Privacy
Rink Hopper is built to know as little about you as it can and still be useful. This page lists everything it keeps, everyone else who handles any of it, and for how long. Nothing about you is ever sold, and nothing about you is ever sent to a rink.
Without an account
- Where you skate from. When you tell the board, your choice is kept in a cookie named
rh_whereand in this browser's local storage: a point rounded to about a kilometre, how far you will drive, what you skate and the town's name. Only Rink Hopper reads it, to draw your board, and it is not stored on our side. It lasts a year, or until you press Forget my location. - Use my location. Your browser asks you first. The point is rounded to about a kilometre before it leaves the page.
- A town or ZIP code you type. It is looked up on this site against the US Census Bureau's list of places. Nothing you type goes to anyone else.
- Saved pages. So the board works in a rink parking lot with no signal, your browser keeps copies of the last few pages you opened. They stay on your device. Changing where you skate from, or Forget my location, clears them.
- The counters. When a rink page or a session is viewed, or someone follows a link out to a rink, the site counts it. Each count is stored with the rink, the session, the day and a visitor code made from a key that changes every day and is never saved, so one visitor counts once a day and cannot be recognised the next. No IP address, account or cookie is stored with it. If your browser sends Global Privacy Control or Do Not Track, you are counted with no visitor code at all. Rinks on the paid plan see totals, never people. Counts are deleted after 400 days.
- The weekly email. If you put your address in the email box on a board, the site keeps your email address, the region, what you skate (from your board's choice, or all three), a random code that the confirm and stop links are made from, and when you signed up, confirmed and stopped. It goes to Rink Hopper's own server, which writes the email. Nothing weekly is sent until you confirm. The stop link ends it: the address stays on the list marked stopped, so it is never mailed again, until you sign up again. To have it removed entirely, write to us.
- A rink claim. If you claim a rink, the site keeps it with your account: the rink, your name, your role, your work email and your phone number. The work email and phone number are removed once the claim is approved or declined. A log of each step keeps scrambled forms of your account's address and your internet address, never the clear ones, for two years. Rink Hopper's own server keeps the claim with the rink's record.
- The contact form. Your note, your email and your name if you give one are sent to our inbox by email and are not kept on the site. We use your email only to answer you, and the note stays in our inbox for as long as the conversation needs it.
With an account
An account is yours if you sign in. It keeps:
- Your email address, to send sign-in links. There is no password, ever.
- The name you choose, if you choose one. It shows on check-ins only if you turn that on, never on a session for women, and never to someone you have blocked.
- Where you skate from, how far you will drive, what you skate and when you are free.
- The sessions you said you are going to.
- The rinks you help run. A rink's invite to your address is kept until it is used, or 30 days after its 7 days run out, and goes with your account.
A sign-in link is stored only as a scrambled code and stops working after 15 minutes or one use. Staying signed in lasts 90 days from your last visit. Everything lasts until you delete your account, which removes every row at once. You can ask for a copy of it, sent by email to your account's address.
Who else handles it
| Who | From | What for, and what they see | How long |
|---|---|---|---|
| Cloudflare | Now | Hosts the site and its database, and sees every request, your IP address included, to serve it. Runs Turnstile, the check that keeps bots off our forms, carries what you send through the contact form to our inbox, sends sign-in links and account copies to your email, and runs Web Analytics, which counts visits without cookies. | Request logs: 3 days. Database restore points: 30 days. Turnstile and Web Analytics: under Cloudflare's own policy. |
| Google Fonts | Now | Every page loads its typefaces from Google, which sees your IP address and browser when it does. | Under Google's own policy. |
| Rink Hopper's own server | Now for the email list and rink claims. Alerts when accounts open | Writes the weekly email, checks rink claims, and will match alerts and send mail. It is not reachable from the internet. It receives the email list (your address, region and what you skate) and each rink claim as it is made, and, when accounts open, only what alerts need: your email, a push address, where you skate from, how far, what you skate and when you are free. Encrypted on disk. It also keeps a nightly copy of the database. | Your rows go on its next check after you delete your account. Nightly copies: 30 days. |
| Resend | When the email list opens | Sends the weekly email and alerts. Gets your email address and the message. | Delivery records under Resend's own policy. |
| Stripe | When paid plans start | Takes payment for the paid plans on Stripe's own pages. Gets your name, email and payment details. Rink Hopper never sees a card or bank number and keeps only your Stripe customer number and when your plan ends. | Stripe keeps payment records as long as financial law requires. Ours go with your account. |
| Google Analytics and AdSense | Not on yet | Analytics would count pages and visits. AdSense would show the one ad on a page. Neither loads for a browser sending Global Privacy Control or Do Not Track. Outside the United States, AdSense asks before showing personalised ads. | Analytics: set to the shortest Google offers, 2 months. AdSense: under Google's own policy. |
| Microsoft Clarity | Not on yet | Would show how people use the pages, so the board can be made easier. Does not load for Global Privacy Control or Do Not Track. | Under Microsoft's own policy. |
| Ko-fi | When the donation page opens | Takes a donation if you choose to give one, on Ko-fi's own site, with whatever you choose to share with it. | Under Ko-fi's own policy. Rink Hopper keeps nothing of it outside Ko-fi. |
Signals we honour
If your browser sends Global Privacy Control or Do Not Track, no analytics loads and no ad is personalised. You do not have to ask.
Age
Accounts are for people 16 and over. Nothing on the site asks your age or your birthday.
Your choices
- Forget my location, on any board, clears the cookie, the local copy and the saved pages.
- The stop link, in the confirmation email and in every weekly email, ends the weekly email.
- Deleting your account removes it everywhere it is kept, the operator's server included.
- Anything else, or a question: Write to us.
Changes
When this page changes, the date at the top changes too.