Privacy policy

What LFG! collects

• Your account: your email address and password. The password is stored only as a secure hash by our sign-in provider; nobody can read it. We also keep when you signed up and last signed in.
• Your settings: your time zone and whether you want news emails from LFG!.
• Your roster: the NHL players you add, and when you added them.
• How you use the app: the days you open LFG! and how many times, and whether you opened it from an app on your Home Screen; the clips you open, how you got to them (the feed, a notification or a link) and how long each one played in the LFG! player.
• Notifications, if you turn them on: the address your browser's push service gives us to reach your device, its encryption keys, your browser's description of itself (its “user agent”), which site you turned them on at, and which clips we have notified you about.
• Emails: a record of which LFG! news emails were sent to you and whether delivery worked.
• Feedback you send: your message, the clip it is about, and, if you leave “Include page, browser and app version” ticked, those details too. It is also emailed to the support address.
• Sign-in sessions: for each device you are signed in on, its IP address and user agent, kept by our sign-in provider until you sign out or the session ends.
• Server logs: our web server logs each request, including your IP address, for security and troubleshooting. The logs are deleted after 14 days.

LFG! does not ask for your name, location, phone number or any payment details, and does not collect information from other sites or apps about you.

How it is used

• To sign you in, keep your roster and show your feed in your time zone.
• To send the notifications you turned on, and account emails such as a sign-in link or password reset.
• To send occasional news about LFG!, only if you have not turned news emails off.
• To answer your feedback and questions.
• To understand, in total, how the app is used (for example how many people come back each week and how long clips are watched), so it can be improved. Only the people who run LFG! see these numbers.
• To keep the service secure and stop abuse, such as automated sign-ups.

Your information is not sold, rented or used for advertising. It is not used for any purpose other than these without asking you first.

Who helps run LFG!, and where your information goes

LFG! uses these service providers. Each gets only what it needs to do its job for LFG!:

• Supabase hosts the database and handles sign-in. Your account and everything listed above is stored on servers in Canada (Montreal).
• IONOS hosts the LFG! web server, in the United States. Your requests, and the information they carry, pass through it.
• Brevo sends LFG!'s emails (sign-in links, password resets, news and feedback). It receives your email address and the message, and is based in the European Union.
• Cloudflare Turnstile checks that a person, not a bot, is using the sign-up, sign-in and password reset forms. It sees your IP address and browser details, and is based in the United States.
• Your browser's push service (Apple, Google, Mozilla or Microsoft, depending on your device) delivers notifications, so it sees each notification's text: the player, the play and the score.
• Namecheap forwards mail sent to the support address to our inbox.

Some of these providers store or process information outside Canada, in the United States and the European Union. While it is there, it is subject to the laws of those countries, and their courts or authorities may be able to access it. Questions about how these providers handle your information go to the support address (shown when JavaScript is on).

Information may also be disclosed if the law requires it, for example under a court order.

Videos and images from other sites

LFG! does not host any video. When you play a clip, your browser connects to the site that hosts it, which sees your IP address and browser details and handles them under its own policy:

• Goal, assist and save clips stream from Brightcove, the NHL's video provider. If a clip cannot play in the LFG! player, the NHL's own player opens instead, and the NHL, Brightcove and their advertising partners may set cookies or collect information in it (NHL privacy policy).
• Fight videos play in YouTube's privacy-enhanced player (youtube-nocookie.com). When you play one, Google handles your information under the Google Privacy Policy, and YouTube's Terms of Service apply.
• Player photos and clip thumbnails load from NHL servers.

Cookies and storage on your device

• Sign-in cookies keep you signed in. With “Keep me signed in” ticked they last 90 days from your last use; without it they end when you close the browser.
• Your browser's local storage holds when you last opened the app (so a visit is counted once, not on every tap) and whether you closed the notifications banner.

LFG! sets no advertising or tracking cookies.

Yahoo Fantasy (coming soon)

LFG! is adding an option to import your roster from Yahoo Fantasy Hockey. It will be off unless you connect your Yahoo account yourself. If you do, LFG! will only read the teams and players in your Yahoo fantasy hockey leagues to fill in your LFG! roster. It will not post or change anything on Yahoo. The access Yahoo gives LFG! will be kept on the server, never shown in your browser, and deleted when you disconnect Yahoo or delete your LFG! account. Your Yahoo data will not be shared with anyone or used for anything else.

How long it is kept

Your information is kept while you have an account. When an account is deleted, everything tied to it is deleted with it: settings, roster, activity, clip plays, notifications, email records, feedback and sign-in sessions. Server logs are deleted after 14 days. Copies of emails you were sent stay in your own inbox, and Brevo keeps its sending logs for a limited time under its own policy.

Your choices and rights

• See or correct your information: email the support address (shown when JavaScript is on) and you will get a copy of what LFG! holds about you, or have it corrected.
• Delete your account: email the support address (shown when JavaScript is on) from the address you signed up with. Your account and everything tied to it will be deleted within 30 days.
• Stop news emails: use the unsubscribe link in any LFG! email, or turn off “Email me news about LFG!” in Settings. Account emails, like a password reset you ask for, still arrive.
• Stop notifications: turn them off in Settings or in your browser or phone settings.

You can withdraw your consent at any time, though LFG! cannot run without the information it needs for your account and feed. If you are not happy with an answer, you can complain to the Office of the Information and Privacy Commissioner of Alberta.

Security

Connections to LFG! are encrypted, the database only lets each user reach their own information, and only the people who run LFG! can see account-level data. No system is perfectly secure; if a breach ever puts your information at real risk, you will be told.

Children

LFG! is not meant for children under 13 and does not knowingly collect their information.

Changes to this policy

If this policy changes, the new version goes on this page with a new effective date. If a change affects how your information is used in a meaningful way, you will be told by email or in the app first.