Privacy Policy
Statsyuk Analytics Inc.
Last updated: August 20, 2026 · www.statsyuk.ca
1. Introduction
Statsyuk Analytics Inc. (“Statsyuk,” “we,” “us,” or “our”) is a Canadian hockey technology company. We operate a platform (the “Service”) that uses computer vision and machine learning to process game and practice footage and deliver automated player tracking and statistical analysis to hockey teams.
This Privacy Policy explains what personal information we collect, how we use and share it, and what rights you have with respect to your data. It applies to our web application, our APIs, and any related services.
By accessing or using the Service, you agree to the practices described in this policy. If you do not agree, please discontinue use of the Service.
2. Information We Collect
2.1 Information You Provide Directly
Account Registration — when you create an account you provide:
- Full name
- Email address
- Password (stored using industry-standard one-way hashing; we never store your plaintext password)
- Profile picture (if provided via Google sign-in)
Onboarding & Team Affiliation — during onboarding you provide:
- League, division, and team affiliations
- Your role (e.g., coach, manager, team administrator)
Roster Management — when you build and maintain your team roster you provide:
- Player name, jersey number, and position
- Team name
- Captain / alternate captain designation
- Player status (Active, Injured, Scratch)
- Shooting hand and line assignment
- Per-game roster adjustments (excluded players and call-ups for individual games)
Video Uploads — when you upload game and practice footage you provide:
- The video file itself
- Associated metadata (team, game date, filename)
Communications — if you contact us or join our waitlist, we collect the information you provide in those interactions.
2.2 Information Collected Automatically
Session Data — we use session tokens to keep you authenticated. These expire automatically and are invalidated when you log out.
Usage Data — when you use the Service we record:
- Which features you access
- Video processing job status and history
- Product tour completion status
Game Analytics — our machine learning pipeline generates and stores analytics derived from your uploaded video, including:
- Player tracking data (positions and movements on the ice)
- Player identification results (jersey number, name)
- Player classification (skater, goalie, referee)
- Game statistics (ice time, shifts, positional analytics)
This data is stored in our analytics database and is associated with your team’s games.
Cookies — we use session cookies to maintain your authenticated state. We do not use third-party advertising cookies or cross-site tracking cookies.
2.3 Information We Do Not Collect
- Credit card numbers or payment instrument details
- Audio from uploaded video files
- Plaintext passwords
2.4 The Opposing Team and Others in the Footage
Game footage unavoidably captures people beyond the uploading team’s players: the opposing team, on-ice officials, and spectators.
We record which team your team played. Fixtures are a matter of public record, and your own game report would not make sense without it.
We do not store opposing players' names. We hold no player names in our analytics database at all, for either team. What we record for an opposing player is their jersey number and where they were on the ice: the same things visible to anyone watching the game.
We do not show you individual opposing players. Team-level comparisons on your game report, such as pace across the game, draw on both teams. Nothing on the other side is identified to you.
Recording in an arena is governed by venue signage, league media policies, and the recording authorization the uploading customer warrants it holds.
3. How We Use Your Information
| Data | Purpose |
|---|---|
| Name, email, password | Account authentication and identification |
| Google sign-in | Enabling social login |
| League / division / team | Scoping your access to the correct organizational data |
| Player roster data | Associating tracking results with named players; building the roster used by our pipeline at processing time |
| Game roster adjustments | Ensuring per-game call-ups and scratches are reflected in analysis |
| Video files | Processing through our computer vision pipeline to generate player tracking and statistics, and to evaluate and improve our models |
| Game analytics | Generating reports, heatmaps, shift charts, and ice time statistics for your team |
| Session tokens | Maintaining your authenticated session securely |
| Job history | Displaying processing status in the UI; detecting and resolving pipeline failures |
| Email address | Sending transactional notifications (e.g., video processing complete) |
| Waitlist submissions | Managing early access and product communications |
We use your information for the purposes described above. We do not sell your personal information to third parties.
Automated processing. Our pipeline generates analytics automatically. It does not make decisions about players. Coaching, selection, ice-time, and evaluation decisions are made by people at your organization using analytics as one input among others, and our Terms of Service state that our outputs should not be used as the sole basis for player evaluation. We therefore do not make decisions based exclusively on the automated processing of personal information.
Email communications:Notifications related to your use of the Service (such as video processing confirmations) are transactional messages and do not require separate consent under Canada’s Anti-Spam Legislation (CASL). Any commercial or marketing communications — such as product announcements or promotional offers — will only be sent with your express consent and will include a clear unsubscribe mechanism.
4. How We Share Your Information
We do not sell your personal information. We share data with third-party service providers only to the extent necessary to operate the Service:
| Service Provider | Role | Data Shared |
|---|---|---|
| Neon (PostgreSQL) | Database hosting | User accounts, rosters, session tokens |
| Google Cloud Storage (GCS) | Video file storage | Uploaded game and practice footage |
| Google Cloud Batch | ML job execution | Job metadata, environment variables |
| Google Firestore | Job status and records | User ID, email, team ID, player roster data associated with each processing job |
| ClickHouse Cloud | Analytics database | Game analytics (player tracking, statistics) |
| Vercel | Web application hosting and CDN | Web requests; public demo analytics data is cached at the CDN layer |
| Social authentication | Email address and profile (Google sign-in users only) | |
| Resend | Transactional email delivery | Email address, notification content |
| Stripe | Payment processing and subscription billing | Billing contact details and transaction records. Card details are collected by Stripe directly and are never stored by us (see § 2.3) |
Public demo:Our public demo page does not use customer footage or customer data. No customer’s video, roster, or analytics appears on it.
4.1 Where Your Information Is Processed
Statsyuk is based in Toronto, Ontario. Our service providers process personal information both in Canada and in the United States. Information processed outside Canada is subject to the laws of the country where it is held and may be accessible to that country’s courts, law enforcement, and national security authorities under those laws. We remain accountable for personal information transferred to a service provider for processing, and we use contractual means to require a comparable level of protection.
Legal Disclosures: We may disclose your information if required by applicable law, regulation, or court order, or where necessary to protect the rights, safety, or property of Statsyuk, our users, or the public.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information becomes subject to a materially different privacy policy.
5. Data Security
We implement industry-standard security measures to protect your information:
- Passwords are hashed using a one-way algorithm and are never stored in plaintext
- All data in transit is encrypted using TLS/HTTPS across all service boundaries
- Video access is controlled through short-lived, expiring signed URLs
- Database access is restricted to authenticated, scoped service credentials
- No service account key files are stored on our servers
No security system is impenetrable. Where a breach of security safeguards creates a real risk of significant harm, we will report it to the Office of the Privacy Commissioner of Canada and notify affected individuals as soon as feasible, as PIPEDA requires. Where Quebec’s Law 25applies and the incident presents a risk of serious injury, we will notify the Commission d’accès à l’information and affected individuals with diligence. We maintain records of all breaches of security safeguards, whether or not they are reportable. Notifications will include a description of what happened, the type of information involved, and steps you can take to protect yourself.
6. Data Retention
| Data Category | Retention Period |
|---|---|
| User account data | For the life of your account. On a deletion request, removed from the live service immediately and permanently deleted after a 30-day grace period |
| Session tokens | Until expiry or logout |
| Video files | Kept while you are a customer. On termination, soft-deleted immediately and permanently deleted after a 30-day grace period |
| Game analytics (personal) | For the life of your account; your access ends upon termination |
| Job history | Until dismissed from the UI or account termination |
| Sampled images used for model development | Retained for continued model development, held separately from your game report and not affected by game deletion |
You may request deletion of your account and associated personal data at any time by contacting us at noah@statsyuk.ca. Certain data may be retained longer where required by law. Statsyuk retains anonymized performance data indefinitely: movement and event data with no player name, jersey number, or team attached, grouped under a random per-game token, and holding no game date or venue. Section 4.5 of our Terms of Service describes what this is and how it is produced.
7. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights:
Access: Request a copy of the personal data we hold about you.
Correction: Update your name and email in your account settings. For other corrections, contact us.
Deletion: Request that we delete your account and associated personal data, subject to legal retention obligations.
Portability: Request an export of your personal data in a machine-readable format.
Objection / Restriction: Object to or request restriction of certain processing activities.
Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
The law we apply. Statsyuk is a Canadian company. We apply Canadian federal and provincial privacy law: the Personal Information Protection and Electronic Documents Act(PIPEDA) and, where it applies, Quebec’s Act respecting the protection of personal information in the private sector(“Law 25”). We have built our practices to the Law 25 standard, which is the strictest privacy regime in Canada.
Privacy Officer. Noah Gans is our Privacy Officer and is accountable for our compliance with privacy law. You can reach him at noah@statsyuk.ca.
If you are outside Canada. Additional rights may apply under the law of where you live. We are not established in the European Union or the United Kingdom and do not currently offer the Service to customers there; if that changes, we will update this policy before it does. If you believe your local law gives you rights beyond those listed above, contact us and we will assess your request.
Complaints.If you are not satisfied with how we have handled your personal information, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), or, where Law 25 applies, to the Commission d’accès à l’information du Québec (cai.gouv.qc.ca). We would rather hear from you first so we can try to put it right.
To exercise any of these rights, contact us at noah@statsyuk.ca. We will respond within 30 days (or the timeframe required by applicable law).
8. Minor Athletes and Consent
Most players whose data we process are minors. We treat that as the normal case, not an exception.
We ask before we process. The permissions themselves are set out in our Player Consent. Every player on a roster consents through their own player account before their first game is processed. Consent is recorded with a timestamp and can be withdrawn at any time.
Who gives consent. In Quebec, a player aged 14 or older consents for themselves; that age is set by Law 25. Elsewhere in Canada we apply 13. Federal privacy law does not fix an age, and 13 is the threshold the Privacy Commissioner of Canada works to. Below those ages, a parent or guardian consents on the player’s behalf. Being under 18 does not by itself require a parent’s consent.
Improving our models. We retain still images sampled from game footage, including frames and player crops that may show identifiable players, to measure and improve how accurately our systems detect players and read jersey numbers. See Section 4.4 of our Terms of Service.
Withdrawing. A player, or a parent on their behalf, may withdraw consent at any time by emailing noah@statsyuk.ca. When consent is withdrawn we remove that player’s identifying information from our records. Their teammates’ analytics are unaffected. Withdrawal does not reach reports a coach has already exported, or movement data already made anonymous, which no longer identifies anyone.
Coaches and team administrators who enter roster information represent that their organization has authorized them to do so.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the “Last Updated” date above. For material changes, we will ask you to actively re-accept the updated policy before continuing to use the Service. For minor clarifications, continued use of the Service after the effective date constitutes acceptance.
10. Contact Us
Statsyuk Analytics Inc. / Statsyuk Analytique Inc.69 Rowanwood Ave, Toronto, Ontario M4W 1Y8, Canadanoah@statsyuk.ca