats site comes down too. Not instantly, but within 30 days: it's removed, along with the copy of your stats we built it from, the next time we publish stats sites. Until we've confirmed it's gone, we keep a note of the site's address and when you asked — nothing else about you. Copies or screenshots someone already saved are out of our hands.

What we keep. A few records outlive the account, tied to the email that made them: what you bought, the report tokens you spent, and any promo code you redeemed — including the IP address recorded with it. Those are our financial and anti-abuse records.

Your sign-in, during the beta. Deleting your account doesn't yet remove your login from our identity provider, which holds your email address. Sign in with it again and you'll start a new, empty account. To have the login removed as well, ask us through the contact form.

Kids' data. IceStats Pro accounts are for adults — parents, coaches and team managers. We don't knowingly create accounts for children. The player entries you add are yours to stand behind as the account holder: record only what you need, get a parent or guardian's OK before you record or publish another family's kid.

Taking a player off a stats site. If your child — or you, if you're the player — shows up on someone's IceStats Pro stats site and you want them off it, tell us through the contact form with a link to the player's page and how you're related to the player. We may ask a question or two to confirm the request. Once we've confirmed it, the player comes off the public site within 30 days: their player page goes, their name and number come out of rosters, stats tables and game sheets, and plays they were part of are shown without any names. We tell the account holder that the player was hidden. The player stays in the account holder's own app and stats, which we don't edit; to have those removed, ask the account holder. We keep a note of which player we hid and why, so we can undo it if it was a mistake. The hide is tied to that player's entry: if the account holder deletes the player and adds them again, it's a new entry, so ask us again. Copies or screenshots someone already saved are out of our hands.

Across the website and the app

Who handles your data. A handful of services run parts of IceStats Pro for us, and each one handles your information to do that job:

• Auth0 runs sign-in. It holds your email address and your login, including your password, which we never see.
• Neon hosts our database, where your account and the stats you sync are stored.
• PowerSync keeps the app on your device in sync with that database, and holds its own copy of your stats to do it.
• Amazon Web Services runs our servers and the job that builds stats sites, stores the copy of your stats a site is built from, and delivers the emails Auth0 sends you, like a password reset.
• Cloudflare sits in front of our servers, and hosts this website and published stats sites.
• Sentry receives crash reports and the feedback you send, as described above.
• Formspree stores what you send through this website's forms.
• jsDelivr serves the fonts on this website and on the sign-in page, so it sees the address your browser connects from when either loads.
• Zoho hosts our icestatspro.com email.

Apple and Google run the beta programs and the app stores, under their own privacy policies.

We don't sell or share it. We don't sell your personal information, and we don't share it for cross-context behavioral advertising, which is what state privacy laws like California's mean by "sell" and "share." We don't use it for targeted ads or to profile you. Beyond the services above and the beta invites, we'd hand it over only when the law requires it, or to a new owner if IceStats Pro is ever sold or merged, who would have to keep honoring this policy.

How long we keep it. Your account and everything you record under it stay for as long as you have the account. We don't delete an account for going quiet, so it's all there when the next season starts; when you're done with IceStats Pro, delete your account (see Deleting your account). A stats site runs on its own three-year clock, described above, and taking it down leaves your account and stats in place. Crash reports are kept for up to 90 days, our servers' own logs for 30 days, and the records under "What we keep" outlive the account.

Keeping it safe. Everything the app and this website send travels encrypted. The services that store your account and stats for us keep them encrypted at rest. Signing in goes through Auth0, so your password never reaches us, and only the people who run IceStats Pro can get into our accounts and servers. No system is perfectly secure, but we take reasonable steps to protect your information.

If something goes wrong. If we learn of a breach that exposes your personal information, we'll email you without unreasonable delay, and always within the time the law requires: what happened, what information was involved, and what you can do about it. Where the law requires it, we'll tell the authorities too.

Your rights. Wherever you live, you can:

• Get a copy. Ask us and we'll send you a file with your account and the stats recorded under it.
• Fix it. Edit your players, teams, games and username right in the app. For anything you can't change there, like your email address, ask us.
• Delete it. In the app, or by asking us; see Deleting your account.

To ask, use the contact form and write from the email on your account, so we can confirm it's you. We'll answer within 30 days. Using these rights never costs you anything or changes how we treat you, and if we turn a request down, write back and we'll take another look.

Changes to this policy. When we change this policy, we'll update the date at the top. If a change matters, like collecting something new or using your information in a new way, we'll tell you in the app and ask you to accept the new version the next time you open it while you're online.