Privacy notice

The shape of the thing

Athlete Passport issues verified athletic records. A record is opened by the athlete (16 or older), by a parent or guardian at any age, or by a club that issues a roster. Accounts belong to people; passports belong to athletes; the two are kept separate so a record can outlive the address that opened it.

What we collect

• Identity of the record — name, class year, positions, school, club, city and state, height, weight, GPA if you choose to file it, photograph if you choose to file one.
• Date of birth — used once to decide who may hold the record, and to nothing else. It is never published, never shown on any page, and never leaves the database.
• Performance entries — the numbers, dates, sources and verification signatures that make up the record.
• Your email address — to sign you in and reach you. Never published, never sold, never shown on a record.
• View events — when a passport page is opened, we log that it was opened, with the referring page and how the link traveled. This is shown to the bearer as their view count. We do not log who viewed it.

We do not ask for street addresses, phone numbers, government identifiers, or payment details. Location on a record stays at city level.

What is published

A passport is unlisted: reachable by its link, excluded from search engines by instruction on every page, listed in no directory. The page shows what a coach needs — identity fields, performance entries with their verification tier, film, teams, milestones, academics — and nothing else. GPA can be hidden from the public record at any time from the desk.

Minors

Under 16, a record is opened and held by a parent or guardian — the athlete does not hold their own login. Claiming or opening a record for a minor records the guardian’s consent, with the version of this document that was agreed to. A birthdate is required precisely so this rule cannot be guessed around.

Who else touches the data

• Supabase hosts the database and file storage.
• Vercel serves the site.
• Resend delivers our email (sign-in links).
• Sentry receives error reports when something breaks. Error reports are configured to exclude IP addresses, request bodies, and user identifiers — a crash must never be how a bearer’s details leave the system.

Nothing is sold. No advertising, no data brokers, no rankings built from your record, no sharing with anyone not listed here.

Erasure

A record can be erased on request by whoever holds it. Erasure removes the athlete’s record; what survives is the consent ledger itself — the evidence that consent was given and by whom, kept with the passport number but severed from the erased record. Write to privacy@myathletepassport.com and a person will answer.

Changes

This notice is versioned. Every consent names the version that was agreed to, so “what did I agree to” always has an answer. A material change means a new version, and new consents name the new version.