PuckBoss
Draft. This policy is being finalized and is not yet in effect.

Privacy Policy

Last updated: [DATE]

The short version

Who we are

PuckBoss (the website at puckboss.com and the game at puckboss.com/play/) is operated by [LEGAL ENTITY NAME], [MAILING ADDRESS] ("we", "us"). Our Privacy Officer, who is accountable for how we handle personal information, is [NAME]. Contact: privacy@puckboss.com [or support@puckboss.com].

What stays on your device

Your leagues, settings, backups list and game progress are stored in your browser's storage on your device. They are not sent to us, except when you choose to attach a league to a bug report (see below). You can delete them at any time by deleting a league in the game or clearing PuckBoss's site data in your browser. If your browser clears its storage, your leagues are gone unless you made a backup file.

The game also creates a random anonymous ID for your install (for example a_4829…). It isn't linked to your name, email or payment details.

What we collect, and why

1. Crash reports and anonymous usage stats

Unless you turn this off, the game sends us:

We use this only to find and fix bugs and to see which parts of the game players use. It contains no names, email addresses or league data. Your choice: turn it off in Settings ("Send anonymous crash reports and usage stats"). If your browser sends a Global Privacy Control or Do Not Track signal, it starts switched off. Kept for: up to 90 days.

2. Bug reports you send

Only when you send one: your description, your email if you add it, your league save if you leave "Attach my league save" ticked, the app version, device information, where you were in the game, your last few taps in the game, recent error messages, your browser's user-agent string and your approximate country. We use it to fix the problem and, if you gave your email, to reply. Kept for: up to 120 days.

3. JENI, the AI assistant GM

When you use JENI, the message you type and the game details JENI needs to answer (such as your roster, standings or a player's contract) are sent through our server to our AI provider, Anthropic, which generates the reply. We don't store the content of your conversations on our servers. Please don't type personal information into JENI. Anthropic processes these requests under its commercial terms [confirm current wording of Anthropic's API data-use and retention terms].

To apply the daily JENI allowance and prevent abuse, our server keeps a counter for your anonymous install ID (or, if that's missing, your IP address), or for your Pro subscription. Kept for: up to 2 days.

4. Purchases (PuckBoss Pro)

Payments are processed by Stripe. Stripe collects your card details and billing information under its own privacy policy; we never receive your full card number. From Stripe we keep: your Stripe customer ID, the email you used at checkout, which plan you bought, your subscription status and renewal date. We use them to turn Pro on, keep it on across your devices, let you restore it by email, and handle billing questions. Kept for: while you're a subscriber, and afterwards as long as needed for tax and accounting records [e.g. 6 years for Canadian tax records: confirm with your accountant].

5. Emails

If you ask to restore Pro by email, we send the link to the address you enter, using our email provider, Resend. If you email us, we keep the conversation to help you.

6. Hosting and security

Our website and server run on Cloudflare. Like any website, they receive your IP address and browser information to deliver pages and protect against abuse. Our server uses your IP address for short-lived rate limits. Kept for: about 2 minutes. Cloudflare may keep standard logs under its own privacy policy.

Service providers

ProviderWhat they do for usWhere
CloudflareHosts the website, server, crash reports, stats and bug reportsGlobal network
StripePayments and subscriptions (Pro only)[Canada / United States]
AnthropicGenerates JENI's repliesUnited States
ResendSends restore-link and support emailsUnited States

Your information may be processed outside your province or country, including in the United States, where it may be accessible to authorities under local law.

What we don't do

Children

PuckBoss is not directed at children under 13, and we don't knowingly collect personal information from them. The game itself needs no personal information. If you believe a child under 13 has sent us personal information (for example, an email in a bug report), contact us and we'll delete it. [Confirm the minimum age with your lawyer]

Your choices and rights

Security

Connections to PuckBoss use HTTPS. Access to our server, stats and bug reports is limited to us. No method of transmission or storage is perfectly secure, but we take reasonable steps to protect your information.

Changes

If we change this policy, we'll update the date at the top and, for significant changes, tell players in the game's "What's new" screen.