Privacy policy

Last updated: 2026-11-05.

This is a translation. If it differs from the French version, the French version governs.

Estrade is a service of SignalOrange. This policy describes the personal information Estrade collects, what it is used for, who else receives it, how long it is kept and how to exercise your rights. It applies to the estrade.ca site and to the iPhone and iPad app.

Estrade contains no advertising and no audience measurement tools, and neither sells nor rents your information.

What we collect

Your account

• Email address. It identifies the account and receives the sign-in links. There is no password.
• Display name and photo, if you add them. The other members of your pools see them.
• Passkeys. We keep the public key, the device name and the date of last use. The private key and your biometric data (Face ID, Touch ID) never leave your device.
• Sessions. For each signed-in browser or device, we keep a session token, the browser or device used, the IP address of the sign-in and its date. You see them and can close them in "My account".
• Referral. If you arrived through another member's link, we keep that link between the two accounts.

Your pools

• The pools you create or join, your team names, logos and colours, your draft picks, your draft queue, your lineups, trades, waiver claims, votes and playoff grids. The other members of the same pool see this information, as in any pool.
• Invitations. The commissioner can enter the email address of a person to invite. We use it to send the invitation.
• Draft room chat. Messages are not recorded. They only pass through the server's memory during the session and disappear when it closes. Only a reported message is copied (see Reports and blocks).
• Public share links. A commissioner or a pooler can publish a link to a pool's or a team's page. Your name appears there only if you allowed it.
• Company leagues. The organization's name and its email domain.

Notifications

• Your alert preferences (email, notifications, muted alerts).
• For browser notifications, the subscription address your browser gives us and its encryption keys.

Purchases

• By card, on the web. Payment is made through Stripe. We keep the type of pass or plan, the amounts, the taxes, the billing province and Stripe's transaction and invoice numbers. We never see your card number.
• In the iPhone and iPad app. Payment is made through Apple. We keep the transaction number, the store country, the price and the currency. A random identifier specific to your account accompanies the purchase to attach it to the right account. Apple sends us neither your name nor your Apple ID.
• Gifts. For a pass given as a gift, the recipient's email address and your message.

Operation and security

• Audit log. The deletion of an account and the actions of administrators are recorded with their date and, for some, the IP address.
• Reports and blocks. When a member reports a message, a team name, a logo, a photo or a pool, we keep a copy of the reported content, its author, the pool and the person reporting it, to review it. We aim to review each report within 24 hours. The accounts you block are recorded to hide their messages in the chat.
• Error reports. When a page crashes, we keep the error message, the page involved and the signed-in account.
• Rate limiting. To block abuse, the IP address of sign-in requests is counted in memory, without being recorded.
• Report a problem. If you use this button, your message, your email address, the page and your browser are sent to us.

Cookies

Estrade only uses the cookies needed to keep your session open. No advertising or audience measurement cookies.

Use of information

• Signing you in and keeping your account secure.
• Running the pools: draft, standings, trades, alerts.
• Sending you the emails and notifications you chose.
• Charging and invoicing passes, and meeting our tax obligations.
• Fixing errors and preventing abuse.

We do not use your information for profiling or for advertising.

Recipients of information

We only send these providers what they need for their task. Some are located outside Quebec, notably in the United States: your information may therefore be processed there.

If you connect an agent (Claude, ChatGPT or another) to your account, what it reads from your pools, including the names of the other members, goes to the provider you chose. Estrade sends nothing on its own. You can disconnect an agent at any time in "Connected agents", and a pool's commissioner can refuse agents.

The players' photos and the teams' logos come from the NHL. Our server downloads them and keeps them in cache: your device never contacts the NHL, which receives nothing from you.

Retention period

• Account and pools: as long as the account exists. When the account is deleted, what identifies you is erased right away (see Your rights).
• Sign-in links: valid for 15 minutes, erased within two days.
• Sessions: 14 days in a browser; 60 days without use in the app. An expired session is erased, with its device and IP address, within two days.
• Draft room chat: never recorded, except a reported message.
• Reports: erased 12 months after their review; a report not yet reviewed stays. When an account is deleted, the link to that account is removed, but the copy of the reported content stays.
• Error reports and queued jobs (sending emails and notifications): 14 days.
• Backups: daily, erased after 7 days.
• Purchases and invoices: as long as tax laws require.
• Gift pass invitations: expire after 30 days without a response.

Your rights

• Access and take your data. In "My account", Data section, "Download my data" produces a JSON file with your profile, your settings, your devices and your data in each pool.
• Correct. Your name, your photo and your email address can be changed in "My account".
• Delete your account. In "My account", section "Delete my account", on the web and in the app. We erase right away what identifies you: email address, name, photo, sessions, passkeys, preferences, notification subscriptions, invitations received and gift messages. Your teams stay in their pools under the name "Ancien pooler" (former pooler), so as not to distort the standings. Purchase records stay, without your identity, for our tax obligations. If a subscription in your name renews, first stop its renewal in "Passes and invoices". Deletion is permanent.
• Withdraw consent or file a complaint. Write to us. You can also contact the Commission d'accès à l'information du Québec.

We respond to every request within 30 days.

Minors

Estrade is intended for people aged 14 and over. In Quebec, the information of a child under 14 may only be collected with the consent of their parent or guardian. A pool's chat and photos are visible only to its members, who can report content or block an account. If you believe a child under 14 is using Estrade without that consent, write to us: we will close the account.

Changes

We publish here any change to this policy, with its date.

Contact us

For a question, or a request for access, correction or deletion, or a complaint, write to SignalOrange's privacy officer: support@estrade.ca