Privacy Policy
Effective October 14, 2026
This policy explains what personal information Wrist League (“we”) collects through Wrist League, why, and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL), and we aim to respect equivalent rights wherever you live.
The short version
- You can take part without an account. Public results are anonymous totals; we never publish how an individual voted or what they wear.
- We collect only what we need to run fair daily counts and the features you choose.
- We do not sell personal information and do not use advertising trackers.
- You can download or delete your account data at any time.
1. Information we collect
| Information | Purpose | Retention |
|---|---|---|
| A random guest identifier stored in a cookie | Allow one check-in per day and one ballot per Debate without an account | Up to 400 days |
| Your selections: watch brand/model worn, “on your mind” watch, Debate choices, catalog suggestions | Produce statistics; show your own history | Retained as statistical records (see section 6) |
| A network identifier derived from your IP address (truncated, then scrambled with a key that changes daily) | Detect bots, abuse and coordinated manipulation | Deleted after 30 days |
| Email address and name (members) | Sign-in, account features, your data export | Until you delete your account |
| Email address and topic preferences (subscribers), and a record of your consent | Send the emails you asked for; prove consent as required by CASL | Until you unsubscribe, plus records required by law |
| Usage events (e.g. “check-in completed”, “share button used”), linked only to the pseudonymous identifier above | Understand which features help people take part | Up to 400 days |
| Your collection, Watch Passport entries, Time Sync readings and wear-reminder settings (members) | My Rotation, passports and reminders — private to you | Until you delete them or your account |
| Wrist shots you choose to submit, your credit name and caption (members) | Review, then show on the watch's page credited to you. Location and camera data are removed before storage | Until you withdraw the photo or delete your account |
| Your username, optional display name and bio, and profile settings (members) | Your public profile at /u/your-name (you can hide it) and credits on your wrist shots | Until you delete your account; a deleted or changed name stays reserved for 30 days |
| Meetups you host or RSVP to (members) | Show the event with you as host; show your username among people going if your profile is public | Hosted events stay on the calendar history; RSVPs are removed with your account |
| Photo reports (reason and optional note) | Moderate photos | Kept with the moderation record |
| Roll call links: the optional first name you add, and how many friends opened or answered | Show friends who called them out | With the check-in; removed with your account |
| Creator or share link you arrived from | Credit creators with aggregate participation | 7-day cookie; aggregate counts retained |
We do not store raw IP addresses in our database, and we do not use device fingerprinting, advertising cookies or cross-site tracking.
2. How we use information
- To operate the Service, count participation fairly and prevent abuse.
- To publish aggregate, anonymous statistics, including on social media and in newsletters.
- To provide account features and send emails you request or subscribe to.
- To maintain security, troubleshoot and improve the Service.
- To comply with legal obligations.
We rely on your consent (which you can withdraw), on what is necessary to provide the Service you ask for, and on our legitimate interest in keeping the Service fair and secure.
3. What is public
Only aggregate counts and rankings, plus anything you choose to publish: your username and public profile, approved wrist shots (with the credit name you choose), Watch Passports you turn sharing on for (never your name, email, costs or private entries), and roll call links you send (your watch and optional first name). Your wearing history, “on your mind” answer, and Debate choices are never displayed publicly with your identity. Creator pages show only aggregate statistics about visitors.
4. Service providers
We share information only with providers that help us run the Service, under contracts that limit their use of it:
- Vercel: hosting and server logs
- Neon: database
- Vercel Blob: private storage for submitted wrist shots
- Cloudflare Turnstile: bot detection. It processes technical data such as your IP address and browser signals. See Cloudflare's privacy policy.
- Resend: email delivery (once email is enabled)
These providers may store or process information in the United States and other countries, where it may be subject to the laws of those countries. We may also disclose information if required by law, or to protect the rights, safety and integrity of the Service and its users.
5. Email and consent
Marketing email is sent only after you confirm your subscription (double opt-in). Every marketing email identifies us, includes our contact information, and has a working unsubscribe link that takes effect promptly. You can manage topics at any time. Transactional emails, such as sign-in links, are sent only when you request them.
6. Retention and deletion
When you delete your account, we delete your profile, email address, sessions, newsletter subscriptions and “on your mind” answer. Your past check-ins and ballots are kept only as fully anonymous records with every identifier removed, so that published historical statistics stay accurate. They can no longer be linked to you.
7. Your rights
- Access and portability: download your data from your account page, or email us.
- Correction: you can change today's check-in until the daily reset, update your interests, and contact us to correct other information.
- Withdraw consent / delete: unsubscribe from any email, or delete your account from your account page.
- Guests: clearing your browser's cookies removes the link between your browser and your past guest activity.
To make a request or ask a question, email sean@shap.ca. We respond within 30 days. If you are not satisfied, you can contact the Office of the Privacy Commissioner of Canada or the privacy authority where you live.
8. Security
We use encryption in transit, access controls, audit logs for administrative actions, and data minimization. No system is perfectly secure; if a breach creates a real risk of significant harm, we will notify affected people and regulators as required by law.
9. Children
The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.
10. Changes
We will post updates here with a new effective date. For material changes, we will give notice on the Service or by email to members.
11. Contact
Privacy contact: sean@shap.ca