Cookie & browser storage policy
Last updated November 3, 2026
Your cookie & analytics choices
Essential sign-in and security storage works when needed. Optional analytics is off until you allow it. Choices last 180 days in this browser and are separate on each hostname.
Optional analytics is off.
Iceboard Privacy Officer: Iceboard, Victoria, British Columbia, Canada. Email the privacy officer. You may also use Contact us. The legal operator is identified in Legal information. Please do not send passwords, identity documents or payment details in an initial message.
What this policy covers
This covers cookies and similar storage used by Iceboard, including localStorage. Essential account/security storage is used to provide requested features. Display preferences are saved when you choose them. Optional analytics is not required to browse or register and is off until an eligible visitor explicitly allows it. No advertising, cross-site profiling or third-party analytics scripts are deployed by Iceboard.
Iceboard storage inventory
| Name | Purpose and type | Duration |
|---|---|---|
| iceboard-research:* / iceboard-planner:* / iceboard-onboarding:* | First-party localStorage for account-scoped research selections, planner filters and setup dismissal; no tracking or message delivery. | Until changed or browser storage is cleared. Research selections are scoped by season. |
| iceboard_google_state | Necessary HttpOnly, Secure, SameSite=Lax cookie binding a Google sign-in or linking request to this browser. Created only after starting Google authorization. | Up to 10 minutes; cleared on callback. |
| iceboard_google_pending | Necessary HttpOnly, Secure, SameSite=Strict cookie for finishing a new Google account registration and accepting account requirements. | Up to 10 minutes; cleared after registration. |
| iceboard_microsoft_state | Necessary HttpOnly, Secure, SameSite=Lax cookie binding an administrator Microsoft mailbox connection to this browser; created only when Connect Microsoft is selected. | Up to 10 minutes; cleared on callback. |
| iceboard_session | Necessary first-party HttpOnly cookie for password login; Secure over HTTPS; SameSite=Strict. | Up to 7 days, or until logout. |
| iceboard_yahoo_state | Necessary first-party HttpOnly cookie binding a Yahoo authorization request to your browser; created only when you start Connect Yahoo; Secure over HTTPS; SameSite=Lax. | Up to 10 minutes; cleared by the callback or disconnect. |
| iceboard-theme / iceboard-accent | First-party localStorage for display preferences you select. | Until changed or browser storage is cleared. |
| iceboard-analytics-consent | First-party localStorage recording allow/reject choice, notice version, choice time and 16+ confirmation when allowing analytics. | Used for 180 days or until withdrawn/cleared; a new material notice version requires a new choice. |
| iceboard-visitor | Random first-party localStorage identifier for optional analytics; no identifier is created before consent. | Used only while current consent is valid. Removed when you reject optional analytics; retained analytics events have a separate 90-day policy. |
Your choice
Allowing optional analytics requires confirmation that you are at least 16. Closing or ignoring the notice does not grant consent. Rejecting optional analytics does not disable hockey research or account access. You can withdraw consent using the controls above or the Cookie choices footer link. Withdrawal stops future optional analytics in this browser and removes its visitor identifier, but does not automatically erase past records. Choices are browser- and hostname-specific; changing from the generated hosting address to iceboard.ca requires a separate choice.
Do Not Track or Global Privacy Control keeps optional analytics off even if an earlier allow choice is stored. If browser storage is unavailable, analytics stays off. Browser settings can also clear or block cookies and localStorage; blocking necessary login storage can prevent sign-in.
Hosting and external services
Sites/Cloudflare may set their own authentication, traffic-security or routing cookies. Their names and lifetimes are managed by the providers and may change; this table describes Iceboard’s own application storage, not a certification of every provider cookie. Yahoo uses its own cookies when you visit Yahoo to authorize a connection. Remote NHL/player/team images may reveal your network address to the asset host; Iceboard sends a no-referrer policy and hosts fonts locally. See Privacy and Sources.
Questions and changes
Contact the operator above about an unexpected cookie, consent withdrawal or a privacy request. The date at the top and the Changelog identify updates.
Administrator X authorization
The necessary HttpOnly, Secure, SameSite=Lax cookie iceboard_x_state binds an administrator’s X authorization callback to the initiating browser. It expires after ten minutes and is removed on callback. X may use its own cookies when you choose to authorize the connection.
Administrator Facebook authorization
The necessary HttpOnly, Secure, SameSite=Lax cookie iceboard_facebook_state binds the Page authorization callback to the initiating browser. It expires after ten minutes and is cleared after callback. Facebook controls its own cookies on its authorization page.