Privacy Policy

We collect:

• Your email and password when you create an account.
• Player information you provide (name, program, years played).
• The reviews, ratings, and other content you submit.
• Basic usage data needed to operate and secure the site.

We do not store government ID images, biometric data, or payment credentials. Identity documents are processed by Stripe Identity and never touch our servers; payments are processed by Stripe. We store only the verification result and the associated session identifier — never the underlying documents or card details.

We use your data to:

• Verify your identity as a former D1 player.
• Display your contributions on the platform.
• Email you about your account and important platform updates.

As the platform grows, contributions may also feed aggregate, program-level views; any such feature is introduced transparently.

We never sell individual review data to schools, conferences, or third parties. Aggregate, non-identifying data may be displayed publicly. Your identity is protected unless you choose to display your real name.

By default you are pseudonymous on CFA — you appear under a system-generated pseudonym rather than your real name. The intended control lets you switch between anonymous and named through your account settings; when that toggle is live, the choice applies to your contributions.

You can request closure of your account or deletion of your data by contacting us at mason@collegefootballalum.com. Account self-service controls are planned; until they ship, requests are handled directly.

CFA relies on the following service providers:

• Render (Postgres hosting)
• Cloudflare R2 (file storage)
• AppSignal (monitoring and error tracking)
• Stripe (payments and identity verification)
• Resend (transactional email)