Privacy Policy

Last updated: September 30, 2026

Top Cheddah is built by a hockey parent, for hockey parents, around one rule: public data never contains a child's name. This policy covers the iPhone and iPad app, the Android app and this website. Our Terms of Use cover the rules for using them.

What we collect

• Your application — the name and email address you apply with, whether you're a parent or a coach, what you'll use Top Cheddah on, the clubs you pick, how you heard about us, your note, the link you arrived from (a rink QR code, for example), and which version of the Terms of Use you accepted and when. We use it to review your application and to send your welcome email.
• Your email address — it is your account. We use it to sign you in, with a password you choose or a one-time code, and as an accountability record. We don't sell it, share it, or send marketing to it.
• Your password, if you set one — stored by our authentication provider as a salted hash. We never see it and cannot recover it; a forgotten password is replaced by signing in with a one-time code and choosing a new one.
• A display name you choose — used to greet you in the app. First name is plenty; it can be anything.
• Your follows and player labels — the teams you follow and any jersey-number labels you create. Labels are private to your account: never shown to any other user, never part of any public record.
• Your Terms acceptance — the version of the Terms of Use you accepted in the app, and when.
• Your phone and app details — both apps tell our servers which app version and build you're on and your phone's model and operating-system version: the iPhone app reports its model and iOS version (an iPhone 16 Pro on iOS 27, for example). The Android app also reports its screen size, text size, chip, memory and performance class; the iPhone app doesn't send those. On this website, your browser's user agent is sent instead. We use them to keep Top Cheddah running smoothly on the phones families actually use and to decide what to test and speed up. Only the operator sees them; they're kept with your sign-in session and removed when you sign out or delete your account.
• Reports you send — when you use Report a problem, we receive the kind of problem you pick, anything you write, your app version and build, and the screen and the game or team you reported from; these stay with the report. Alongside them, the report carries a snapshot — device model and OS (on this website, your browser's user agent instead), feed and live-data times, network state, and the followed-team list — that's deleted after 90 days. A report never includes your email address, player names you've added, or practice calendar links.
• Screenshots, only if you choose — on iPhone and Android you can attach a screenshot to a report. It's off unless you turn it on, and you see it before it's sent.
• Your feedback — Feedback has two choices. "Something's wrong" sends a report, as above. "I have an idea" sends what you write, with the same app version and screen details. Settings › Your feedback lists what you've sent and where each one stands (Received, Looking into it, Done); only your account and the operator can see that list.
• A team logo, only if you choose — with "Wrong team logo" you name the team, and you can add a note and an image of the right logo, picked from your photos or files. The image is redrawn before it's sent, on your phone or in your browser, so no location, camera or date details go with it. If it checks out, we may use it for that team's crest in the app.
• Score sheet photos, only if you choose — in the iPhone and Android apps, when a game's log is incomplete, you can send a photo of the official score sheet. Camera or photo library: you pick one photo, and the camera opens only when you tap Take Photo. The photo is redrawn on your phone before it's sent, so no location, camera or date details go with it. A score sheet prints players' names, so it's kept privately for the operator to review against that game's record, and it's never published.
• Team notifications, only if you turn them on — when you allow notifications in the iPhone or Android app, it sends us that phone's notification token: a code, issued by the notification service built into your phone, that lets us send a notification to that phone and nothing else. It carries no name and no location. With it goes whether the phone is an iPhone or Android, the app build, and your time zone, so notifications don't arrive overnight. We also keep your notification choices (final scores, score changes, schedule changes, starting soon). The token is deleted when you sign out or delete your account, and automatically if the phone isn't seen for 60 days. On iPhone, a live game card on the Lock Screen gets a token of its own, deleted when the card ends.

Private roster names

Some leagues publish rosters that include players' names; Elite 9 does, through vaHockey. When a league publishes one, we keep only each player's first name, last name, jersey number and position, in a private table that the apps, this website and our public data files cannot read. Only Top Cheddah's operator account can see those names, to check that jersey numbers are matched correctly. Everyone else sees jersey numbers.

Share links

Share links from the app include a random code that belongs to your account. It contains no name or email. We use it to count referrals, approvals and sign-ins; only Top Cheddah staff can see it. Deleting your account deletes its code and links.

What we don't collect

• No advertising identifiers, no third-party trackers, no analytics brokers.
• No location tracking and no messaging. No photos except the ones you choose to send: a report screenshot, a team logo or a score sheet. The apps never look through your photo library; you pick each photo yourself.
• No accounts for children — Top Cheddah is for adults 18 and older: parents, guardians and coaches.

Where the hockey data comes from

Schedules, scores and statistics come from the leagues' public records: GameSheet for the Eastern Hockey Federation, the Bay State Hockey League, the South Shore Conference, the New England Girls Hockey League, the Premier Hockey League of New England, MYCGL, the South Coast Hockey League, the NH Granite State League, MEAHA (Maine), VSAHA (Vermont), the Connecticut Hockey Conference and the Mountain Valley Hockey League; vaHockey for Elite 9; and Sprocket Sports for Bay State U6 and U8C. Top Cheddah isn't affiliated with any of them. Player-level information in public Top Cheddah data is limited to jersey numbers. Where leagues publish more than that, we deliberately display less.

How your data is stored

Account data lives in our database with row-level security: your private rows are readable by your account alone. Reports are readable only by the operator. Screenshots, logo images and score sheet photos go to private storage that your account can add to but cannot read back; only the operator can open them, and views each screenshot through a link that expires after 10 minutes. Notification tokens are readable by no account, yours included; the apps can only add or remove this phone's. Emails sent to our support address are archived encrypted, with access restricted to the operator.

How long we keep it

• Screenshots and logo images are deleted after 30 days. A logo we accept is kept as that team's crest artwork.
• Score sheet photos are deleted after 90 days. A record that you sent one for that game, and when, stays until the account is deleted.
• Notification tokens are deleted when you sign out or delete your account, or after 60 days unseen. A copy of each notification we send (the team, the game and its message) is deleted after 30 days.
• The detailed app and device snapshot sent with a report is deleted after 90 days: device model and OS, feed and live-data times, network state, and the followed-team list inside the snapshot.
• A report's type, message, app version and build, the screen, and the game or team it was about are kept until the account is deleted.
• Applications: kept after review, so we can recognize a repeat application. If an application is declined or an account is removed by us, we keep the email address and the decision for that reason. Deleting your own account through Settings is different: your email address stays approved on the invite list so you can sign in again later.
• Everything else: until you delete your account.

Deleting your account

Delete your account any time in Settings, in the app or on this website. That deletes your account, follows, labels, Terms record and reports, including any screenshots. Your approved email address stays on the invite list so you can sign in again later; to be taken off it too, email topcheddahservices@gmail.com from that address. Deleting your account also deletes your feedback, logo images, score sheet photos, notification settings and every phone's notification token.

Contact

Questions about this policy: topcheddahservices@gmail.com.