Privacy

Puckflow.io is operated by Puckflow LLC, an Indiana limited liability company, whose registered office is c/o Northwest Registered Agent LLC, 5534 Saint Joe Road, Fort Wayne, IN 46835, United States. Reach us at support@puckflow.io, which is the fastest way to get a person.

If you only read the site: analytics events (below) and the technical information your browser sends with any web request — IP address, user agent, referring page. Your IP is used for coarse location and abuse prevention and is not stored alongside your identity unless you have given us one.

If you join the email list: your email address, and how you arrived — the campaign tags in the link you followed (utm_source, utm_medium, utm_campaign), the site that referred you, and the first page you landed on. We keep this so we can tell which channels bring people who stay.

If you subscribe: your email address and your subscription status. Card numbers are entered on Stripe’s systems and are never sent to, seen by, or stored on ours. We keep the Stripe identifiers needed to tie a payment to an account.

We use PostHog for product analytics, configured deliberately narrowly. Automatic capture of every click and form interaction is turned off. We record only these named events:

• ·a page view
• ·a game page viewed, and whether the numbers shown came from a prior season
• ·a share button pressed
• ·a share image copied successfully, or failing that, why it failed
• ·an email signup
• ·a prop added to the tracker
• ·a pricing page viewed, a checkout started, a checkout completed

We also record session replays — a reconstruction of how a page was used — with all input fields masked. Whatever you type, including your email address, is replaced before the recording leaves your browser. Anonymous visitors are not given a stored profile; that happens only once you identify yourself by subscribing.

Prop bets you add to the tracker are saved in your browser’s local storage and are never transmitted to us. The same is true of the record of how you first arrived, which rides along with analytics events but is not separately stored. Clearing your browser data removes both, and your prop tracker with them.

We do not use advertising cookies and we are not part of any ad network.

We keep this list short on purpose. Each of these is a company that handles some of your data so the site can work:

• ·Vercel — hosting and server logs.
• ·Supabase — the database holding email list entries and, once payments launch, subscription records.
• ·PostHog — product analytics and session replay.
• ·Resend — sending email to the list.
• ·Stripe — payment processing and card data, once subscriptions launch.
• ·Anthropic — generates written game briefs. This feature is currently switched off, and when on it is sent game statistics, never anything about you.

Game data comes from the NHL’s public API. Nothing about you is ever sent to it.

We do not sell your personal information, and we never have. We do not share it with anyone beyond the processors above.

Email list entries are kept until you unsubscribe or ask for deletion. Unsubscribing marks the record so we do not email you again; ask for deletion and the record goes. Analytics events and session replays are kept for up to 12 months. Subscription records are kept for as long as tax and accounting rules require, typically seven years, because we are obliged to.

Every email we send has an unsubscribe link, and it works. Beyond that, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it, by emailing support@puckflow.io. We will respond within 30 days. We will not make you create an account to ask, and we will not treat you differently for asking.

If you are in California, the CCPA gives you these rights explicitly, including the right to know what is collected and to have it deleted. If you are in the EEA or the UK, the GDPR gives you these rights plus the right to object to processing and to lodge a complaint with your supervisory authority. Our lawful bases are your consent for marketing email, and legitimate interest for the narrow analytics described above.

Your browser’s “Do Not Track” and Global Privacy Control signals are honored where our processors support them.

Puckflow is not intended for anyone under 18, and we do not knowingly collect information from anyone under 18. If you believe a child has given us information, email us and we will delete it.

Data is held by the processors above, each of which encrypts it in transit and at rest. Payment card data never touches our systems. That said, no service can promise perfect security, and we will not pretend otherwise. If a breach affects your data we will tell you and the relevant authorities as the law requires.

If we change this policy we will update the effective date above. For a change that materially affects what we collect or who we share it with, we will email the list before it takes effect.

Questions about any of this go to support@puckflow.io. The Terms of Service cover the rest of the relationship.