Privacy Policy

We collect:

• Your email and password when you create an account.
• Player information you provide (name, program, years played).
• The reviews, ratings, and other content you submit.
• Basic usage data needed to operate and secure the site.
• Device and usage information collected through cookies and similar technologies — see Cookies, Analytics, and Advertising.

We do not store government ID images, biometric data, or payment credentials. Identity documents are processed by Stripe Identity and never touch our servers; payments are processed by Stripe. We store only the verification result and the associated session identifier — never the underlying documents or card details.

We use your data to:

• Verify your identity as a former D1 player.
• Display your contributions on the platform.
• Email you about your account and important platform updates.

As the platform grows, contributions may also feed aggregate, program-level views; any such feature is introduced transparently.

We never sell individual review data to schools, conferences, or third parties. Aggregate, non-identifying data may be displayed publicly. Your identity is protected unless you choose to display your real name.

We use cookies and similar technologies to keep you signed in, to understand how the site is used, and to measure our advertising.

• Analytics. PostHog records the pages you visit and the actions you take on CFA, so we can see what’s working and fix what isn’t.
• Advertising measurement. We advertise on X (formerly Twitter) and use the X pixel and X’s Conversions API to measure how those ads perform. When you visit CFA, the X pixel may share information with X such as the pages you view, your IP address, your browser and device details, and an identifier from an X ad you clicked. If you sign up, pay the verification fee, or are approved, we may also send X a one-way hashed (scrambled) version of your email address, together with that ad identifier, so X can match the action to an ad.

X uses this information under its own privacy policy, which may include showing you more relevant ads. We never share your reviews, Pulse answers, verification results, or real name with advertisers.

• Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sharing for advertising: we don’t load the X pixel, and we don’t send X any information about you, including if you sign up.
• Your browser. You can block or delete cookies in your browser settings.
• X. You can limit personalized ads in your X account under Settings → Privacy and safety → Ads preferences.

Questions about advertising or your data? Email us at mason@collegefootballalum.com.

By default you are pseudonymous on CFA — you appear under a system-generated pseudonym rather than your real name. You can switch between anonymous and named at any time in your account settings; the choice applies to your contributions.

You can close your account and delete your data at any time from your account settings. You can also request closure or deletion by contacting us at mason@collegefootballalum.com.

CFA relies on the following service providers:

• Render (application hosting)
• Neon (database hosting)
• Cloudflare R2 (file storage)
• AppSignal (monitoring and error tracking)
• Stripe (payments and identity verification)
• Resend (transactional email)
• PostHog (product analytics)
• X (advertising measurement)