Privacy Policy

We collect:

• Your email and password when you create an account.
• Player information you provide (name, program, years played).
• The reviews, ratings, and other content you submit.
• Basic usage data needed to operate and secure the site.

We do not store government ID images, biometric data, or payment credentials. Identity documents are processed by Stripe Identity and never touch our servers; payments are processed by Stripe. We store only the verification result and the associated session identifier — never the underlying documents or card details.

We use your data to:

• Verify your identity as a former D1 player.
• Display your contributions on the platform.
• Email you about your account and important platform updates.

As the platform grows, contributions may also feed aggregate, program-level views; any such feature is introduced transparently.

We never sell individual review data to schools, conferences, or third parties. Aggregate, non-identifying data may be displayed publicly. Your identity is protected unless you choose to display your real name.

By default you are pseudonymous on CFA — you appear under a system-generated pseudonym rather than your real name. You can switch between anonymous and named at any time in your account settings; the choice applies to your contributions.

You can close your account and delete your data at any time from your account settings. You can also request closure or deletion by contacting us at mason@collegefootballalum.com.

CFA relies on the following service providers:

• Render (Postgres hosting)
• Cloudflare R2 (file storage)
• AppSignal (monitoring and error tracking)
• Stripe (payments and identity verification)
• Resend (transactional email)