Privacy Policy

1. Who is responsible for your data

Glacies is an independent, non-commercial project operated by a private individual based in the Czech Republic, who acts as the data controller for the personal data described in this policy.

Glacies does not currently offer a dedicated contact channel for privacy inquiries. This section will be updated with contact details as soon as one is available.

2. What data we collect

Account data: when you create an account, we store your name, email address, and a securely hashed version of your password. Passwords are never stored in plain text.

Preferences: teams and players you add to your watchlist and settings such as your favorite team are stored and linked to your account.

Session and security data: to keep you signed in and to protect the service, we store session identifiers together with the IP address and browser user-agent associated with each session.

Usage analytics: we use a self-hosted instance of Umami, a privacy-friendly analytics tool. It collects aggregated, non-identifying information such as pages visited, referring site, approximate country, and device type. It does not use tracking cookies and does not build advertising profiles.

NHL statistics shown on the site are public sporting data and do not concern you personally.

3. How we use your data

To create and maintain your account and keep you signed in.

To provide personalized features such as your watchlist, favorite team, and settings.

To send transactional emails you request, such as password-reset links.

To secure the service, prevent abuse, and enforce rate limits.

To understand, in aggregate, how the site is used so we can improve it.

4. Legal bases for processing

We process account and preference data to perform our contract with you (providing the service you signed up for). We process session, security, and aggregated analytics data on the basis of our legitimate interest in operating a secure, reliable, and continually improving service. Where the law requires consent, we will ask for it.

5. Cookies

We use only essential cookies: an authentication cookie that keeps you signed in, and cookies that remember your language and theme preferences. Our analytics do not use cookies. Because we do not use advertising or third-party tracking cookies, no cookie-consent banner is required.

6. Who we share data with

We do not sell your personal data. We share it only with service providers that help us operate Glacies, and only as needed.

Plunk (useplunk.com), an EU-based email provider, processes your email address to deliver transactional emails such as password resets.

Our hosting infrastructure stores the data required to run the service. We fetch NHL statistics from the NHL's public API and do not send them any of your personal data.

7. Data retention

We keep your account and preference data for as long as your account exists. Session and security records are kept only as long as needed for their purpose and are routinely rotated. If you delete your account, we delete the associated personal data, except where we must retain limited information to comply with legal obligations.

8. Your rights

Under the GDPR you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. You may also withdraw any consent you have given.

You have the right to lodge a complaint with your local data-protection authority. In the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz).

9. Data security

We take reasonable technical and organizational measures to protect your data, including password hashing, encrypted transport (HTTPS), and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

10. International transfers

Our providers are located within the European Union or the European Economic Area. If any processing occurs outside the EEA, we will ensure appropriate safeguards are in place as required by the GDPR.

11. Children

Glacies is not directed at children under the age of 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please let us know so we can remove it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page. Your continued use of Glacies after changes take effect constitutes acceptance of the updated policy.