Privacy

We know when you skate.
That’s about all.

Puckdrop exists because the group chat was leaking everyone’s number to everyone. So every promise on this page is a rule the software enforces.

The short version

We keep the least we can: your name, your email, and a phone number only if you add one.
No password. You sign in with a link we email you. It works once and dies in fifteen minutes.
Your teammates see your name and your answer. Your email goes to your organizer only. Your phone goes where you say it goes.
Not one ad, tracker, analytics script or outside font. Nothing on this site or in the app talks to anyone but us.
We never move money. We write down that it moved.
Ask and we delete you, within thirty days.

What we keep, and why

Every row below is something the app needs to run a weekly skate. If it’s not on this list, we don’t have it.

Your name: So the in/out list says who’s in. Nothing else on the roster is required.
Your email: It’s how you sign in and how the skate reaches you. It’s not a username anyone else sees.
A phone number, if you add one: Optional. You choose who sees it: your organizers only (the default) or the whole team. Clear the box and it’s gone.
Your answers: In or out for each skate, the position you answered as, and a note if you left one (“late, bringing a stick”). Teammates see these. That’s the point.
Money records: When your organizer records that you paid: the amount, how you paid (e-transfer, cash, cheque), a reference if they typed one, and the date. Puckdrop never holds or moves the money itself.
An early-access signup: If you left your email on the front page: the address, which page the form was on, and the time. No name, no IP address, no browser fingerprint.

What we don’t keep

Your IP address or browser details. We don’t log them against you.
Your location. The app never asks for it.
A password. There’s none to leak.
A birthdate, an address, a photo, or anything about your family.
Anything from an ad network, a social network, or a data broker.

There’s no password. You type your email, we send a link, you tap it. The link is a random token that works once, expires in fifteen minutes, and is stored only as a hash, so even someone with a copy of our database couldn’t sign in as you.

Tapping the link sets one cookie, pd_session. It lasts sixty days, it’s marked HttpOnly and Secure, and it’s the only cookie Puckdrop sets. It identifies your session and nothing else. Sign out and it’s gone everywhere at once.

Asking for a link never reveals whether an address has an account. The reply is the same, and takes the same time, either way.

Who sees what

These rules live in the server, where the app can’t bend them. Each one has an automated test that fails if it stops being true.

Your teammates see your name, your position, and your answer for each skate.
Your email is shown to the organizers of your team, and to you. Nobody else on the roster sees it.
Your phone number is shown to organizers by default. Flip one switch in your profile and the whole team can see it. Flip it back and they can’t.
A spare who gets an invite link sees the skate and the team name. Never the roster, never anyone’s contact details.
Other teams see nothing. Being an organizer of one team means nothing on another.
Money: you see your own balance. Organizers see everyone’s. If an organizer opens the books, the team sees two totals, collected and owed, never who owes what.

What organizers can do on your behalf

An organizer can answer for you when you texted them instead of tapping, mark a no-show after the fact, record a payment, or look at the app as you to check what you see. Each of these is written to a log with the organizer’s name and the time, and the confirmation they see says so: “This will be recorded as set by you.”

Third parties

On this site and in the app: none. No analytics, no ad pixels, no social buttons, no fonts from a font service, no chat widget. Every byte your phone loads comes from our own domain. You can check: open your browser’s network tab and look for a second hostname. There isn’t one.

Behind the scenes: one. Puckdrop runs on Cloudflare, which hosts the application, stores the database, and delivers our email. Cloudflare processes your data on our instructions and doesn’t use it for its own purposes. We don’t sell, rent, share, or trade your information with anyone, for any reason, and there’s no version of this product where we would.

Emails we send

A sign-in link, when you ask for one.
The in-or-out email for each skate, a reminder if you haven’t answered, and the organizer’s morning-of digest, on the schedule your organizer set.
A spare invite, if you’re on a team’s spare list and they’re short.
A reminder about a balance, only when your organizer presses the button.
One email about early access, if you asked for it. Then nothing.

There’s no newsletter, and no “we thought you might like”.

Money

Puckdrop is a ledger, not a wallet. Your organizer records that a payment happened, however it was paid. We never hold funds, never see your bank or card, and never move a dollar. If a payment record is wrong, that’s a conversation with your organizer, and the app keeps the history of who changed what.

Kids

Puckdrop is for adults organizing themselves. If it ever serves youth hockey, a child will be a record on a parent’s account, never a user with a login, and this page will change before that ships, not after.

Your data is yours

See and change it. Your name, phone number and phone setting are on the You screen in the app.
Leave a team. Ask your organizer. They can remove you, and your contact details leave the roster with you.
Be forgotten. Email privacy@puckdrop.net from the address on your account and we delete your account and personal details within thirty days. What stays is the bare fact that a skate on a given night had a certain number of skaters and goalies, with your name removed, because your old teammates’ records shouldn’t change when you leave. Deleting yourself from inside the app is on the way.
Take it with you. Ask at the same address and we send you what we hold, in a plain file.

How long we keep things

Sign-in links: fifteen minutes, or until used.
Sessions: sixty days, or until you sign out.
Your account and answers: as long as your team uses Puckdrop, or until you ask us to delete them.
Early-access signups: until we send the one email, or until you ask us to drop you.

The legal bit

Puckdrop is made in Canada and handles personal information under Canada’s federal privacy law, PIPEDA. If you think we’ve got something wrong, write to privacy@puckdrop.net first. We answer. You can also complain to the Office of the Privacy Commissioner of Canada.

If this page changes in a way that matters, everyone with an account gets an email that says what changed, before it takes effect. Small wording fixes just update the date below.

Effective September 10, 2026.

We know when you skate.That’s about all.