Privacy policy

Iceboard Privacy Officer: Iceboard, Victoria, British Columbia, Canada. Email the privacy officer. You may also use Contact us. The legal operator is identified in Legal information. Please do not send passwords, identity documents or payment details in an initial message.

Who this service is for

Public hockey research can be browsed by people of any age. Account registration, optional analytics and optional email subscriptions are for people aged 16 or older. If you are below the age of majority where you live, parent/guardian permission is also required for an account. This is an Iceboard policy, not a universal fantasy-sports age rule. We do not request a date of birth or run an identity-verification service. Please do not create a child’s account or submit a child’s personal information. A parent or guardian who believes we hold a younger child’s information can contact the operator for review and deletion where appropriate.

What Iceboard collects

When you register, Iceboard stores your email, username, a salted password hash, registration time and recent activity time. New registrations also record the accepted policy version, age/permission confirmation and time; optional-email preference changes have their own versioned records. Administrators can see your username, email, registration time, recent activity and optional email preference. Passwords are never displayed to administrators. Site owner access may also use the hosting platform’s verified account identity.

Your saved roadmap feature interests, leagues, scoring weights, followed players, followed teams and uploaded profile picture are stored with your account. Your profile picture can be displayed alongside your account in Iceboard. Contact submissions store the name, email, subject, message, submission date and processing status so administrators can read and respond.

Cookies and browser storage

A necessary, HttpOnly session cookie keeps password users logged in for up to seven days. Theme, page colour and analytics-consent preferences are stored in your browser. A random analytics visitor ID is created only after you opt in. The hosting platform may use its own sign-in cookies. Iceboard does not use advertising cookies.

See the separate Cookie & browser storage policy for names, purposes, lifetimes and controls. Optional choices expire after 180 days and are requested again if the notice version changes.

Usage analytics

Only after you enable optional analytics, Iceboard records page or tab viewed, time, a random browser identifier, your account ID when signed in, approximate country supplied by the hosting edge, and a broad device category estimated from browser headers. Raw IP addresses are not stored in analytics. A hashed network identifier is temporarily used to limit abusive requests. Analytics excludes administrator page views, ignores recognizable crawlers and respects the browser’s Do Not Track and Global Privacy Control signals. Counts describe browsers and requests, not verified individual people.

Analytics events older than 90 days are removed as new analytics events arrive. Account and saved profile information remains while the account is active. Deleting an account removes its profile, picture, leagues, followed players, followed teams, contact submissions, recipient email records and Yahoo connection data. Historical analytics lose their account link; anonymous browser counts remain until the 90-day retention period ends. Other contact messages and email activity remain available for administration until removed in response to a retention or deletion request.

Why information is used

Account details, saved leagues and followed players are used to provide the features you request. Contact information is used to respond to you. Security identifiers and recent activity help protect accounts, limit abuse and operate the service. Optional analytics and optional news rely on separate affirmative choices and can be withdrawn. If data-protection laws require a lawful basis, these activities may rely on providing a requested service, compliance with law, legitimate operational/security interests where permitted, or your consent for the optional activities described here. We do not use account data for automated decisions with legal or similarly significant effects.

Optional Google sign-in

Google sign-in requests only your Google identity and verified email. Google authenticates you on its own website; Iceboard does not collect your Google password or request Gmail, Drive, Calendar or offline access. Iceboard stores the Google account identifier and verified email linked to your account. Existing accounts are not merged solely by matching email. New Google users must still choose a username and confirm the age, guardian-permission and current policy requirements. Google access/refresh tokens are not retained for login. Temporary, encrypted authorization and registration records expire after ten minutes and are cleared during subsequent authorization or housekeeping. App credentials are encrypted. You can manage the link in Account security, and account deletion removes linked Google identity records. Reconfirmation is required for sensitive changes on Google-only accounts; another sign-in method is required before unlinking the only Google method.

Yahoo Fantasy connection

Connecting Yahoo is optional and authorizes read-only access to your Fantasy Hockey leagues, matchups, standings, rosters and scoring settings. Yahoo authenticates you on its own website; Iceboard does not collect your Yahoo password. Access and refresh tokens and private cached league data are encrypted on the server and scoped to your Iceboard account. Private Yahoo cache entries are retained for up to 24 hours and pruned as that account fetches new data. Disconnecting removes the stored connection, authorization states and cached Yahoo data immediately; account deletion also removes them. You can additionally revoke app access in Yahoo account settings. Scoring weights you explicitly copy into Your leagues remain there until you remove the saved league or delete your account. Administrators configure the shared app credentials but are not given an interface to read another user’s Yahoo league data.

Storage locations and transfers

The operator is based in British Columbia, Canada. Sites provisions Cloudflare D1 database storage and R2 file storage; the available hosting controls do not expose a verified storage country or city for this project. Canadian-only residency is not guaranteed. Providers or their subprocessors may store or process information outside your country, where local laws and access powers may differ. A .ca domain does not determine storage location. International transfer safeguards and any country-specific representative requirements must be assessed by the operator with the providers where applicable.

Email

Optional announcements are sent only to accounts that opt in. Necessary service announcements or responses to your messages may be sent using your provided email. If email delivery is configured, Microsoft 365 or Resend processes the recipient email, subject and message. Microsoft app credentials and renewable mailbox authorization tokens are encrypted on the server; administrator setup requests Mail.Send, User.Read and offline_access and verifies the connected sender. Disconnect removes that connection and pending authorization requests. A one-time account confirmation may be sent after registration when delivery is configured; a small account-linked record prevents duplicate welcome requests. It is not a newsletter. See the Email & communications policy for sender identification, eligibility and no-login unsubscribe controls. Iceboard records provider acceptance or failure; it does not track email opens. Password-registration email addresses are not independently verified; Google registration uses the email verified by Google.

Resend can send website email using an encrypted, administrator-configured API key. Connecting it sends a synthetic message to Resend’s documented test address to check sender access; this does not include customer data or prove inbox delivery. Replies to outgoing messages are addressed to contact@iceboard.ca; Administrators can separately connect the contact@iceboard.ca Microsoft Inbox with delegated Mail.Read or Mail.ReadWrite, User.Read and offline_access to import incoming messages and replies into the administrator-only contact inbox. Iceboard initially checks the last 30 days and then incremental changes while the contact inbox is open. Sender names and addresses, subjects, text and sanitized HTML bodies, dates and conversation identifiers are stored for support. HTML is stripped of scripts and unsafe content. External email images stay hidden unless an administrator chooses to show them; showing them contacts the sender’s image servers. Small embedded PNG, JPEG, GIF and WebP images referenced by a message are fetched through Microsoft Graph when an administrator opens that message, cached with its conversation and removed when that conversation is erased. Other attachments and mailbox folders are not imported. With optional delegated Mail.ReadWrite approval, administrator actions can move imported messages to Outlook Archive, Junk Email or Deleted Items, restore them to Inbox, and synchronize explicit read/unread actions. Iceboard never permanently deletes Microsoft mailbox messages during Trash housekeeping. Verified Microsoft change notifications can trigger incoming imports while the site is closed; subscription metadata and temporary queued message identifiers are retained to deliver and retry these updates. The mailbox connection is separate from Resend sending and can be disconnected in Connections. Imported conversation messages follow contact retention and erasure; content-free hashed import identifiers are retained for up to 90 days to prevent repeated imports.

Service providers and public data

Sites and Cloudflare host the application, account database and uploads. NHL, Daily Faceoff and ESPN provide public hockey information. Fonts are hosted by Iceboard. Loading a remote player picture or team logo still sends your browser’s network information to that asset provider. See Sources for the data providers. Iceboard does not sell account or contact information.

Security and encryption

HTTPS encrypts traffic between your browser and the hosted site. Passwords are salted and hashed rather than stored reversibly. Yahoo app credentials, connection tokens and private cached league data use authenticated encryption on the server. The hosting database also uses provider-managed encryption at rest. This is not end-to-end encryption: the service must process account data, and authorized administrators can read contact messages and the registration information described above. Encryption does not guarantee complete anonymity or prevent every security incident.

Administrator social publishing

Administrators may connect an X account or Facebook Page for reviewed text and link posts. Iceboard stores encrypted app credentials and renewable authorization tokens, the connected account handle or Page identity, draft captions, saved evidence and publishing outcomes. The connection is shared with authorized Iceboard administrators. A confirmed post sends the reviewed caption to the selected platform and can make it public under the account’s settings. Disconnecting removes the local connection and pending authorizations; revoke access in the platform’s settings to remove provider-side authorization. Existing posts remain on that platform. Uncertain outcomes are retained for review and are not retried automatically.

Email confirmation

Password registration uses a confirmation link before creating an account. Iceboard temporarily stores the normalized email, chosen username, salted password hash, accepted policy version, a digest of the random confirmation token and a one-hour expiry. Passwords and confirmation tokens are not stored in plain text. The account becomes available for login only after email confirmation; confirmation does not automatically sign you in. Expired pending requests are removed during housekeeping or the next confirmation request; completed requests are removed immediately. The account stores the time its email was confirmed. Existing accounts can request confirmation from their dashboard.

Research preferences and player updates

Research filters, draft picks, trade selections, comparison players, scoring previews, planner filters and setup dismissal can be stored in this browser, scoped to the signed-in account. Clearing browser storage removes these preferences. Dashboard Updates saves alert choices, a followed-player report baseline, visit/read times and up to 100 observed changes to your account. Changes older than 30 days are pruned when Updates next checks reports. These records are removed with account deletion. In-site alerts are optional and checks run while the Updates tab is open; no email or push delivery is enabled by these preferences.

Retention and requests

Security throttling records and expired sessions are removed during analytics housekeeping. Public hockey caches use their configured retention periods. Unsubscribe tokens expire after 180 days. Versioned registration and email-choice records stay with the account until deletion unless preservation is required by law. Ordinary contact messages moved to Trash receive a seven-day recovery period; messages marked as spam receive 24 hours. Expired Trash is purged during automatic housekeeping on site activity and inbox access. If the site has no traffic, deletion occurs when housekeeping next runs. Only anonymous daily submission totals remain after a purge. A blocked sender’s normalized email is retained until unblocked to prevent new contact submissions. Active and archived conversations and mailing records remain for support and administration until the operator removes them or handles an applicable deletion request. Hosting backups, security logs and provider-managed identity records have their own retention practices and are not all controlled by the in-app Delete account action.

Your choices and requests

You can change your profile picture, username and optional email preference, manage leagues, and remove followed players in your dashboard. Use the analytics choice above to disable future optional analytics and remove the local visitor identifier. This choice does not erase historical events; they expire under the retention policy above. You can permanently delete your account from the Delete account section of your dashboard. Signed-in users can submit and track a personal-data-removal request from Profile → Account security in their dashboard. Requests are reviewed by the operator; a saved request status does not itself confirm erasure. For other access, correction, deletion or privacy questions, use Contact us. Depending on the law that applies, you may request access, correction, deletion, a copy of your information, withdrawal of consent, objection or restriction. We may need limited information to verify your authority without requesting your password. Some records may need to be retained for security or legal obligations; the operator will explain an applicable refusal or limitation. You may raise a complaint with the operator and, where applicable, the Office of the Information and Privacy Commissioner for British Columbia, the Office of the Privacy Commissioner of Canada, or your local data-protection authority. Do not send your password.