Privacy
Playing Brudvig Hockey needs no account and no email, the Challenge Cup included. When you play the cup, our server keeps your cups and stats under a random key stored in your browser: no name, no email, no password. When a cup ends you can put a name in the record books, and that name and that run's stats are public. Profiles made before (and advertisers') also have a username, an email for password resets and a password hash.
- Account
- None needed
- Challenge Cup
- Cups and stats under a random key in your browser
- Public
- Only the name you put in the record books, with that run's stats
- Cookies
- None
- Ads
- Only still images on the rink boards. No ad networks, no tracking
- Chat, purchases
- None
- Sold or shared
- Never
- Delete
- Any time, from the profile screen
What we store
| What | Why | How long |
|---|---|---|
| Challenge Cup key | A random token in your browser that keeps your cups and stats together. No name, email or password | Until you clear the site's data (a key with no cups is deleted after 30 days) |
| Record books name | The name you type when a cup ends. Everyone sees it, with that run's stats | Until you change it, or ask us to take it out |
| Cheat codes | Which cheat codes you've unlocked, and which are switched on | Until you delete the profile (or clear the site's data) |
| Username | Profiles made before, and advertisers: so you can log in | Until you delete the profile |
| To send a password reset link when you ask for one. Nothing else, unless you tick the news box | Until you delete the profile | |
| Password | Only as a salted PBKDF2 hash. Nobody can read the password itself, including us | Until you delete the profile |
| Stats | Challenge Cup brackets, results, career stats and mini game bests | Until you delete the profile |
| News opt-in | "Send me occasional Brudvig Hockey news": yes or no, and when you set it. It starts unticked | Until you delete the profile |
| Login sessions | A random token in your browser. We keep only a hash of it | 180 days unused, or until you log out |
| Reset links | A link that works once. We keep only a hash of it | 30 minutes |
| Network address | A counter, to slow down password guessing, reset spam and new cup keys | About 15 minutes |
What we never ask for
Real names (the record books take any name you like), ages, birthdays, photos, phone numbers, addresses, location, contacts or payment details. There is nothing to buy. There's no chat, so there are no messages to keep. Online opponents see a skater from the team roster, not your username.
Who else sees it
- Nobody buys it. We don't sell, rent or trade any of it, and there are no ad networks on the site.
- Cloudflare runs the site and the database the profiles live in. Its Web Analytics counts page views without cookies.
- Play time. The game counts how long games last: a random number for the visit and for each game, the kind of game, the seconds played, how it ended and whether it was on a touch screen. No name, no address, no cookie. It's how we know if the game is any fun.
- Visits. Each page counts the visit: the same random number for the visit (kept in the tab, gone when it closes), the page, the site or app that linked here (only its name, like instagram.com) and any ref or utm tag in the link, phone or not, the screen width, the country and US state Cloudflare puts on the connection, which buttons and links are tapped, how long the page was open, a random number kept in your browser (so a second visit counts as a return, not a new person), and for each game the teams, the side, the arena, the score and the game settings. No name, no IP address, no cookie. It's how we know where players come from. Visits are deleted after 120 days.
- Resend delivers password reset emails. It gets the address and the email to deliver it, nothing else.
Board ads
Businesses can rent the ad panels on the rink boards (advertise). To pick which ads a game shows, our server looks at the country and US state Cloudflare puts on the connection, and doesn't keep them. The game counts board views per ad per day (an ad on a panel for 20 seconds) with nothing about who saw it. No ad networks, no cookies, no tracking pixels: the ads are plain images from our own server.
Advertisers: we keep the ad, its plan, area and link, your profile's username and email, and what Stripe tells us about your payments (amounts, dates, status). Card details go to Stripe, never to us.
Questions, or delete it for me
Email team@brudvighockey.com from the address on the profile and we'll answer, or delete the profile for you if you can't log in. Password resets and any news we send come from that same address.
On your device
The game keeps settings, controls, the last teams and arena you picked, mini game bests, the Challenge Cup key and the last name you put in the record books in your browser's storage. Clearing the site's data removes all of it, and with the key gone nobody can link the cups to you. None of it is a cookie.
Your choices
- Change your email or username, or switch the news on or off, on the profile screen (Challenge Cup, then your name).
- Delete your profile on the same screen. It takes your password and DELETE typed out, then removes the profile, the email, every cup and every stat. There's no undo, and nothing is kept afterwards.
- Forgot your password? Tap Forgot password? on the log in screen. We send the same answer whether or not a profile matches, so nobody can use it to check who plays.
- Your name in the record books: change it from Cup history, or email us the name and the date and we'll take it out.
Who it's for
Brudvig Hockey is a regular game for a general audience. It isn't made for children.
If this page changes, the date at the top changes with it.
Questions
Does Brudvig Hockey collect my email?
Not to play, and not for the Challenge Cup. Only profiles made before and advertisers have one: it is used for password resets (and receipts), and for occasional news only if you tick that box.
Does Brudvig Hockey use cookies?
No. Settings, the Challenge Cup key and any login token are kept in your browser's storage, and the page-view analytics sets no cookies.
How do I delete my data?
Clear the site's data in your browser and the Challenge Cup key goes with it. A profile made before: on its profile screen, enter your password and type DELETE, and the profile, its email and every cup and stat are removed for good. To take a name out of the record books, email us.
Do you sell or share data?
No. Cloudflare hosts the site and Resend delivers reset emails. Nobody else gets anything.