Last updated September 20, 2026

Privacy policy

CreaseCallHockey uses personal information only to operate its local-market goalie-matching service, route requests and applications to the selected city, operate protected payment-readiness and settlement controls, prevent abuse, and communicate about requested games or roster opportunities.

Information we collect

Booking customers provide a team or skate name, organizer name, email, phone number, rink, game date and skate time, level, game type, optional locker-room information, and optional notes. Goalie applicants provide their selected market, contact details, experience, home-area rink, travel range, availability, current USA Hockey confirmation number and active-registration attestation, communication consent, a separate optional SMS consent choice, and optional background information. SMS evidence includes the disclosure version, source and timestamp; the checkbox is never preselected. For inbound SMS, CreaseCallHockey records the provider message identifier, normalized sender number, command classification and outcome, associated request and offer round when applicable, and processing timestamps. It does not need to retain an unrelated conversation to process an IN, STOP, START or HELP command. Confirmation numbers are never placed on public roster pages. Email-verification records store an expiration time and the time verification was completed; the private signed link is not stored in plaintext. Legacy Registry verification records store the season, confirmation number, verification result, and a one-way hash of the matched member name; they do not store a USA Hockey receipt, birth date, or ZIP code. Prospective sponsors provide organization, campaign, budget, destination-link, and contact details.

Private links and operational records

CreaseCallHockey creates private booking-management, goalie-claim, checkout, and Square payout-connection links. The secret portion is shown in the browser URL fragment and is normally stored only as a one-way hash. A queued Square connection email temporarily retains an encrypted copy solely so an uncertain delivery can retry the same link; that encrypted copy is deleted after accepted email delivery, connection, cancellation, or expiration. CreaseCallHockey records booking and assignment changes or cancellations, their timing relative to puck drop, the claim terms offered and accepted, whether acceptance came from a private link or a registered SMS reply, replacement-offer round and delivery status, applicable payout target, and owner-reviewed $10 fee-request status. Duplicate provider message identifiers are used to prevent a retried webhook from creating another claim or notification. The $10 request is never an automatic charge.

Referral information

To create and operate referral rewards, CreaseCallHockey collects an opaque referral identifier, the referrer's chosen email address or normalized mobile number, delivery preference, consent record, linked application and reward references, qualification status, and later redemption status. Referral links contain no name, email address, phone number, contacts, or application details. CreaseCallHockey does not disclose either participant's contact information or application details to the other.

Member accounts, ratings and messages

Member accounts use an email address and password. We verify new email addresses and password-recovery requests using short-lived, single-use links. Passwords are stored only as salted, one-way hashes; recovery links and session tokens are also stored as hashes. Website sessions use an essential secure, HTTP-only cookie. If you choose Keep me signed in, your session can last up to 30 days and the native app stores its token in the device’s protected credential storage. Otherwise, sessions last up to 12 hours, the website uses a browser-session cookie, and the native app keeps the token only in memory. Signing out removes the current session; changing or resetting your password revokes previous sessions. Older app versions may use a short-lived email code until you set a password. Sign-in attempts are limited using hashed identifiers. Your verified email links you to your own bookings and goalie application. We store rink addresses, attendance confirmations, completed-skate ratings, optional display names and favorite rinks. Private skate messages are available to the confirmed participants and the authorized CreaseCallHockey owner. The owner can review current and past conversations for customer support, safety and dispute handling; owner access to a conversation is recorded. Messages can be reported, hidden for review and blocked. Your chosen username, hockey number, market, aggregate goalie ratings, accepted-skate count and rating trend appear on leaderboards only when you explicitly opt in; you can opt out at any time.

If you enable native device alerts, we store a device push token linked to your current signed-in session. Expo and Apple or Google process that token to deliver generic local-skate notifications. Offer reminders are limited to eligible in-market goalies and expire at puck drop; signing out or disabling device alerts stops new sends. Alert delivery records track provider acceptance, which does not confirm that a notification was read.

Use Profile → Delete account in the app or member website, type DELETE and confirm. Your profile and personal content are removed automatically, your sessions are closed, and new goalie offers stop. No owner approval is required. If an unfinished skate, payment or dispute still needs limited contact or settlement information, that information is retained until the obligation is resolved and then removed automatically. Payment, dispute, audit and active safety-restriction records are retained for accounting, fraud prevention, unresolved disputes and legal obligations. For existing Square transactions, encrypted payment-provider connection credentials are retained only for financial servicing, such as refunds and disputes; they cannot be used for new bookings through a deleted account. Contact support@creasecallhockey.com for privacy or safety requests.

Payments

During new listing creation, Square's secure card fields collect payment details. With your express consent, Square saves the card for that request; CreaseCallHockey retains an encrypted card reference, provider customer identifiers, the agreed amount, consent version and time, and booking information. CreaseCallHockey never receives or stores a full card number or security code. A saved card is not a completed charge. Authorization and collection for new listings require the assigned goalie’s verified arrival. Abandoned or canceled card setup is expired and queued for card disabling. Existing bookings may use the previously offered Square checkout and enabled wallet methods. Authorization, settlement, refund and reconciliation records are retained as needed to service the booking.

Goalie payout connection

Approved goalie applicants automatically receive a separate private, single-use connection link at the email address on their application and connect their own Square seller account through Square's Production OAuth page. CreaseCallHockey stores only the provider identifiers and encrypted tokens needed for the authorized flow, never a Square password or bank-account number.

How information is used

• Match game requests with suitable local goalies.
• Contact customers and goalies about a specific request or opportunity.
• When checkout is available, authorize, capture, reconcile, cancel, or refund booking payments under the disclosed checkout terms.
• Maintain the protected owner booking board and payment-readiness records.
• Operate private booking changes, cancellation review, goalie releases, and replacement-offer rounds.
• Process an opted-in goalie's IN reply, resolve simultaneous claims, stop reminders after a winner is recorded, and deliver separate roster-wide and winner-only notices.
• Review and, when appropriate, verify goalie roster eligibility.
• Verify goalie email ownership and automatically activate an eligible roster registration.
• Automatically deliver private payout-account setup links to goalie applicants who selected Square.
• Attribute qualifying referrals, issue and redeem one-time discounts, deliver requested reward notices, and detect duplicate, self, fictitious, or automated referrals.
• Review local sponsorship inquiries and operate approved sponsor placements.
• Send the owner minimal operational alerts about new applications, requests, booking changes, and short-notice goalie releases.
• Protect the service from fraud, misuse, and security threats.

Sharing

CreaseCallHockey shares information only as needed with the matched customer or goalie, Square and other service providers that operate the site, transactional email providers, Twilio for opted-in SMS notices, or when required by law. Providers receive only the contact information and message content needed for delivery. Owner-alert messages use only the request reference, market, event type, and limited operational timing; they do not include locker-room information, private notes, or payment credentials. Initial goalie-offer messages include rink and skate details but not organizer contact information or private notes. A roster-wide claimed notice may identify the winning goalie by first name and include the rink and scheduled time, but it does not include the team or skate name, locker room, organizer contact information, or private notes. The winning goalie receives skate assignment and rink details and access to in-app skate messages. Manager email addresses and phone numbers are reserved for owner administration. Private contact details and free-text responses remain in the protected owner console. CreaseCallHockey does not sell personal information.

SMS opt-in protection. The sharing described above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Local sponsorship measurement

Clearly labeled local sponsor placements use CreaseCallHockey's own first-party systems to count aggregate page impressions and outbound sponsor-link clicks. CreaseCallHockey does not give sponsors booking contact details or goalie application information. It does not use third-party advertising pixels or cross-site advertising cookies for these placements.

Website storage and cookies

The installable website may cache public CreaseCallHockey pages and visual assets on a device so the service opens quickly. A device-only preference remembers when the install suggestion is dismissed. Essential hosting and private owner sign-in technology may use security or session data. CreaseCallHockey does not use this device storage to build a cross-site advertising profile.

Retention and choices

Records are kept only as long as reasonably needed for operations, accounting, disputes, safety, and legal obligations. This includes accepted assignment records and the minimal inbound-message evidence needed to establish which eligible claim was recorded first and to prevent duplicate processing. Legacy WhatsApp consent, opt-out, inbound-command, and delivery-status evidence may be retained for compliance and audit purposes, but it is not used to send new messages. Goalies may opt out of SMS at any time by replying STOP; CreaseCallHockey records the opt-out immediately and suppresses later texts. Reply START to restore messages only when a current consent record exists, or HELP for support information. Email remains available when SMS is declined or stopped. To request access, correction, or deletion, submit the relevant site form with “PRIVACY REQUEST” in the notes and CreaseCallHockey will contact you securely.

Age

Goalie applicants must be at least 18 years old. CreaseCallHockey is not designed to collect roster applications from children.