Privacy notice

Controller

TODO(owner): name, a private individual in Finland

Contact

TODO(owner): email

NHL players

Names, birth dates, birth countries, headshots and game statistics of NHL players, published from the NHL's own public sources. Purpose: sports statistics and their analysis. Basis: legitimate interest in publishing sports statistics.

Visitor statistics

Page views counted by Plausible Analytics: which page, the referring site, country, browser and device type, kept as aggregate counts only. Plausible sets no cookie and stores nothing on your device. Retention: TODO(owner): Plausible's retention for this site.

Server logs and telemetry

For every request the server records its method, address and query string, response status and duration, your IP address (masked by Azure Application Insights) and your browser's user agent, plus errors and the server's own log lines. If you exceed the request rate limit, one log line a minute keeps your full IP address, the path and the limit, to detect abuse. No request bodies, no cookies, no script in your browser. Purpose: keeping the site running and secure. Basis: legitimate interest. Retention: 30 days.

Administrator sign-in

Google sign-in for the site's administrators only: the Google account's email address is checked against the list of administrators, and a session cookie keeps the administrator signed in. A visitor who never opens the sign-in page is not affected.

authjs.* cookies

Only if you sign in to the admin section: authjs.session-token (the encrypted session), authjs.csrf-token and authjs.callback-url, and during the Google sign-in authjs.state and authjs.pkce.code_verifier. Strictly necessary for the sign-in.

Nothing else: no advertising or tracking cookies, and no cookie on any public page.

Microsoft Azure

Hosting, database and logs, in the region East US 2, United States. Microsoft is certified under the EU-US Data Privacy Framework.

Google

The administrator sign-in (OAuth) only.

Plausible Insights OÜ, Estonia

Visitor statistics, hosted in the EU.

Team logos and player headshots are served from this site's own domain, so viewing them sends no request to the NHL.

You may ask for access to, rectification or erasure of your personal data, object to its processing, or ask for it to be restricted. A player who wants a correction or removal writes to the contact above (TODO(owner): email).

You may also complain to the Finnish Data Protection Ombudsman.