Blue Line NHL Projections 2026-27
Free for the whole 2026-27 season. Create an account and everything is open: your pool's rules, live draft, my team, export. A bug, an idea? Write to us.

Privacy Policy

Blue Line · effective September 14, 2026, updated September 29, 2026 · person in charge of personal information: Alexandre Gobeil-Hébert, Vice-President, ASGO (Boréal.IA Inc.), confidentialite@asgo-ia.ca

What ASGO keeps, and why

Without an account, ASGO keeps nothing that identifies you. The application does count visits, without identifying you, on its own servers: the section Cookies and measurement says exactly what, how, and for how long. Your theme, language and display choices stay in your browser, on your device.

With an account, ASGO keeps, on its servers:

  • your email address, and whether it has been verified — it is your identifier; if you sign in with Google, or with Microsoft when that door is offered, the technical identifier that provider passes to us, and nothing else;
  • your pools: their rules, structure, your draft picks and trades — so you find them on every device;
  • the state of your membership, as confirmed by Stripe, and the activation code you attached to your account;
  • the agents (Claude, ChatGPT or other) you have authorised to read your projections, with the date of each authorisation; you can revoke them at any time from “My account”;
  • your open sessions, with a fingerprint of the IP address (never the address itself) and the browser used, to spot abuse; and a log of actions on the account (sign-in, deletion, invitation), with the date;
  • where your account came from: the name of the channel, and where applicable the code of the publication, that brought you the very first time — recorded once, at creation, and never rewritten;
  • if your account has access (membership, activation code or grant), the dates of the days you used the application — the date, and nothing else: no page viewed, no time of day, no visit count. These rows are erased after 90 days. They answer “how many people use what they took”, not “who looked at what”: that is what lets us see a non-renewal coming.

Payment

Stripe processes the payment and holds card data under its own policy; ASGO never sees it. Stripe passes to ASGO your email address, the customer identifier and the state of the membership, in payment notices that ASGO keeps as received (they may carry the name and billing address given at checkout). Accounting records tied to the membership are kept as long as tax law requires, even after the account is closed.

Retention

Account information is kept as long as the account exists. You close your account yourself from “My account”: access stops at once, sessions and authorised agents are revoked — their tokens are destroyed — and pending sign-in codes are erased. What closing does not erase, and why: your email address stays attached to the closed account, because the membership's accounting records refer to it and tax law requires keeping them; your pools and the account's arrival channel also remain. To have these erased, write to confidentialite@asgo-ia.ca: ASGO acts within 30 days, except for accounting records the law requires us to keep. A session is good for 30 days and a sign-in code for 10 minutes; their records are purged automatically 30 days after they expire.

Hosting

Account data is hosted in Quebec, at OVH in Beauharnois, on servers administered by ASGO.

Three providers located outside Quebec take part, each for one task: Resend sends the sign-in emails (your address and the content of the message pass through its servers); Stripe processes the payment; Google confirms your address if you choose to sign in with Google, and the Google button on the sign-in page is loaded from its servers. Microsoft will be added the day that door is offered. ASGO discloses your information to no other third party, unless the law requires it.

Cookies and measurement

Our own audience measurement

ASGO counts the visitors who arrive, those who re-rank players under their own rules, those who compare players, those who reach the end of the free tier, those who look at the plans and those who open the activation-code door — that is all, and those are six counts, not six files. No third-party tracking tool: no Google Analytics, no advertising pixel, no audience data leaving our servers.

Technically: your network address is never kept. What goes into the database is a pseudonym derived from it (hashed with a secret key, truncated) and re-salted every day — so that not even ASGO can recover the address or link your visits from one day to the next. Referral information is limited to the name of the site you came from: never the full page address, which can carry personal information. These rows are erased after 90 days.

One part of this measurement is not anonymous, and it only concerns accounts that have access: the dates of the days of use, attached to the account, described above. They follow the same 90-day rule.

Anti-abuse counters cap the volume of certain requests (sign-in code, payment); they rely on the same kind of hashed pseudonym, never on the address in clear.

Cookies

Four cookies at most, all set by ASGO, none for advertising, none tracking you from one site to another:

  • Your session, which keeps you signed in; unreadable by scripts, erased when you sign out.
  • Your first-visit origin, kept for 90 days, which records which channel brought you here the first time — the name of the channel and, where applicable, the code of the publication that brought you (an identifier of the post, never of you). It carries no visitor identifier: thousands of people share the same value, and it cannot recognise you or follow you elsewhere on the web. It is never rewritten.
  • A security cookie, for the duration of a Google sign-in (or a Microsoft one when that door is offered), which ties the provider's answer to the request made from your browser.
  • A technical cookie, short-lived, which secures the authorisation of an agent connected to your account (OAuth), for those who use that feature.

You may block or erase these cookies in your browser settings: the site keeps working without them — only signing in to an account and authorising an agent need theirs. No newsletter is sent without explicit consent.

Your rights

You may request access to your information, its correction or deletion, and withdraw consent, by writing to confidentialite@asgo-ia.ca. ASGO answers within 30 days. Should a privacy incident affect your information, ASGO will notify you and record it in the register required by law.

Terms of use · Back to the app