COPPA Parental Consent Notice

This notice explains what CG Goaltending^™ LLC (“CGG,” “we,” “us,” or “our”) collects about a child under 13, what we do with it, who else sees it, and how you — the parent or legal guardian — give, review, and take back your consent. It is written to meet the direct-notice requirements of the Children’s Online Privacy Protection Act (COPPA) and the FTC’s COPPA Rule.

Read it with our Privacy Policy and Terms of Service. Where this notice and the Privacy Policy cover the same topic for a child under 13, this notice controls.

1. Who This Applies To

This applies when the goaltender you enroll is under 13. We work out the child’s age from the date of birth you give us at enrollment.

A child under 13 does not enroll themselves and does not open their own account. You enroll them, you receive the app invitation, and you manage the account. Your child does sign in and use the app themselves once you have set it up — that is the point of the program — and Section 2 tells you exactly what they enter while they are in there.

2. What We Collect About Your Child

We collect only what the program needs. For a child under 13, that is:

You give us, at enrollment

• Name and date of birth — to confirm eligibility, place your child in the right group, and work out whether this notice applies.
• Apparel sizes — the jersey and shirt size for the gear included in the program.
• Medical and safety information — any conditions, injuries, or allergies you choose to tell us so we can train your child safely.

Your child enters, or the app records, while they use it

• Daily training check-in. Each day your child can log how they slept (hours and quality), how much energy they have, how sore they are and where, how they are feeling mentally, how they rated their own session, whether they were ill, and a short note about it. This is your child’s own self-report about how their body and mind feel. It is the most personal thing in the app, which is why Section 4 says it is never shared with anyone outside CGG.
• Journal entries and quick notes. Your child can write freely in a private journal. Only your child and their coach see it. You can see it only if your child turns that on — it is off by default, and turning it on shows entries from that point forward, not past ones.
• Written answers in mindset activities. Short reflection answers your child types as part of the mental-training work.
• Training video and coaching notes. Video of on-ice and off-ice sessions, plus your coach’s development notes. If you have separately consented, your child can also upload video of themselves for review. Video is never run through facial recognition or any automatic identification system.
• A profile photo, if your child uploads one. This is optional. If your child uploads a photo, it is a photo of a child and we treat it as personal information. It is visible to your child, to you, and to their coach — and to nobody else, ever.
• App activity — which lessons and drills they open, which challenges they finish, their check-in streak, and reminder settings including their time zone.
• A Development Score. We calculate a weekly score from the information above. It is a number we compute, not something your child types.

We do not ask a child under 13 for a home address, a phone number, a school name, or a social media account, and we never require more than the program actually needs.

3. What We Use It For

• To run the program, coach your child, and track their development
• To keep your child safe in training and respond if something happens
• To schedule sessions and give access to the app
• To talk to you, the parent, about your child’s program

We never use a child’s information for marketing or advertising, and we never sell it. Marketing emails go only to your address, and only if you separately opt in.

4. Who Else Sees It

We share a child’s information with the companies that make the program run, and only as much as each one needs:

• Stripe — payment processing. Stripe handles your payment details; it does not need your child’s data for billing.
• Acuity Scheduling — session booking. Acuity sees your child’s name, to match sessions.
• Supabase — the secure database behind the app. It stores the training-app profile and everything in Section 2 that lives in the app.
• Vercel — hosting the application itself. It processes technical request data as the app runs.
• Mux — video hosting and processing. It stores and prepares your child’s training video for secure, coach-only playback. The video is not run through facial recognition or any automated identification system.
• Resend — sending you transactional email, such as the enrollment confirmation and app invitation.
• Sentry — error monitoring, so we can find and fix crashes. It receives technical error reports and is configured not to send IP addresses, cookies, or form contents.

Each provider is contractually bound to use the information only to do its job for us, never for its own purposes.

We share with nobody else. We do not sell a child’s information, we do not disclose it for anyone else’s marketing, and we do not give it to any other third party except where the law requires it or to protect someone’s safety. There is no messaging feature in this app, and nothing your child enters is ever shown to another family.

5. How We Obtain Your Consent

We obtain verifiable parental consent in two steps before a child under 13 gains access to the training app:

• At enrollment — you, the parent or legal guardian, provide your own identifying information, agree to the Terms of Service and this notice, and complete payment with a payment card. Payment provides the child’s scheduling access.
• Before app content access — we send you a confirmation request through a unique, time-limited link tied to your email. Your confirmation on that link is the verifiable parental consent that unlocks the child’s access to app content. Until you complete this step, the child does not receive app content access.

If we ever learn that we have collected personal information from a child under 13 without this consent, we will delete it promptly.

6. Your Rights as a Parent

At any time, you may:

• Review what we hold. Ask us for everything we have about your child and we will send you a readable copy — including check-ins, journal entries, activity answers, film, and scores. We will tell your child that you asked, because they should not learn it later.
• Correct it. Tell us what is wrong and we will fix it.
• Delete it. Ask us to delete your child’s information and we will delete it, except for the narrow records we are legally required to keep (for example, financial records). We will tell you what we kept and why.
• Refuse further collection. Tell us to stop collecting new information about your child while keeping what we already hold. Where a part of the program cannot run without a particular kind of information, we will tell you which part stops working rather than quietly degrading it.
• Withdraw a consent without withdrawing the others. The program consent and the film-submission consent are separate. Withdrawing the program consent may end your child’s participation, and we will say so before you confirm.

To make any of these requests, email [email protected] with “COPPA Request” in the subject line. We may ask you to confirm you are the child’s parent or guardian before we act. We respond within 30 days, and we will confirm in writing when the request is complete.

7. How Long We Keep It

We keep a child’s information only as long as we need it for the reason we collected it, and then we delete it. We do not keep a child’s information indefinitely.

• Training record — daily check-ins, mindset activity answers, routine and workout logs, training video and film reviews, session notes and coach feedback, and the Development Score history: while enrolled, then 24 months after the last active enrollment ends.
• Journal entries and quick notes — your child’s private writing: while enrolled, then 12 months. This is deliberately the shortest window in the policy.
• Enrollment record — name, date of birth, and guardian links: 24 months after the last active enrollment ends.
• A profile photo: deleted with the profile, and a replaced photo is deleted immediately on replacement.
• An app invitation that is never accepted: deleted 30 days after it is issued.
• Consent records — this notice and the film-submission consent, with the exact text you saw: 7 years after the consent ends. We keep proof of your permission longer than the data the permission covered.

The full policy, including how deletion works and what happens if you cancel, is published at cggoaltending.com/retention.

8. What This App Does Not Promise

We would rather be accurate than reassuring.

• This is not a monitored service. If your child writes something concerning in the app, it is read by their coach when he is at his desk — there is no live supervision and nobody is watching in real time. We aim to review anything flagged within 24 hours.
• We do not moderate messages, because there are none. Nothing your child types is visible to any other child or family, so there is nothing to police.
• If something is urgent, do not use the app. Tell a parent or a trusted adult now. In the US you can call or text 988 (Suicide & Crisis Lifeline) any time.

9. Contact Us