Last Updated: 28 April 2026
Privacy Policy
This Privacy Policy describes how Ice Dynasty ("we", "our", or "us") collects, uses, and shares your personal information when you use our web application (the "Service").
1. Information We Collect
We collect information that you provide directly to us, as well as information collected automatically when you use the Service.
Information You Provide to Us
- Account Information: When you register for an account, we collect your name, email address, and a hashed version of your password.
- Profile Information: You may optionally choose to upload a profile photograph and provide additional profile details.
- Security Information: If you enable Two-Factor Authentication (2FA), we securely generate and store recovery codes and secrets associated with your account.
Information Collected Automatically
- Device and Usage Data: We automatically collect your IP address, browser type (User Agent), operating system, and the dates/times of your visits.
- Audit Logs: For security and game integrity purposes, we maintain internal audit logs that record when you create, update, or delete data within the Service.
- Session Information: We track your active login sessions across devices to help you manage your account security.
2. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our Service and hold certain information. These are used for essential operations and, with your consent, for analytics:
- Essential Cookies: Required for the operation of the Service, such as keeping you logged in (
ice-dynasty-session), protecting against Cross-Site Request Forgery (XSRF-TOKEN), and remembering your cookie preferences (cookie_consent).
- Remember Me Cookies: If you select "Remember Me" during login, a persistent cookie is used to keep you authenticated.
- Analytics Cookies (Google Analytics): If you provide explicit consent via our cookie banner, we use Google Analytics to collect anonymous analytics data (such as page views, session durations, and device information) to understand how the Service is used and to further develop the game.
- Advertising Tracking Cookies (Meta/Facebook Pixel): With your consent, we use Meta Pixel to measure the effectiveness of our advertising and to target ads. The Pixel collects data about your use of the Service (page views, registration). You can opt out of these cookies via our cookie banner.
3. How We Use Your Information
We use the collected data for various purposes, including to:
- Provide and maintain the Service (e.g., managing your sports team).
- Notify you about changes to our Service.
- Allow you to participate in interactive features of our Service.
- Provide customer support.
- Monitor the usage of our Service and prevent technical issues or abuse.
- Protect the security and integrity of the game environment.
4. Data Sharing and Disclosure
We do not sell your personal information. We may share your information only in the following situations:
- Service Providers: With third-party vendors who provide hosting, email delivery, and database management services on our behalf.
- Analytics (Google Analytics): If you have consented to analytics cookies, we share anonymous usage data with Google to improve the Service. Please note that this data may be transferred to or processed on servers located outside the European Economic Area (EEA), such as in the United States.
- Advertising Tracking (Meta/Facebook): If you have consented to cookies, we share anonymous usage data with Meta for advertising targeting and effectiveness measurement. Data may be transferred outside the EEA (Standard Contractual Clauses).
- Legal Requirements: If required to do so by law or in response to valid requests by public authorities.
5. Security of Your Data
We prioritize the security of your data. We use industry-standard security measures, including password hashing, CSRF protection, and optional Two-Factor Authentication. However, remember that no method of transmission over the Internet or electronic storage is 100% secure.
- Password Breach Monitoring: During registration and password changes, we check whether the chosen password has appeared in known data breaches using the Have I Been Pwned service. This check uses a privacy-preserving technique called k-anonymity — only a partial hash prefix (first 5 characters of the SHA-1 hash) of your password is sent to the service. Your actual password is never transmitted.
6. Your Data Rights
You have the right to request access to, correction of, or deletion of your personal data.
- Account Deletion: You can permanently delete your account and associated personal data at any time from your Account Settings page. Your team will become bot-managed and your former players will be listed on the transfer market.
Automated Account Cleanup
We automatically process inactive accounts to maintain the quality of the game environment:
- Inactive Accounts (42 days): Accounts that have not logged in for 42 days are automatically deleted. A warning email is sent 7 days before deletion. Upon deletion, all personal data is permanently removed. Game data (team name, division placement, player records) may be retained in anonymized form for game continuity.
- Incomplete Registrations (7 days): Accounts that are registered but never complete team creation within 7 days are automatically deleted.
7. Contact Us
If you have any questions about this Privacy Policy, please contact the administrative team.