Privacy Policy
Effective July 31, 2026 · Updated August 6, 2026 · Icewright LLC, Pennsylvania, USA
Icewright is software for running an ice rink, made by Icewright LLC ("Icewright," "we," "us"). This policy explains what information the service handles, why, and what your choices are. It covers icewrightapp.com and everything served from it. We've written it in plain English on purpose; if anything is unclear, ask us.
The short version
We collect what the product needs to work and nothing else. We don't sell personal information, and we don't use advertising networks, analytics trackers, or tracking cookies. Free accounts see labeled sponsor cards — placed by us, counted only in aggregate, with no personal information involved (see "Sponsor cards" below). Your rink data belongs to you. Records you keep about other people — your staff, your customers, job applicants — are yours too: we store them on your behalf, show them only to you, and use them only to run the service. Payment cards are handled entirely by Stripe and never touch our servers. The Concussion App stores everything on your own device — we collect nothing from it.
Information you give us about yourself
When you create an account we store your email address, a hashed password (we never store or see the password itself), your optional display name and avatar, your plan level, and sign-in timestamps. If you subscribe to a paid plan, Stripe gives us a customer and subscription reference so we know your plan is active — your card number, billing address, and payment details stay with Stripe (see "Payments" below).
Registration is protected by Cloudflare Turnstile, an anti-bot check. Turnstile sees your IP address and browser signals to decide whether you're human; it does not track you across the site.
Your rink's operational data
Ice depth readings, maintenance logs, plant-room readings, bookings, supplies, leagues, competitions, reports, videos, and topographs are your operational records. They are visible to you and to teammates you invite to a rink, at the role you give them. We look at them only to operate the service, debug a problem you report, or as required by law. Community sharing is opt-in per render — nothing is public unless you share it.
Records you keep about other people
Several features store information about people who are not the account holder. For those records you are the business that collected them and you decide what happens to them; Icewright stores and processes them on your instructions, only to provide the service to you. We never use them for our own purposes, never combine them across customers, and never sell them.
Staff & HR records. The staff roster can hold employee names, roles, contact details, emergency contacts, hire dates, notes, credentials and their expiry dates, uploaded certificate and document files, schedules, safety-training assignments and completions, quiz attempts and scores, and annual review records including ratings and notes. HR records are visible only to the account owner — never to teammates, never to other rinks, never on any shared surface. Reminder emails about expiring credentials and due reviews go to the owner. If you email an employee their schedule or a quiz link, we send that email on your behalf. Employees who want their records corrected or deleted should ask their employer; we act on the owner's instruction, and deleting an employee removes their records.
Customers, members & waivers. The sales register and membership tools store the customer names, contact details, charges, and payment records you enter. When someone signs your liability waiver through a waiver link, we record the name they typed, the date and time, and their IP address, so you have evidence the waiver was actually signed.
Self-service requests. Public booking-request, league sign-up, and competition entry forms deliver the submitted name and contact details into your rink's inbox, where you approve or decline them.
Industry Jobs & the Contractors Network
Contractor listings. If you list yourself as a contractor you choose what your listing says: name, headline, bio, contact details, location and travel radius, availability, trades, machines, references, claimed credentials, and uploaded certificate and insurance files, plus an optional LinkedIn link. Listings are shown to rinks searching for coverage. Discreet mode hides your contact details until you approve a specific rink's request. Uploaded certificates are reviewed by a site administrator solely to mark a credential as sighted. "Hired" confirmations build your verified-hire count. You can edit or unlist at any time.
Job applications. Applying to a posted opening requires no account. The name, email, phone, optional LinkedIn URL, and note you submit go to the rink that posted the job, and exist only in that rink's applicant queue — Icewright takes no fee and keeps no separate copy. The posting rink is responsible for the applications it receives; if you want your application removed, contact us or the rink and it will be deleted.
The Gear Exchange
The Gear Exchange is a member marketplace. A listing you post — title, photos, price or auction terms, condition, description, and the city/state you enter — is visible to all signed-in members, so list only what you're comfortable with members seeing (mind what's in the background of your photos). Your display name appears as the seller.
Contact exchange. When a member clicks "I'm interested" on your listing, they see the email address on your account (and the phone number if you added one to the listing), and we email you their address — that's the entire point of the button, and it's mutual by design. On auctions, when bidding closes with a winner, the winner and seller are each emailed the other's contact info the same way.
Bids are visible to members viewing the listing — amount, your display name, and time — like a live auction room. A hidden reserve price is never shown to bidders, only whether it has been met.
The deal itself is yours. Icewright is not a party to any transaction, holds no money, takes no fee, and doesn't verify items or buyers — meet somewhere public and inspect before you pay. Deleting a listing removes it, its photos, and its bid and interest records; unsold listings expire on their own (60 days for standard listings, at the end date for auctions).
Community & Live Chat
Community features — shared renders, the gallery, comments, votes, subscriptions, events, the Grand Prix leaderboard — display the content you post under your display name and avatar, to other signed-in members. Post only what you're comfortable with other members seeing.
The Live Chat is bridged to Discord. Messages, attachments, your display name, and your avatar are relayed to a Discord channel we operate, and messages posted there flow back to the site. Anything you write in Live Chat is therefore also processed by Discord Inc. under Discord's own privacy policy. You can delete your own chat messages; deletion removes them from the bridge on both sides.
Sponsor cards
Free accounts (including complimentary promotional accounts) see clearly labeled sponsor cards from industry vendors; paid plans hide them. This is not ad-tech: we place each card ourselves, directly — there is no advertising network, no auction, no third-party script, no tracking cookie, and no personal targeting. Every free account sees the same sponsors.
To report a sponsor's results to them, we count how many times their card was shown and clicked — totals per sponsor, per placement, per month, nothing tied to any person. Sponsors never receive names, email addresses, or any other personal information from us. If you click a sponsor's card you leave for their website, and the link tells them only that the visit came from Icewright; from that point their own privacy policy applies.
The Concussion App
The Concussion App is deliberately different: everything stays on your own device. Baselines, assessments, symptom checks, and recovery records are stored locally, are never uploaded, and are never seen by us — there is nothing about them on our servers to collect, share, or lose. Roster import is strictly one-way: names, jersey numbers, and birth years flow from your rink's league or competition list down to your device; nothing flows back. You can delete any record on your device at any time.
Payments
All payments — subscriptions, connect packs, and any customer payments you take through payment links — are processed by Stripe. Card numbers and payment credentials go directly to Stripe and never touch Icewright's servers. We receive confirmation that a payment happened, the plan or item it was for, and references we need for receipts and account status. Icewright never sees or stores card numbers.
Share links
Some features generate no-login links on purpose: plant-room entry links, SDS & SOP binder links, quiz links, published schedules, waiver links, shared renders, and public sign-up pages. Anyone who has one of these links can see what it points to. Each is a long random token, they're off by default where a switch exists, and regenerating or disabling a link kills the old one immediately. Share them the way you'd share a key.
Cookies & local storage
We use one session cookie to keep you signed in, and your browser's local storage for interface preferences (like a dismissed tour or hidden card). That's it — no advertising cookies, no analytics trackers, no fingerprinting — sponsor cards set no cookies and load no third-party scripts. We use IP addresses transiently for rate limiting and abuse prevention.
We send transactional email: account verification, password resets, receipts, reminder digests (credentials, refreshers, reviews), request notifications, schedule publishes, quiz links, and Gear Exchange notices (interest in your listing, auction results) — delivered through our email provider solely to get the message to the recipient. We don't send marketing email, and there's no mailing list to be on.
Where your data lives, and how it's protected
Icewright runs on Render's cloud infrastructure in the United States. Connections use HTTPS/TLS. Passwords are stored only as salted hashes. Uploaded files live in per-account storage areas served only to their owner (or through a share link the owner created). Automatic backups of the database and uploads are kept on the server and rotated on a schedule; a deleted record can persist inside old backups until they rotate out. Administrative access is limited to designated admin accounts and used for support, safety review (like the contractor credential-sighting queue), and moderation of reported content.
Retention & deletion
Your data is kept while your account is active. Deleting a rink deletes its readings, bookings, leagues, competitions, and sales; deleting an employee or a document deletes that record and its files; deleting your account deletes all of it. Share links stop working the moment the thing they point to is gone. Backups containing deleted data expire on rotation. Some records may be retained where the law requires it (for example, payment records processed through Stripe).
Children
Icewright accounts are for rink operators and industry professionals, not children, and we don't knowingly collect personal information from children for our own purposes. Rink records may include participants' names, jersey numbers, and birth years that you enter to run leagues and competitions — those are your records, handled as described above. If you believe a child's information reached us in error, contact us and we'll delete it.
What we never do
We never sell personal information. We never share personal data with sponsors or advertisers — sponsors get aggregate card-view and click totals, never anything about any individual (see "Sponsor cards" above). We never use one customer's records for another customer's benefit. We never read your operational data except to run the service, help you when you ask, or comply with a legal requirement.
Your choices
You can see and edit your data in the app, and export your records (spreadsheets download as CSV). You can delete rinks, records, files, or your whole account, or ask us to. If your information is in a rink's records — as an employee, customer, applicant, or waiver signer — the rink controls that record: contact them, or contact us and we'll route the request and act on the owner's instruction. Depending on where you live you may have specific legal rights to access, correct, or delete personal information; write to us and we'll honor what applies.
Changes & contact
If this policy changes in a way that matters, we'll note it here with a new effective date, and flag significant changes in the app. Questions, corrections, or requests: admin@icewrightapp.com — Icewright LLC, Pennsylvania, USA.