Last updated: September 8, 2026
This policy describes how RinkLog, developed by JobeLabs inc. (Boischatel, Quebec, Canada), collects, uses and protects your personal information. It is written to be read, not to discourage you: if a passage seems unclear, write to us.
RinkLog is operated by JobeLabs inc., a company based in Boischatel, Quebec, Canada.
Under section 3.1 of Quebec's Law 25, the person responsible for the protection of personal information is Jonathan Beaupré, president of JobeLabs inc., reachable at confidentialite@rinklog.com. Write to that address for any question, access request or complaint about your personal information.
This policy covers RinkLog (web, iOS and Android) as well as SauceZone, our second product. The two have separate accounts, the same controller and the same policy.
Your account. Your email address, used as your login identifier; your name; your password, stored hashed (PBKDF2-SHA256) and never in clear text; your language preference. If you sign in with Apple or Google, we keep the technical identifier that service sends us, never your password.
The data of the player you track. First and last name, jersey number, position, age group or date of birth, team, season, caliber and league; the statistics of every game, the events, ice time, periods and duels; goals, training notes and attendance; calendar events, with place and time; the photos and videos you upload, and the player cards built from them.
Your subscriptions. The current plan, its source (web, App Store, Google Play), its dates, and the history of promo codes and referrals used.
Technical data. Device type (iOS app, Android app or web), operating system, app version and a random installation identifier. That identifier is not tied to any hardware data of your device and is deleted with your account.
Your IP address, for security only: abuse prevention, multiple account creation and rate limiting. It is used in the moment and is never stored in clear text in our tables. See section 9 for the detail.
An approximate location: country and region, derived by our host from how your request was routed, and city for the site's visit counter. We never use your device's GPS, and the app requests no location permission.
We measure how the product is used, to know which features deserve improvement and which serve nobody. These statistics are recorded on our own infrastructure, never with a third-party analytics vendor.
The categories of events we record:
• Lifecycle: first open, account creation, first player created, first game tracked, return on day 2, day 7 and day 30, trial start, subscription, cancellation.
• Game tracking: game started, finished or abandoned, duration in buckets, sport, level, position, which statistics get recorded and how often, live entry or after the game.
• Configuration: which statistics you turn on and off, and when.
• Navigation and features: which screens are opened, which main buttons are used, which charts are viewed, which reports are generated.
• Friction: errors encountered, cancelled actions, sync failures, abandoned forms.
Each event carries a pseudonymous account identifier, the platform, the app version, the language and the plan. The account identifier is removed when you delete your account, and the event then survives in anonymous form.
Retention: 24 months, after which events are deleted. They are not sold, not shared with any advertiser, and not passed to any data broker.
On the web, these statistics are only recorded if you accepted in the choice banner. In the iOS and Android apps they are on by default, with no third party involved, and you can turn them off at any time from the Account screen.
When you create an account, we record how you got here: the campaign parameters present in the page address (the utm_* parameters, plus the click identifiers from Meta, TikTok, Reddit and Google), the site that referred you, the landing page, and the country and region derived from how your request was routed.
This tells us which campaigns actually bring members, and nothing else. Your IP address is never stored in this record: only the country and region are derived from it.
This information is held in your browser's local storage before signup, under the keys rinklog_attribution and rinklog_attribution_lt. Clearing site data erases them.
When you delete your account, the record is anonymized, not destroyed: the link to you disappears, the row stays so that the statistics of a past campaign do not change retroactively.
We advertise on Meta's platforms (Facebook and Instagram) on Reddit and on TikTok to make RinkLog known. To measure those campaigns, our public pages may load three measurement scripts: the Meta pixel, from Meta Platforms, the Reddit pixel, from Reddit Inc., and the TikTok pixel, from TikTok Technology Limited. Each reports visits and signups to its own platform, and nothing else.
The same three limits apply to all three, and they are enforced in the code:
• The pixels are only loaded after you accept in the choice banner. If you decline, or if you do not answer, no Meta or Reddit script is downloaded.
• The pixels are never loaded inside the signed-in app (tracking, player and game screens), nor in the iOS and Android apps, which contain no third-party tracker at all.
• No player data is ever sent to them. They only ever see marketing and pricing pages.
What each one receives: the Meta pixel reports a page view and an account creation; the Reddit and TikTok pixels report an arrival on our trial page and an account creation. In all three cases, the signup is only reported once the account actually exists on our servers.
None of the three scripts is downloaded before you accept, not merely silenced: until you answer, your browser contacts neither Meta, nor Reddit, nor TikTok. That is what keeps any of them from receiving even your IP address, which is personal information. The TikTok pixel is additionally loaded in hold mode, a function TikTok provides: a second layer on top of the first, not a replacement.
You can change your mind at any time by clearing site data in your browser: the banner will come back.
RinkLog is built for a parent or guardian to follow a child's sporting season. The account belongs to an adult, who enters the data and keeps control of it.
You must be at least 14 years old to create an account. Below that age, the account must be created and managed by a parent or guardian. That threshold is the age at which a minor may consent to the processing of their own personal information in Quebec.
The data of a child tracked in RinkLog:
• is never public by default. A player's public page is an explicit choice by the account holder, and it can be revoked in one click;
• is never sold, rented or traded, to anyone, in any form;
• is never used for targeted advertising. No player data goes to Meta or to any ad network, and our apps do not request your device's advertising identifier;
• is never shared with a third party for commercial purposes. The only third parties that see any of it are the technical providers listed in section 8, who act on our behalf and may not use it for themselves;
• never appears in our usage statistics, which carry categories only.
The statistics and photos you enter often concern a minor. You are responsible for them: only enter a child's data if you have authority over it, and a teammate's only with their parent's consent.
If you believe an account holds a child's data without the parent's agreement, write to support@rinklog.com and we will delete it.
• Providing the service: displaying your statistics, computing progressions, syncing your devices, managing your account and subscription.
• Generating analyses: progression report cards, chart analyses and the chat assistant, on the plans that include them.
• Communicating with you about your account: confirmations, renewal notices, important service notices.
• Improving the product, from the usage statistics in section 3.
• Keeping the service secure: abuse prevention, rate limiting, multiple-account detection.
• Measuring our campaigns, from signup provenance and, if you accepted, the Meta pixel.
We make no decision about you by purely automated means.
We do not sell your personal data and we do not share it with any third party for commercial purposes.
We use technical providers, which process data on our behalf and on our instructions:
• Cloudflare (United States): hosting, database, photo storage, site audience measurement.
• Anthropic (United States): generation of progression report cards, chart analysis and the chat assistant. The relevant player's statistics are sent to it in order to produce the analysis. These submissions are not used to train any model.
• Stripe (United States): payment processing on the web. We store no card data.
• Apple and RevenueCat (United States): in-app purchases and subscription management. RevenueCat receives a technical identifier linking your account to your subscription status, never your card information.
• Google (United States): sign in with Google, and Google Calendar sync if you authorize it.
• Resend (United States): delivery of our emails.
• Meta Platforms (United States): advertising pixel, on our public pages and only if you accepted. See section 5.
• Reddit Inc. (United States): advertising pixel, on our public pages and only if you accepted. See section 5.
• TikTok Technology Limited (Ireland): advertising pixel, on our public pages and only if you accepted. See section 5.
• goqr.me (Germany): rendering the QR code image of your referral link, when you display it.
We may also disclose information where the law requires it, or to assert our rights in court.
Where your data lives. On Cloudflare's infrastructure: D1 database, KV storage and R2 object storage. Cloudflare is a US company with a global network, so your data is processed and stored outside Quebec, principally in North America. The providers in section 8 are likewise established outside Quebec.
All connections to the service are encrypted in transit (HTTPS/TLS).
For how long.
• Your account and player data: as long as your account is active.
• IP address used for rate limiting: minutes to hours depending on the measure, then automatically erased.
• Trial codes and referrals: your IP address is not kept. We store a one-way fingerprint of it, which only tells us whether two claims came from the same connection, and never lets us recover the address. It disappears when the account is deleted.
• Usage statistics: 24 months.
• Device data: deleted automatically after 180 days without use.
• Technical error logs: 90 days.
Deleting your account. From the app, Account screen, then Delete my account. Deletion erases your account, your players, their statistics, their photos and their cards.
Two categories are anonymized rather than destroyed: your signup provenance and the usage statistics. Their link to you is erased, the row survives without an identifier. An anonymized row is no longer personal information, and destroying it would retroactively shrink measurements already published.
At any time, you may:
• Access the information we hold about you.
• Have it corrected if it is inaccurate or incomplete.
• Have it deleted, directly from the app or by writing to us.
• Receive it in a structured, machine-readable format, to take it elsewhere. RinkLog offers a player export from within the app, and on request we provide all the information in your account.
• Withdraw your consent to non-essential measurement, without any change to your access to the service.
• Complain. Write to us first: we answer within 30 days, as the law requires. If our answer does not satisfy you, you may contact the Commission d'accès à l'information du Québec, or the Office of the Privacy Commissioner of Canada.
To exercise any of these rights, write to support@rinklog.com. We may ask you to confirm your identity before acting.
This policy is governed by the laws of the Province of Quebec and the applicable federal laws of Canada, notably Law 25 (Act respecting the protection of personal information in the private sector) and PIPEDA.
If you reside in the European Economic Area or the United Kingdom, the GDPR also applies to you, and the rights in section 10 are yours on that basis as well.
We update this page when the product changes. For any significant change, we notify you by email or by a notice in the app at least 15 days in advance.
Change log
• September 8, 2026: full rewrite. Added sections on usage statistics, signup provenance, the Meta pixel and consent, transfers outside Quebec, portability and consent withdrawal. Explicit declaration of player photos, calendar, training data, Apple and Google sign-in, and approximate location. Designation of the person responsible for the protection of personal information. Corrected the IP retention period, which is not 30 days everywhere. Minimum account holder age raised from 13 to 14, to match Quebec's threshold for a minor's own consent. Removed the third-party QR code service, which received your IP address. The person responsible is now named, with a dedicated address for privacy questions. IP addresses tied to trial codes and referrals are no longer kept: they are replaced by a one-way fingerprint, and the addresses already recorded are erased.
• July 26, 2026: previous version.
JobeLabs inc.
Boischatel, Quebec, Canada
Jonathan Beaupré, person responsible for the protection of personal information
Privacy: confidentialite@rinklog.com
General support: support@rinklog.com
Website: rinklog.com/contact
Your privacy choice
Always on: what makes RinkLog work, namely your login session, your language and your display preferences. RinkLog cannot run without them.
Your choice: the usage statistics that tell us which features actually get used, and the Meta, Reddit and TikTok advertising pixels on our marketing pages. No player data ever goes into either, and nothing is sold.
Controller: JobeLabs inc. · confidentialite@rinklog.com
Law 25 QC