Privacy Policy

Last updated: September 3, 2026

This Privacy Policy explains how Buyerson Inc., operating as PuckFinder ("PuckFinder", "we", "us", or "our"), collects, uses, shares, and protects personal information when you use PuckFinder (the "Service"). We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy law.

1. Information we collect

Information you give us

• Account information — your name and email address when you sign up or are added to a session.
• Player (child) information — the player details a parent or guardian provides to register, such as the child's first and last name, birth year, and playing position. This is provided by the adult registering the child, not by the child.
• Registration details — the sessions you register for, positions, and related notes.
• Communications — messages you send us and your email/notification preferences.

Information collected automatically

• Usage and device data — basic analytics about how the Service is used (for example, pages viewed and general device/browser information), collected through cookies and similar technologies to operate and improve the Service.

Payment information

When you pay by card, your payment is processed by Stripe. PuckFinder does not collect or store your full card number. We receive limited payment details from Stripe — such as the amount, status, and a reference to the saved card (if you choose to save one) — to confirm and manage your registration.

2. How we use information

• To create and manage your account and registrations.
• To process payments and, if you opt in, to save a card for faster future checkout.
• To send transactional messages such as registration confirmations, receipts, and session notifications.
• To operate, secure, support, and improve the Service.
• To comply with legal obligations and enforce our Terms.

3. How we share information

• With Organizers. When you register for a session, we share the registration details with that session's Organizer so they can run their program — for example, the registrant's name, the player's name and position, and contact email. Organizers are responsible for handling this information appropriately.
• With co-parents/guardians. If you invite or accept a co-parent, registration and schedule information for the shared player(s) is visible to the linked guardian.
• With service providers. We use trusted providers to run PuckFinder — including Stripe (payments), and providers for hosting/database, email delivery, and analytics. They may process information only to provide their services to us.
• For legal reasons. We may disclose information if required by law or to protect the rights, safety, or property of users, the public, or PuckFinder.
• Business transfers. If PuckFinder is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

We do not sell your personal information.

4. Children's information

PuckFinder is intended for use by adults (parents and guardians) and by Organizers. It is not directed to children, and we do not knowingly allow children to create accounts. Player details about minors are provided by the registering parent or guardian, and we use that information only to facilitate registration and the session. If you believe a child has provided us information directly, contact us and we will take appropriate steps to remove it.

5. Health information on teams

Teams in PuckFinder can run a trainer / safety module. If a parent or guardian chooses to use it, they can record health information about their own player — allergies and conditions, medications, notes for the trainer, family history relevant to sudden cardiac risk, and emergency contact numbers. This information is sensitive, and we treat it differently from everything else in this policy.

Only a guardian enters it

Health information is recorded by the player's own parent or guardian. Coaches, trainers and team administrators cannot add to it or change it. If something looks wrong to them, they are told to ask you.

Who can read it, and only with your permission

By default nobody on a team can read your player's health information. It becomes readable only when all of the following are true at the same time:

• a team administrator has appointed a specific person as a safety person for that team, and that person has personally signed a confidentiality undertaking;
• you have granted that team access to your player's information, in the app or by a signed paper form recorded as described below; and
• the current date falls inside that team's season window.

If any one of those stops being true — the appointment ends, you withdraw permission, or the season window closes — access ends automatically. Coaches and team administrators who have not been appointed as safety people cannot read health information at all. Permission you give one team does not extend to any other team.

You choose how much to share, and can change your mind

You can share the full record, or limit it to medical alerts and emergency contacts while keeping medications, notes and family history private. You can withdraw permission at any time, without giving a reason, and it takes effect immediately. Permission is granted for a single season plus a short wrap-up period, after which it lapses unless you grant it again. If a team extends its season we tell you the new end date rather than asking you again, and the notice includes a one-tap way to withdraw.

Paper consent forms

Many teams collect a signed medical form on paper. A team official can record that they hold such a form for your player. When they do, we email you to say it happened, name the person who recorded it, and give you a way to withdraw it immediately if you did not sign it.

Every access is logged, and you can see it

Every time somebody other than a guardian opens your player's health information, we record who opened it and when. You can see that list on your player's page at any time.

Emergency access

A safety person can open a player's medical alerts and emergency contacts in an emergency even where permission has not been given. This exists so that a consent decision can never delay care. Emergency access opens alerts and emergency contact numbers only — never medications, notes or family history — requires the person to record a reason, is logged as emergency access, expires automatically after 24 hours, and triggers an immediate email to the player's guardians naming who used it and the reason they gave.

Injury and concussion records

If a safety person records an injury, that record and any resulting return-to-play information is shared with the player's guardians, and is available to the team's appointed safety people and, where a team belongs to an organization, to that organization's designated safety officer. Coaches and team administrators are told only that a player has been removed from play or cleared — not the medical detail behind it.

It never affects who can play

Whether you share health information, and how much, has no bearing on whether your player may take the ice, be selected, or take part in any team activity. PuckFinder does not use the presence or absence of a consent record for any eligibility purpose.

6. Cookies

We use cookies and similar technologies to keep you signed in, remember preferences, and understand usage so we can improve the Service. You can control cookies through your browser settings; disabling some cookies may affect how the Service works.

7. Data retention

We keep personal information for as long as needed to provide the Service and for legitimate business or legal purposes (such as records of transactions). When information is no longer needed, we take reasonable steps to delete or de-identify it.

Health information recorded under section 5 is kept while the player is on a roster that uses the trainer module, and is deleted or de-identified once they have not been on such a roster for two consecutive seasons, unless you delete it sooner. Injury and concussion records are kept longer, because they document an incident that occurred: they are retained until the player reaches the age of majority plus two years, or as otherwise required for insurance or association reporting. Access logs are kept for twenty-four months.

8. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information. No method of transmission or storage is completely secure, but we work to protect your information and to limit access to those who need it to operate the Service.

9. Your choices and rights

• Access and correction. You can review and update your account and player information in the app, or contact us to request access to or correction of your personal information.
• Email preferences. You can unsubscribe from non-essential emails using the link in those messages. We may still send essential transactional messages (like receipts).
• Deletion. You can ask us to delete your account and associated personal information, subject to information we must retain for legal or legitimate business reasons.

10. Data location

PuckFinder is operated from Canada. Our databases and application servers are currently hosted in the United States, which means personal information you provide — including any health information recorded under section 5 — is stored and processed there. Information stored in the United States may be accessible to United States authorities under their laws, including on request without notice to us or to you. We use contractual and technical safeguards with our providers, and we restrict access to the people who need it to operate the Service. If you would rather not have your player's health information stored on that basis, do not grant a team access to it; nothing about your player's participation depends on it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you.

12. Contact us

For privacy questions or requests, email us at john@puckfinder.app. If you have a concern we haven't resolved, you may also contact the Office of the Privacy Commissioner of Canada.