Privacy policy

Who runs this site

Hockey Skills & Drills (hockey.derekbraid.com) is a free drill library run by Derek Braid in Ontario, Canada. Questions: derekbraid@mail.grokbot.com.

You can use the site without an account

Browsing drills and building a practice plan do not need an account. A plan you build without signing in stays in your browser's local storage. Share links contain the drill list, times, and plan title, but not your notes.

If you sign in

You can sign in with Google or, when it is turned on, with a sign-in link sent to your email. When you sign in we store:

• Your name, email address, and profile photo link from Google (or just your email address if you use an email link).
• The account link Google returns at sign-in, including its sign-in tokens. We do not use them to access anything else in your Google account.
• A session record and a secure sign-in cookie so you stay signed in, for up to 30 days.
• The practice plans you save: titles, drills, times, and notes. Saved plans are visible only to you.

Google user data

We ask Google only for your basic profile (name, email address, and profile photo) and use it only to sign you in and show who is signed in. We do not use it for ads, do not sell it, and do not share it with anyone except the service providers below that run the site. Hockey Skills & Drills' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Usage statistics

• Vercel Web Analytics counts page views in aggregate (pages, referring sites, country, device type). It sets no cookies.
• Our own event log counts actions like viewing a drill, adding a drill to a plan, saving, sharing, or printing a plan, and signing in. Each event has a random ID kept in your browser's local storage, and your account ID if you are signed in. We do not use cookies for this, and the log does not store your email, IP address, or browser details.

Security and abuse limits

To stop abuse, the site counts sign-in emails and plan changes. Those counters store a one-way hash of your IP address, email address, or account ID, not the value itself, and are cleared after about a day.

Cookies and browser storage

The only cookies are the ones needed for sign-in (session, security check, and return page). The site keeps your unsaved plan and the random analytics ID in your browser's local storage. Clearing your browser data removes them.

Who processes data for us

• Vercel hosts the site and runs the sign-in and plan features. Like any web host, it handles IP addresses to serve pages.
• Neon hosts the Postgres database that holds accounts, saved plans, and the event log.
• Google handles Google sign-in.
• Resend will send email sign-in links once email sign-in is turned on. It receives only your email address and the link.

These providers may store data outside Canada, including in the United States.

What we never do

No ads, no selling or renting your data, and no sharing it for marketing.

Delete your account

Sign in, open My plans, and tap Delete account and saved plans. That removes your profile, sign-in records, and every saved plan right away. Past usage events stay only as anonymous counts with your account ID removed. You can also email derekbraid@mail.grokbot.com to ask for a copy or deletion of your data.

Changes

If this policy changes, the new version will be posted here with a new effective date.