Privacy Policy
Effective: May 1, 2025
1. What We Collect
We collect the following information:
- Account data: email address and (if using credentials login) a hashed password
- Google OAuth: if you sign in with Google, we receive your email and profile name from Google
- Billing data: handled entirely by Stripe — we store only your Stripe Customer ID and Subscription ID, not card details
- Contact form: name, email, and message content you submit
- Usage data: standard web server logs (IP address, user agent, pages visited) via Vercel
2. How We Use It
- To provide and improve the Service
- To process your subscription and manage billing via Stripe
- To respond to contact form inquiries via Resend
- To authenticate you and maintain your session
We do not sell your personal information to third parties. We do not use your data for advertising.
3. Third-Party Services
We use the following third-party services that process your data:
- Stripe — payment processing. See stripe.com/privacy
- Google OAuth — optional sign-in. See policies.google.com/privacy
- Vercel — hosting and CDN. See vercel.com/legal/privacy-policy
- Supabase — production database hosting. See supabase.com/privacy
- Resend — contact form email delivery. See resend.com/privacy
4. Cookies and Sessions
We use a single session cookie (“next-auth.session-token”) to keep you logged in. No advertising cookies, no tracking pixels, no analytics cookies.
5. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g., billing records).
6. Your Rights
Under Canadian privacy law (PIPEDA) and, where applicable, GDPR, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate data
- Request deletion of your data
- Withdraw consent for optional processing
To exercise these rights, email hello@hockeymachine.net.
7. Governing Law
This Privacy Policy is governed by the laws of the Province of Ontario and the federal laws of Canada (including PIPEDA).
8. Changes
We may update this Policy. We will notify you by email if we make material changes. The effective date at the top of this page will always reflect the latest version.
9. Contact
Privacy questions or requests: hello@hockeymachine.net