Privacy policy

Effective November 2, 2026

TallyPuck runs websites for hockey leagues: signups, drafts, schedules, scorekeeping, stats and league news. This policy explains what we collect, who can see it, and what you can do about it. The short version: we collect what a league needs to run, we don't sell it, and we don't use it for advertising.

What we collect

When you make an account

Your email address, and a password if you choose one. Passwords are stored by our sign-in provider in a form nobody can read, including us.
Your name, if you add it.

When you sign up to play

Your first and last name, and a nickname and preferred jersey number if you add them.
Your date of birth. It decides the age rules below, and only you and your league's commissioner and helpers can see it.
For players 13 to 17, a parent or guardian's email address.
Your position, how you rate your own skills, dates you know you'll miss, and a photo if you add one.

While you play

Tryout scores and the ratings your commissioner and evaluators give you.
Draft picks, the team you're on, lines, and whether you said you're in or out for a game.
Game records: who played, goals, assists, penalties, and the stats that come from them.
Messages you post on your team's message board.

For commissioners and helpers

Your name and email, the league's settings, colors, logo and photos, sponsor details, schedules and announcements.
Past seasons from the league's own records, if you import them: players' names, an email if you have one, and their season totals.

When you report a problem

What you write, your email if you give it (or your account's email if you're signed in), the page you were on, your browser type and screen size.
A scrambled form of your network address, used only to stop the form being used for spam.

Automatically

Your browser keeps a few things on your device so the site works: that you're signed in, scorekeeping changes waiting to be sent when the rink Wi-Fi drops, a league's scorekeeping iPad setup, and small preferences such as which division you last looked at.
Sponsor logos count views and clicks as daily totals per logo. These counts aren't tied to you.
The companies that host the site keep standard server logs (such as your IP address and browser type) to keep it secure and working.

We don't use advertising trackers, and we don't use cookies to follow you around the web.

Who can see what

Anyone, if your league shows stats to the public: your first name and last initial, your team and your stats. You can hide yourself on your account page, and the public then sees "Player" instead of your name.
Players under 18 are hidden from the public automatically until their 18th birthday.
People in your league who are signed in: your full name, team, stats, the schedule and rosters. Past season stats your commissioner imports are only seen here and on draft cards, never on the public site.
Captains on draft night: draft cards, which can include your ratings, past stats and attendance, depending on the league's settings.
Your commissioner and their helpers: everything above, plus your email, your date of birth and your parent or guardian's email.

Your email address is never shown on public pages.

How we use it

To run your league's site: signups, tryouts, the draft, schedules, scorekeeping, standings and stats.
To send league email: signup confirmations, your team, draft links for captains, announcements and game reminders. You can turn off game reminders and announcements on your account page or with the link in those emails.
To keep the service secure and working, and to answer you when you contact us.

Who we share it with

We don't sell personal information, and we don't share it with advertisers or with league sponsors. We use a small number of companies to run TallyPuck, and they only handle your information to provide their service to us:

Supabase: our database, sign-in and file storage.
Cloudflare: hosting the website.
Resend: sending email.
Google Fonts: the site's typeface. Your browser asks Google for the font files, so Google sees your IP address.

We may also share information if the law requires it, or to protect the safety of players or the security of the service.

Children and teenagers

Kids sometimes play in adult leagues, so TallyPuck has age rules:

Under 13: children can't make an account or sign up online, and we don't collect their contact details. A league's commissioner may add a child under 13 by name, and only with a parent or guardian's permission. That child is hidden from the public site.
13 to 17: players can sign up with a parent or guardian's email, which gets a copy of league emails. They're hidden from the public site until they turn 18.

A parent or guardian can ask to see, correct or delete their child's information by emailing us. If we learn we have information from a child under 13 without a parent's permission, we delete it.

How long we keep it

Your account: until you delete it. When you delete your account (on your account page), your name, photo, email, date of birth, sign-in, team messages and the copies of emails we sent you are removed. The games, goals, assists and penalties you played stay in team and league totals as "Former player", so standings and other players' stats stay correct.
League records: for as long as the league uses TallyPuck. If a league stops paying, its site becomes read-only and nothing is deleted. A commissioner can download all of the league's data at any time.
Copies of emails we send: the address, subject and message are deleted after 6 months. A bare record that an email went out, so the same one isn't sent twice, is deleted after 2 years.
Problem reports: deleted after a year, or when you delete your account.
Deleted information can stay in our providers' backups for a short time before it's overwritten.

Keeping it safe

Everything travels over encrypted connections. Each league can only reach its own information, and the rules that enforce that live in the database itself, not just the website. Email service keys are stored encrypted. No system is perfect, so if something goes wrong that affects your information, we'll tell you.

Your choices

Change your profile, hide yourself from the public site, or turn emails on or off on your account page.
Delete your account on your account page.
Ask us for a copy of your information, or to correct or delete it, by emailing us. Depending on where you live, you may have further rights under your state's privacy law, and we'll honor them.

Changes

If we change this policy, we'll update the date at the top. If a change is significant, we'll let signed-in users know before it takes effect.

Contact

Questions or requests: support@tallypuck.com.