Privacy Policy

This policy explains how Michael Otto ("we", "us"), the provider of RinkLink, handles personal data. Michael Otto is the data controller for account and Service data. Clubs decide what their own public websites show.

What we collect and why

• Account details (name, email, sign-in credentials, phone if you add it) — to create your account and provide the Service (contract).
• Family and player details added by parents or clubs (names, birth dates, rosters, jersey numbers, medical and emergency notes) — to run teams and keep players safe (contract; legitimate interests of the club).
• Activity (schedules, RSVPs, attendance, messages, stats, form answers and uploads) — to provide the Service (contract).
• Technical data (IP address, device and browser info, error logs) — for security, fraud prevention and fixing problems (legitimate interests).
• Support messages — to answer you (legitimate interests).
• Push notification subscriptions — to send alerts you turned on (consent; you can turn them off any time).

Payment card details are collected by Paddle, not us.

Who we share it with

• Your clubs, coaches and team families, only as the app's privacy controls allow (for example, you can hide your contact details).
• Service providers that host and run the Service (cloud hosting, database, email and push delivery).
• Paddle, our Merchant of Record, for sales, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) and authorities where required by law.

We do not sell personal data. Children's private details never appear on public pages.

Retention

We keep data while your account or club is active and as needed for legal, tax and accounting obligations. Afterwards we delete or anonymise it.

Your rights

Depending on where you live, you may access, correct, delete, restrict or export your data, object to processing, and withdraw consent. Parents and guardians can exercise these rights for their children. You can also complain to your local data protection authority. We respond within one month.

International transfers

Our providers may process data outside your country. Where required, we rely on safeguards such as standard contractual clauses.

Security

We use encryption in transit, access controls that restrict data to authorized people, and audit logging of administrative changes.

Cookies and storage

We use only essential browser storage to keep you signed in and remember preferences like appearance. We do not use advertising cookies.

Contact

For privacy requests, contact Michael Otto through the RinkLink support channel.