Solutions Game Data inc. ("Game Data", "we") builds and hosts websites for hockey associations and leagues (for example hockey-feminin.ca, hockeymro.ca). This policy explains what personal information these sites collect, why, how long we keep it and how to exercise your rights. It applies to every site whose footer links here.
Each association decides what is on its site (news, pages, photos, documents). Game Data provides the software, the hosting and technical support.
Person in charge of the protection of personal information
Glen Maxheleau — Person in charge of the protection of personal information
Email: privacy@gamedata.ca
Address: Solutions Game Data inc., 53 Vivaldi Street, Saint-Constant, Quebec J5A 2M2, Canada
What we collect, and why
| Who | What | Why | How long |
|---|---|---|---|
| Visitors | IP address and browser type, time of the visit (technical log and session) | Run the site and protect it (security, spam) | Session: 2 hours. Server logs: 30 days |
| Visitors who accept visit measurement | Pages viewed, duration, device type, approximate country and region, where the visit came from, through Google Analytics | Know which pages are useful and improve the sites | 14 months, then deleted by Google |
| People who write through the contact form | First name, last name, email, message | Pass your message on to the association | The message is emailed to the association and not kept on the site. The association keeps it under its own rules |
| Site administrators (association volunteers and staff) | First name, last name, email, password (encrypted), role, two-factor authentication, actions taken in the admin (e.g. "news published") | Give access to the admin, secure it, provide technical support | As long as the account exists. Activity notices sent to Game Data: 24 months |
We do not sell personal information. We do no targeted advertising and make no automated decisions about you. The sites ask for no sensitive information.
Visit measurement (Google Analytics)
On sites where it is turned on, visit measurement starts only after you click "Accept" in the cookie banner. If you click "Refuse", nothing is sent to Google. You can change your mind at any time with the "Manage cookies" link at the bottom of every page.
We set Google Analytics to collect as little as possible: no Google Signals, no ad personalisation, no precise location (city) or detailed device data, 14 months retention. People logged in to the admin are never measured.
Google LLC processes this data outside Québec (including in the United States). Before using it, we carried out a privacy impact assessment and concluded the data is adequately protected, given its low sensitivity, the consent asked for and Google's contractual commitments. See also the Cookie Policy.
Facebook and Instagram
An association can link its organisation's Facebook Page or Instagram account to its site, to show its latest posts on the site or to also publish a news item on Facebook. It does so itself with the "Connect Facebook" button in its site's admin.
We then receive from Meta only: the Page or account name and ID, an access key for that Page, and the Page's public posts. We receive no information about the people who like or comment on the Page. The key is stored encrypted on the site's server, and the posts shown are cached for a few hours at most. Nothing is used for any other purpose.
Deleting Facebook and Instagram data
To delete this data, the association can:
- click "Disconnect Facebook" in its site's admin: the key and cached posts are deleted at once; or
- remove the "Game Data Sites" app from the Page in Facebook's settings (Settings › Business integrations); or
- write to privacy@gamedata.ca naming the site and the Page: we delete the data within 30 days and confirm by email.
Who else receives information
- The association that owns the site: contact form messages, and its admin accounts.
- Our hosting provider, which runs the sites' server (StormWeb, a virtual private server in Canada, in Victoria, British Columbia). The sites' information is therefore stored outside Québec, in Canada; our privacy impact assessment concludes it is adequately protected there.
- Google (visit measurement, only after "Accept") and Meta (only if the association links its Page).
- Order emails are sent through a service hosted in the European Union; its delivery records are kept 30 days.
- Authorities, only where the law requires it.
Security
Encrypted connections (HTTPS), encrypted passwords, two-factor authentication for Game Data accounts, limited login attempts, regular updates, server access limited to Game Data, backups deleted after 30 days. If a confidentiality incident presents a risk of serious injury, we notify the Commission d'accès à l'information and the people concerned.
Your rights
You can ask to access your information, have it corrected or deleted, withdraw your consent, receive your information in a common format, or learn how it was used. Write to privacy@gamedata.ca. We answer within 30 days. For a message sent to an association, we can also put you in touch with it.
If you are not satisfied with our answer, you can contact the Commission d'accès à l'information du Québec.
Changes
We update this policy when the sites change. The date at the top shows the latest version.