Rink Report

Rink Report

←

Privacy Policy

App ›

Effective October 29, 2026. Rink Report is operated by Grace Coding LLC, California, USA.

1. Information We Collect

You can browse spots, events and conditions without an account. If you choose to create one, we collect your email address and any username you pick. If you sign in with Google or Apple, that company tells us your email address (Apple lets you hide it behind a private relay address); we do not ask them for anything else. For Sign in with Apple we also keep a token Apple issues, used only to cancel your Apple sign-in for Rink Report when you delete your account. Our sign-in provider keeps a record of each place you are signed in: the device and browser it reports, the network address and when it was last used. If your phone is lost or stolen, the lost-phone page (rinkreport.app/lost-phone, from any browser once you sign in) lists your sign-ins by device and last use, without the network address, so you can sign one or all of them out, or lock your account for 24 hours, 7 days or until you write to us from your account's email; while it is locked nobody can sign in to it, you included. A lock needs a sign-in from the last 10 minutes (you type your password again or sign in another way), so a phone left signed in cannot lock you out; if you confirm with an emailed link, or your password or email was reset or changed in the last 3 days, the lock can last 24 hours at most. If a Roll Safe session is running when the account is locked, we treat the lock as an emergency and send that session's alert to your emergency contacts straight away. We keep a record of each lock, refused lock, unlock and sign-out (when it happened, whether you or Rink Report support did it, the length, and how you confirmed it) for the security of your account and so support can check it. That page also shows the last places your phone already shared with us while you used the app (a Roll Safe session's position, your last check-in, a location you shared with your crew) on a small map our maps provider draws from those points; Rink Report does not track your phone in the background and collects nothing new for that page.

Depending on which features you use, we may also collect:

  • Condition reports and check-ins — the spot, what you reported, and any photo or video you attach.
  • Location — only when you ask for it. Distances are calculated on your device, except the "near me" lists on the alerts and Weather pages and the Nearby, Today, Weather and Crew pages of the Apple Watch app (only while that app is open), where your position goes to our server for that one request to find the nearest spots and is not stored. Roll Safe records the location you start a session from so it can be included in an alert. Crew sharing publishes your position to that crew for a time window you choose; from the Apple Watch it is one snapshot that lasts ten minutes, and the watch is shown your crew mates only as a name, a rounded distance and a compass direction, never their coordinates. We never collect location in the background.
  • Emergency contacts — the name, phone number and email of people you choose. These belong to third parties who never signed up, which is why we ask you to confirm you have their permission before saving them.
  • Your skate log — private by default, and never published. If you record a skate on the Apple Watch app, the watch adds the start time, the length and, when you are within about 0.2 miles of a public spot, that spot to your skate log, using a code the iPhone app gives the watch that can do nothing else. The workout itself, with your heart rate and calories, is saved in Apple Health on your own devices under your Health permissions; it is never sent to Rink Report, and it is not used for analytics or advertising. Around the log you can also keep, privately: a star rating and a note for a place, a home rink, how a session felt, whether you wore pads, a song or a link to a song on a music service (we store the text or link you type and, for a link, the song's public title, which our server reads once from the music service when you save it; the request carries only the link you pasted, never your name, account or device; a link opens only when you tap it), the hosts or crews you skated with, the event you added a skate from (when you tap Log this skate on an event's page, the entry keeps a link to that public event and the place printed on it, and no position), what a piece of gear cost and when it is due for service, named gear setups, a maintenance log for your skates (the part, what you did, the day and an optional note and cost), a gear closet (the parts you add, matched only against Rink Report's own parts library or kept in your own words, with a colour you pick) a skate bag (which of your skates you are on and the closet pieces packed with it; new sessions in your log start with that skate), a Wish List (the Gear Shop products you save, when you saved them and, if you add one, a short note on each; partner shops see only how many skaters saved their products, at three or more and never who; if you turn on its gift link, anyone you give the link to can see the name you choose for it, or none, and the products on the list, never your notes or your account, until you turn the link off), and the gear you ask us to draw (the text and optional note you type; we may draw that gear for everyone's library, and only how many skaters asked for an item is ever looked at, never who), My Gear's settings (a name for your closet, its theme, what your share card shows and your currency), reminders for jobs on your skates (the part, the job and how many sessions or weeks apart) and, only if you switch them on, a push notification when one is due, how many of each spare part you keep and when they count as running low, swap sets (the wheels, toe stops and bearings you save to swap between), gear records (a skate or part's serial number, where and when you bought it, what it cost, a note and, if you add one, a photo of the receipt, kept in your own private folder; for each record and each stolen or lost flag we also keep a history of what you entered and changed, with the time our server received it, which app it came from and a fingerprint of each receipt photo, a code computed from the file that shows it has not changed, sealed so that any change to the history shows, to back up an insurance claim or a police report; a record or receipt you remove is kept for 30 days so it can be brought back, since a phone can be stolen while signed in, then deleted with its history), fits you lay out beside a skate (the name you give them and the clothes' shapes and colours you pick, drawn by the app; never a photo of you), a skate you retire with its note, and a skate you flag as stolen or lost (what happened, the day, where, the Rink Report place if it was at one, a serial number, a police report number, a contact and a note, as you choose; they appear only on the poster and the report your own device makes and in a message to the rink you choose to send, each of which you decide whether to share; when you remove the skate, its history is kept 30 days, then deleted), a weekly goal and a rest pause. If you import a GPX or FIT file, the file is read on your own device and never uploaded; we keep only the start time, the length and, when it began within about 0.2 miles of a public spot, that spot. To find that spot your device sends the start point once, rounded to about 100 metres, to our server, which uses it for that one lookup and does not store it; the route, heart rate and everything else in the file are discarded. If you connect Apple Health in the iPhone app (an offer you start with one tap and can turn off in the Health app), Rink Report reads only your skating workouts: the type, the start time and the length, never heart rate, calories, routes or distance. A workout you add becomes a session in your log without a place, and we keep only Apple's anonymous id for it so it is not offered twice; the Health data itself stays in Apple Health. If you tap Pick from Apple Music in the iPhone app and allow access in the iOS sheet, Rink Report reads the title and artist of your ten most recently played songs on your device so you can choose the one you skated to; the list is shown to you, is not sent anywhere or stored, and only the song you pick is saved as that session's soundtrack. The iPhone widgets show your week streak, days this week and your home rink's next session from a small summary the app stores on your device in a group shared only with the widget; the widget has no network access and no account. Only you can see these. If your phone is stolen or lost and you ask us, Rink Report support can open your gear records, receipts, stolen or lost flags and their history to send them to you, bring back something removed in the last 30 days, sign your account out on every device, or lock it and lift the lock (only once you write from your account's email); each time is recorded with the reason and shown to you in My Gear. The one thing others can see is a bare count (three or more skaters, never who) on a host's page, a Last Song page or an event's page (“N skaters logged this”).
  • Reminders — if you have an account and have not used Rink Report for a week, one email (and, if you turned notifications on, one notification) with what is on this week at your own rink (your home rink, a favourite or a place on your skate list); one more at two weeks; then nothing until you are back. To decide this we look at when you last opened the app or did something in it, and we keep a record of each reminder sent so you never get the same one twice. They are on by default and you can turn them off under Profile, notifications, or with the link in the email. On Fridays, if session notifications are on, one notification with the weekend's sessions at the places you saved and from hosts you follow. If you turn on streak reminders, a notification on a day you have not logged while your day streak is alive, and on Saturday evening when a week streak of two weeks or more is about to end.
  • Premium notices — with Premium, three optional notifications (tonight's sessions at your places, new places in your area, early Coming Attractions): whether each is on, and a record of which notice was sent (its kind and the place, item or day) so you never get the same one twice. Nothing is shared with anyone else.
  • Crew messages, favourites, the skaters you block (seen only by you; the person is not told), profile photo and bio, and push notification subscriptions (in the iPhone app, the device token Apple issues for notifications; in the Android app, the registration token Google's Firebase Cloud Messaging issues for it).
  • Weather alert settings if you switch on weather alert notifications: whether they are on, which alerts you want, whether favourites are included, the US state and county you pick as your area (a place you choose, never your location) and, with Premium, any quiet hours, up to five travel areas (more states and counties, with optional dates) you add, and whether you want the 7 AM morning digest (one notification a day that sums up the alerts at your places). Deleting your account deletes them.
  • Tips and rink memories — if you use "Tip us" in The Report, or "Share a memory" in The Last Song, the text you write, the rink you name and, for a memory, any photos or videos you choose to attach (up to four). They are visible only to our reviewers and are never published without asking you first. If you say yes, a memory appears on that rink's Last Song page with no name or account details, and we take it down on request. Everything is deleted, files included, if you delete your account.
  • Dispatches — with Premium or as an ambassador, the report you write for The Report (headline, summary, story, the place and day, and up to four photos or videos). It is visible only to our reviewers until an editor publishes it under your username with a Correspondent badge. A published dispatch stays in The Report under your username if you delete your account unless you ask us to remove it. When a dispatch is published we may add a free month of Premium or a credit to your Stripe customer balance; we read your Premium and subscription status to do that.
  • Rinks for Sale listings — if you post a listing, the text, price, place and photo you enter are shown publicly on the board after review. Your account email is never shown. A phone number is shown on your listing only if you tick the box to show it and type one; anyone can then see and call it, and unticking it (or removing the listing) takes it down. Messages from buyers reach you by email through Rink Report.
  • Floor answers — if you tell us what the floor is like at a place (wood, concrete and so on), we keep your one answer for that place, tied to your account. It is not shown to anyone as yours: a floor appears on a place's page only when at least three skaters have answered and most of them agree, as a plain count of skaters, never who.
  • Ambassador notes — if you are a Rink Report ambassador, the team keeps a private note about the program: your area, the places you look after, when we last spoke and what is next. Only the team sees it; it is never published.
  • The weekly newsletter — if you sign up on our front page, your email address and when you signed up or unsubscribed. One email a week about new spots, events and news; every email has an unsubscribe link, and we keep the address only to send it.
  • Billing state if you subscribe. Card details go directly to Stripe; we never see or store them. If you buy Premium in the iPhone app, Apple processes the payment and we receive a transaction ID, the product bought, its dates and renewal status, and an account token Apple returns; we never receive your card or Apple ID details.
  • Spot correction suggestions — what you type into "Suggest a fix" on a spot, an optional link, and an optional email if you want a reply. No account is needed. The email is seen only by our reviewer, is never shown publicly, and is used only to reply about that suggestion.
  • An anonymous device identifier, if you use the app without an account. This is a random id stored only on your device — not your name, email, or anything else that identifies you — so we can count real installs instead of repeat visits, and see whether people who try the app without an account go on to create one. If you arrive on a link from one of our own posts or emails that ends in a short campaign label (for example ?ref=ig-bio), that label is stored once with the identifier so we can see which of our own links brought devices; it describes the link, not you. If you later sign in on that device, we link the device identifier to your account once, and it is deleted if you request account deletion.
  • Usage analytics — how the app is used: which pages and buttons are tapped, and actions such as signing in, a check-in, a condition report, starting a Skate Log or Roll Safe session, or starting checkout, along with your platform (iOS, Android or desktop) and whether the app is installed. When you are signed in, this is tied to your account by a random internal id — not your name or email. Our analytics provider also derives an approximate region (country or city) from your IP address. We do not send it your GPS position, what you type into forms, your emergency contacts' details, or the contents of your skate log — for Skate Log we record only that a session took place.
  • Anonymised screen recordings — to find where people get stuck, we record how the app looks and is used during a visit (taps, scrolling, layout). All on-screen text and everything you type is masked before it leaves your device, so it cannot be read back.

Public information about spots and hosts. For a venue or host that lists an Instagram account, we use Meta's official Instagram API to read what that business or creator account has made public: its name, profile photo, website link, bio, follower count and its most recent posts. We copy the profile photo and the images of up to six recent posts to our own storage so a spot or host page can show them, with a link back to the account. We use the bio and follower count only to check that we have the right account and to notice when a venue says it has closed; they are not shown to other users. We also read the text of a venue’s recent posts in memory, once, to notice an opening, a closing, a sale or a change of owner for our reviewers; the text is not kept, only a link to the post and the matching words are saved, privately, until a person has checked them. We do not read private accounts, messages, comments or anyone's followers, and we store no captions or comments. This is information about businesses and organisers, not about Rink Report users. We also read the performance numbers (reach, views, interactions and follower counts) of Rink Report's own Instagram account to plan what we post. A business or host can ask us to remove its Instagram photos and stop refreshing its account (section 7).

Calls to venues. To keep listings accurate we may place short confirmation calls to a rink's public business telephone line. An automated AI voice assistant makes the call and says, at the start, that it is an AI and that the call may be recorded. We keep a transcript and a short summary of what the venue told us (its hours, prices and a business email address) together with the number called and the time. We do not call app users and the assistant does not ask for personal details about anyone. A venue can ask us to stop calling at any time.

We use one analytics provider (Amplitude, listed in section 3). We do not use any advertising SDK or advertising tracker, we do not use your advertising ID, and we never read your device address book.

2. How We Use Your Information

We use your information to provide skater-reported spot conditions, facilitate community check-ins, and to send Roll Safe alerts to your emergency contacts by SMS and email (and by automated voice call with Premium) if you do not check back in before your timer expires, you send an alert yourself, or you lock your account while a session is running, plus a short message that you are safe if you check in after an alert went out. Roll Safe records the location you start a session from so it can be included in that alert; it does not track your location continuously, and it is a notification service rather than an emergency or medical response service.

Mobile information and opt-in consent will not be shared with third parties or affiliates for marketing or promotional purposes. Phone numbers you save as emergency contacts are used only to deliver Roll Safe safety alerts on your behalf, and are passed to our messaging and voice provider solely to send those alerts. No mobile information is sold, rented, or shared for marketing.

3. Who We Share It With

We do not sell your personal information, and we do not share it for advertising. We use the following service providers, each only for the purpose listed:

  • Supabase — database, sign-in and file storage
  • Google and Apple — only if you choose to sign in with them; they confirm who you are and give us your email address
  • Vercel — website hosting
  • Vonage — SMS and voice calls for Roll Safe alerts
  • Resend — email alerts, reminder emails and the weekly newsletter
  • Stripe — subscription payments on the web and Android
  • Apple (In-App Purchase) — payments made in the iPhone app; Apple tells us when a purchase, renewal or cancellation happens
  • Cloudinary — video processing and delivery
  • Mapbox — maps (the map tiles for the area on your screen, and the points of a map we draw for you, such as the lost-phone page's last places)
  • Amplitude — product analytics and the anonymised screen recordings described in section 1, used only to understand and improve the app
  • Meta (Instagram) — we read public business and creator profile information, and our own account's performance, through Meta's official API. Only the Instagram username being looked up is sent to Meta; no information about Rink Report users is.
  • Music services (Spotify, Apple Music, YouTube and YouTube Music, SoundCloud, Deezer, TIDAL, Audiomack, Amazon Music, Bandcamp) — when you add a song link to a skate, our server asks that service for the song's public title; we send only the link you pasted
  • OpenWeather — current conditions at a spot; we send it that spot's coordinates, never anything about you
  • US National Weather Service — official weather alerts and the forecast for a spot or a place on the map; we send it that place's coordinates (the spot's, the point you tap, your position at that moment when you tap "Use my location" on the alerts page or use Roll Safe's weather check, which we do not store for this purpose, or, while a Roll Safe session is running, that session's last known position, which Roll Safe already holds, so we can warn you of a Warning or Watch where you are skating), never anything else about you
  • US Geological Survey (USGS) and GDACS — worldwide earthquake, tropical cyclone, flood and volcano alerts shown beside the weather alerts for a spot; our servers download their public feeds and match them to spots, and we send them nothing about you or your location
  • Search engines (IndexNow) — when we publish a story in The Report we send the web address of that public page to IndexNow, which Bing and other search engines read so the story is found sooner; the address of a public page only, never anything about you
  • Partner shops (Roller Skates of America, Skate Ratz and Chaya by Powerslide) — shops that our gear section and skate builder link to. We send them nothing about you: a link to a shop's website carries only a tag saying the click came from Rink Report, and once you open it you are on its website under its own privacy policy. A build reaches a shop only when you send it yourself. Their product photos are stored on our own servers, so showing them does not contact the shop. Each shop sees daily totals for its own page (visits, builds started, taps to send a build or open its site, builds saved for it), counted on our servers with nothing that identifies you, and never who.
  • Retell AI — places the short confirmation calls to venues described in section 1 as an AI voice assistant and transcribes them, using its own telephone carrier (Twilio or Telnyx), voice and language-model providers. We send it the venue's public phone number and its listing details, never anything about app users; it keeps the call data for 30 days
  • Google (Firebase Cloud Messaging) — delivers push notifications to the Android app if you turn them on. It receives that phone's registration token and the title and text of each notification (for example a Roll Safe reminder, with the name of your spot). We use no other Firebase product: no Firebase analytics, crash reporting or advertising features
  • Apple, Google and Mozilla push services — delivering push notifications, unavoidably, if you turn them on

If you turn on your Wish List's gift link, the people you give it to can open a page showing the name you chose for it (or none) and the products you saved; it is not listed or indexed by search engines, shows no notes and nothing else about your account, and stops working when you turn it off.

We may also disclose information where required by law.

4. Data Storage & Security

Your data is stored using Supabase (PostgreSQL) with Row Level Security, and is encrypted in transit — rinkreport.app is HSTS-preloaded, so there is no unencrypted fallback. Data is stored in the United States. We never share your personal contact information with third parties for marketing purposes.

5. How Long We Keep It

We keep your account and the personal data attached to it for as long as your account exists. You can delete it at any time (see section 7), and when you do:

  • Deleted outright — your profile, ambassador notes, emergency contacts, Roll Safe sessions and the locations in them, alert delivery logs, your skate log (including the list of Apple Health workouts you already added or dismissed, your gear closet and skate bag, your Wish List with its notes and gift link, your maintenance log, your My Gear settings, reminders, swap sets, stolen and lost flags, fits, gear records and receipt photos, their history, receipts and records waiting their 30 days, the record of any support lookups, the record of your locks and sign-outs, and the gear you asked us to draw), your floor answers, favourites, the skaters you blocked, crew messages and positions, event posts and push subscriptions.
  • Kept, but anonymised — your condition reports and check-ins. The link to you is permanently removed and the rest of the entry stays in the public catalogue, because those entries are what other skaters rely on. Once anonymised they are no longer personal information and are retained indefinitely.

If you subscribe, billing records are cancelled before your account is removed, and Stripe retains transaction records as its own legal obligation. An App Store subscription is Apple's to cancel (turn it off in your Apple ID subscription settings before you delete your account), and Apple keeps its own purchase records.

Instagram photos on spot and host pages are refreshed weekly while the page lists an Instagram account. They are kept while the page exists and are deleted when the business or host asks us to remove them (section 7). They are not tied to any Rink Report account and are not affected by deleting yours.

Photos and videos from past events. A host (or our team) can post photos and videos from an event that has happened, shown on that event's page, and the photos and videos skaters posted to that event's feed (with the skater's name never shown in the gallery) appear there too; a post you report is hidden pending review. They are kept for as long as the event page exists, are public, and are not tied to any Rink Report account, so they are not affected by deleting yours. If you appear in one and want it removed, email info@rinkreport.app with the event page and we will take it down. Videos are stored with our video host (Cloudinary, section 3) and photos in our own storage.

Venue confirmation calls. The transcript and summary of a call are kept with that venue's listing record, and the calling service deletes its own copy after 30 days. A venue can ask us to delete the records of its calls (section 11).

Analytics history is not removed automatically when you delete your account. Once you delete, nothing new is tied to your id, but events already recorded remain with Amplitude until we delete them. Email info@rinkreport.app and we will submit a deletion request for your analytics data as well.

6. Roll Safe Emergency Alerts

By using Roll Safe, you explicitly authorize Rink Report to send automated SMS, voice and email alerts to your designated emergency contacts, and one short follow-up message saying you are safe if you check in after an alert went out. If you lock your account while a Roll Safe session is running, we treat that as an emergency and send the alert to those contacts straight away. Standard messaging rates may apply.

7. Your Choices and Rights

You can edit your profile, remove an emergency contact, turn any notification off, and stop sharing your location at any time from inside the app.

You can delete your account and its data yourself — under Profile in the app, or at rinkreport.app/delete-account. Deletion is immediate and permanent; we cannot restore an account afterwards.

You may also email info@rinkreport.app to ask what we hold about you, to correct it, or to have it deleted — including your analytics data. Signing out stops further activity being tied to your account on that device.

Businesses and hosts: if you run a spot or host listed on Rink Report and want the Instagram photos we copied, or the link to your account, taken down, email info@rinkreport.app from an address that can be tied to the business or account. We will delete the photos we stored and stop refreshing that account.

8. California Privacy Rights

Rink Report is a California company and most of our users are in California. If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect and why, to request a copy, to ask us to correct or delete it, and not to be discriminated against for exercising any of those rights.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done either. To exercise any right, use the deletion link above or email info@rinkreport.app — we will respond within 45 days.

9. Age Requirement

Rink Report is intended for skaters aged 13 and over, and the app is not directed to children. We do not knowingly collect personal information from anyone under 13. If you believe someone under 13 has created an account or provided us with personal information, contact us and we will delete it promptly.

Every skater holds their own account and chooses their own emergency contacts. A skater aged 13 or over may list a parent or guardian as the contact who receives their Roll Safe alerts.

10. Changes to This Policy

If we change this policy we will update the effective date above, and for anything significant we will say so in the app rather than relying on you to re-read this page.

11. Contact

Grace Coding LLC, California, USA — info@rinkreport.app