Document version: 2026-08-05 Application: Hockeylog
The data controller is Josef Konárek, company ID (IČO) 14016958, Rajhradská 3058/42, Horní Počernice, 193 00 Prague 9, Czech Republic, trading under the FrozenLabs brand. For anything concerning personal data, contact podpora@hockeylog.cz.
The app stores data on your device and syncs it to the server as you go, so it survives a change of phone and is available from more than one device. With the one exception noted below, what is in the app is also on the server.
### Account data
| Data | Why |
|---|---|
| Email address | signing in and password recovery |
| Password, stored one-way encrypted | verifying your sign-in |
| Account creation and last sign-in date | running and securing the account |
| Record of consents given, with document version and date | proving what you agreed to, and when |
| Guardian's email address, if you provide one | evidencing consent for a player under 15 |
| App settings — language, theme, date format | keeping settings consistent across devices |
### What you enter
| Record | What it holds |
|---|---|
| Player | name, date of birth, position, jersey number |
| Club | name |
| Season | label, start and end |
| Game | date, opponent, venue, goals, assists, penalty minutes, score |
| Practice | date, start and end time, type, attendance |
| Expense | name, amount, currency, date, category |
| Custom categories | names of practice types and expense categories |
When you delete a record, a deletion marker stays on the server — the record identifier and a timestamp — so the deletion reaches your other devices. It holds none of the original content.
We collect no analytics, do not track what you do in the app, and use no third-party advertising or measurement tools.
### What we do not send to the server
Payment details. Subscriptions are paid through the App Store or Google Play and no card number or anything comparable ever reaches us — see Subscriptions and payments.
| Purpose | Legal basis |
|---|---|
| Running the account, signing in, syncing what you enter | performance of a contract — the app cannot be provided otherwise |
| Keeping records of consent | compliance with a legal obligation to demonstrate consent was given |
| Data about a player under 15 | consent of the legal guardian (GDPR Art. 8) |
We use suppliers to run the app. They act as our processors and may handle the data only on our instructions:
| Processor | For what | Where |
|---|---|---|
| Supabase | database and accounts | Frankfurt, Germany, EU |
| Resend | sending verification emails | sent from Ireland (EU), operational logs in the US |
Your account and everything you record in the app are stored in the European Union and do not leave it.
Email delivery is the exception. Resend sends messages from servers in Ireland, but the operational logs about them — the recipient's email address, the time of sending and whether it was delivered — are processed in the United States. This transfer relies on Resend's certification under the EU-US Data Privacy Framework and on the standard contractual clauses in its data processing agreement. The content of your records about players, games or expenses never appears in an email.
We do not sell, rent or share your data for marketing.
Subscriptions are sold by Apple and Google, not by us. They process the payment under their own policies and act as independent controllers in doing so; their policies are part of the App Store and Google Play terms.
All we learn is whether a subscription is active, plus a purchase identifier. We never receive and cannot access your card number, billing address or cardholder name.
The app records hockey performance, which is often a child's. The child's details you enter are stored on the server — chiefly name, date of birth, club and the game and practice records.
An account may only be created by someone 18 or older, or by a player's legal guardian. For children under 15, the law requires the guardian's consent (GDPR Art. 8; the Czech threshold is 15 rather than the default 16). You confirm this at sign-up and we keep a record of it.
Enter only as much about a child as you actually need. Neither date of birth nor jersey number is required to use the app.
We keep the account and everything attached to it for as long as you keep the account. You can delete it yourself at any time in Settings → Account; you do not need to ask us.
Deleting the account irreversibly erases the email, the password and every attached record — players, games, practices, expenses, consents and deletion markers. Data held on the device is removed by uninstalling the app.
Under the GDPR you have the right of access to your data, and to its rectification, erasure, restriction of processing and portability, as well as the right to object. Exercise any of them at podpora@hockeylog.cz.
If you have given consent to processing a child's data, you may withdraw it at any time; withdrawal does not affect the lawfulness of processing before it.
If you believe we are handling your data badly, you may complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.
The connection between the app and the server is encrypted. Access to data on the server is enforced in the database itself — an account can read only its own rows, and that cannot be bypassed from the app. Passwords are stored one-way encrypted, so not even we can read them.
On any material change we raise the document version and ask for consent again. Earlier versions and the date you consented remain on record.
Josef Konárek, company ID (IČO) 14016958 Rajhradská 3058/42, Horní Počernice, 193 00 Prague 9, Czech Republic podpora@hockeylog.cz