Privacy Policy

1. Browsing takes no account and collects nothing

You can search rinks and pools, filter sessions, and use the map without signing in and without us collecting anything about you. If you save a rink while signed out, that list is stored only in your own browser, not on our servers.

2. What we collect if you make an account

An account is only needed to reserve a spot. If you create one, we collect:

• Your email address, and your name if you use Google Sign-In
• The name you put on a booking, plus any notes you add
• Which rinks and sessions you save or book

That is the whole list. We never ask for your phone number. We do not run any advertising or analytics trackers, and we do not build a profile of what you browse, which filters you use, or what device you’re on.

3. We do not sell your information

We do not sell your personal information, and we do not share it with advertisers, data brokers, or analytics partners. We have no such partners.

The only companies that touch your data are the ones needed to run the app:

• Supabase — hosts our database and handles sign-in, so it stores your account and booking records on our behalf.
• Vercel — hosts the site. Like any web host, its server logs briefly record technical request data such as IP addresses.
• Google — only if you choose Google Sign-In, and only to confirm it’s you.

These providers process data to deliver the service and are not permitted to use it for their own marketing. We may also disclose information if the law actually requires it. If we ever want to use your data in a way this policy doesn’t already describe, we will update this policy and ask you first.

4. Emails we send

We send the sign-in link you request and messages about a booking you made. We don’t send marketing email.

5. Your choices and rights

You can ask us what we hold about you, correct it, or delete your account and its data. Deleting your account removes your profile, saved rinks, and bookings.

• California residents: under the CCPA/CPRA you have the right to know what we collect and to opt out of the sale or sharing of personal information. We don’t sell or share it, so there is nothing to opt out of.
• Canadian residents (including Alberta): under PIPEDA you’re entitled to know what personal information we hold and to withdraw consent for its use, subject to legal restrictions.
• EU/UK residents: under the GDPR you have rights to access, rectify, erase, and object to processing of your personal data.

To make any of these requests, use our contact form. You don’t need to be signed in, and we’ll reply within 30 days.

6. Data retention and security

We keep your information while your account is active. We use industry-standard measures to protect it, but no method of storage or transmission is completely secure.

7. Children

Open Rec is not directed at children under 16, and we do not knowingly collect personal information from them.

8. Changes to this policy

If our practices change we’ll update this page and change the date at the top. For anything that would newly involve sharing or selling your personal information, we’ll ask for your consent rather than relying on continued use.

9. Contact

Questions about this policy, or want your data deleted or sent to you? Use our contact form — no account required.