Last Updated: October 3, 2026
The short version
This summary is here to help you read the page. The full text below is what applies.
The Crib is operated by Omed Hossaini, carrying on business as "TheCrib – plateforme sportive" (Sole proprietorship), NEQ 2281774812. We are the controller of personal information collected through the Service.
Business address: Sainte-Catherine, Quebec, Canada
This Policy explains how we collect, use, disclose, store, and protect personal information when you use TheCrib website, app, and related services.
Depending on your location, we process personal information based on one or more of the following:
We do not sell personal information. We may share information with:
A coach can choose to publish a team page (thecrib.ca/t/...) and a club can publish a league page. Anyone with the link can see what is on it, and search engines may index it. Nothing is published until the coach or club does it.
Youth teams (any player under 18): schedule, scores and standings. A roster only if the coach turns it on, and then only first name, last initial and number. No photos, no player pages, no per-player stats.
Adult teams (the coach confirms every player is 18 or older): full names, photos, box scores and a page per player. Any player can choose "hide me" in their own settings and then appears as on a youth team.
The coach or club can take the page down at any time. Copies kept by search engines or other sites can take time to disappear and are outside our control.
Our data is hosted with Google Firebase in the “nam5” multi-region, which is located in the United States. Personal information is therefore processed outside Quebec and Canada and may be subject to United States law. We use the contractual and organizational safeguards required by applicable law. If Canadian hosting is a requirement for your organization, tell us before you sign up.
We keep personal information only as long as necessary for the purposes described in this Policy. In practice: when a coach removes a player from a team, that player's roster entry and contact details are deleted immediately. When a team is deleted from Settings, the team and everything in it (roster, attendance, payments, evaluations, messages) is deleted immediately. When an account is deleted, it is removed from authentication and its personal data is deleted within 30 days, except anything we are legally required to keep. Backups roll over within 30 days. Both deletions are things you can do yourself, from Settings, without asking us.
We use reasonable technical and organizational safeguards, including:
No online service is completely secure, but we continuously improve controls to reduce risk.
If there is a security breach involving personal information that creates a real risk of significant harm, we will notify the people affected and the relevant authorities (including the Office of the Privacy Commissioner of Canada and, in Quebec, the Commission d'acces a l'information) as soon as feasible, and we will say what happened, what data was involved, and what we are doing about it. We will also notify the responsible coach of any team affected.
The Service is not intended for direct use by children as account holders. Accounts are created by adult coaches and team staff.
Coaches enter information about players, including minors, to run their team (name, photo, attendance, evaluations, statistics). When a coach adds a player, they must confirm they have consent from the player or, for a minor, from a parent or legal guardian. We keep a timestamped record of that confirmation.
Under 14 (Quebec, Law 25): under Quebec's Law 25, personal information about a minor under 14 is only collected, used, or disclosed with the consent of a parent or the person having parental authority. A player under 14 does not create their own account: a parent or guardian creates it and consents, and a coach who adds a player under 14 confirms they hold that consent. Minors aged 14 to 17 may consent for themselves.
Elsewhere in Canada (PIPEDA): outside Quebec, the Personal Information Protection and Electronic Documents Act (PIPEDA) applies. It sets no specific age, but we treat consent from a parent or guardian as required for any player under 14, the same line as in Quebec, and the coach who adds the player confirms they hold it. The same timestamped record is kept.
Parents or guardians can contact us at contact@thecrib.ca to access, correct, or request deletion of a child's information.
Subject to applicable law, you may request to:
To exercise rights, contact: contact@thecrib.ca (put "Privacy" in the subject). We answer within 30 days.
For Quebec privacy matters, the person responsible for personal information is Omed Hossaini. We maintain a process for confidentiality incidents and will provide notices required under applicable law.
On the website we use cookies and browser storage to keep you signed in and remember your preferences (theme, team, language). Analytics (Firebase Analytics and Vercel Analytics) load only if you accept them. The iPhone app has no analytics. Details are in our Cookie Policy.
We may update this Policy from time to time. If we make material changes, we will update the Last Updated date and post the revised version.
If you have privacy questions or requests, contact us at:
TheCrib – plateforme sportive (NEQ 2281774812)
Privacy contact: Omed Hossaini
Sainte-Catherine, Quebec, Canada
Email: contact@thecrib.ca
This email is used for both privacy and support requests.