Privacy Policy

EB Sports Recruiting ("we," "us," or "our") respects your privacy and is committed to protecting the information you share with us. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to the website at ebsportsrecruiting.com, the Athlete Portal, and any related services we provide.

1. Who We Are

EB Sports Recruiting is an Ohio-based recruiting services business operated by Eric Brown, located in Columbus, Ohio. We help high-school student-athletes and their families navigate the college recruiting process. You can reach us at eric@ebsportsrecruiting.com or (614) 316-0120.

2. Information We Collect

2.1 Information you give us

• Contact form submissions. When you fill out the form on our Contact page, we collect: parent or guardian name (first and last), relationship to the athlete, email address, phone number, athlete name (first and last), date of birth (optional), graduation year, sport, primary position, high school, and any free-text message you choose to include. Each submission automatically creates a preliminary athlete record in our recruiting database (initially marked Inactive) so Eric can begin reviewing it.
• Athlete profile and recruiting data. If you become a client, we collect more detailed information about the athlete: academic record (GPA, test scores, transcripts), athletic measurables and statistics, sport-specific data, recruiting history, video film links, photos, social-media handles, college list, and ongoing communication with college coaches.
• Family / guardian contacts. Each athlete record may include contact information for up to four (4) parents, stepparents, or legal guardians: name, relationship, email addresses, phone numbers, and mailing address. Up to five (5) of those emails can be granted Athlete Portal sign-in access at the family's request.
• Recruiting service agreements. When you sign a Recruiting Services Agreement, the executed document is stored in our private cloud storage and linked to the athlete record for our records and yours.
• Membership and billing information. If you purchase services, we collect plan selection, payment status, invoice history, and billing-related notes. Card and bank details are handled by Stripe (see Section 3 below) — we do not store full card numbers on our servers.
• Athlete portal account info. If a family member is invited to the portal, we collect their email and their relationship to the athlete (parent, stepparent, guardian, family, athlete, other).
• Scheduling information. If you book a call through our scheduling tool, that data is handled by Cal.com.
• Communications. Email, text messages, voicemails, in-person meeting notes, and similar communications between us and the family. Both Eric and authorized family members can log coach-communication entries from within the recruiting system.

2.2 Information collected automatically

• Site analytics. We use Cloudflare Web Analytics to understand how visitors use the site. Cloudflare collects basic, anonymized data such as IP address, browser type, referring URL, and pages viewed. We do not run advertising or behavioral-tracking cookies.
• Contact form metadata. When you submit the contact form, we automatically log your IP address and browser user-agent string. This is used to detect spam, enforce rate limits, and provide basic abuse protection. We do not use this data for advertising, profiling, or any purpose other than securing the form.
• Internal audit log. Within our admin system (RecruitTrack), we keep a log of administrative actions — who changed what, and when — for accountability and security. The audit log is visible only to administrators and is never shared outside the business.
• Authentication. When a family or admin signs in to the Athlete Portal, our authentication provider (Supabase) sets a session cookie or token to keep them signed in. Authentication emails (magic-link sign-in links) are delivered via Resend (see Section 3).

3. Third-Party Services We Use

We rely on a small number of trusted service providers to operate our site and services. These providers process your data on our behalf:

• Supabase — secure cloud database hosting and authentication for the recruiting database, athlete portal, generated agreement files, and weekly data backups.
• Resend — transactional email delivery. Resend sends our magic-link sign-in emails and any account notifications from eric@ebsportsrecruiting.com. Resend receives only the recipient address, sender address, subject, and email body needed to deliver the message.
• Stripe — payment processing. Stripe receives and stores your card or bank details; we receive only payment-confirmation data and we never store full card numbers.
• Cal.com — meeting scheduling. Cal.com stores your scheduling preferences and meeting history.
• Cloudflare — site hosting, security, and anonymized analytics.
• Microsoft 365 / Outlook (via GoDaddy) — Eric's calendar and email mailbox at eric@ebsportsrecruiting.com, which receives correspondence, scheduling notifications, and payment confirmations.
• Netlify — static site hosting for ebsportsrecruiting.com.

Each of these providers has its own privacy policy that governs how it handles your data. We do not control those policies. We have selected providers we believe maintain reasonable security and privacy practices.

4. How We Use Your Information

We use the information we collect to:

• Provide and improve our recruiting services to engaged families;
• Respond to inquiries from prospective families;
• Communicate with athletes, families, and college coaches on behalf of our clients (with the family's authorization);
• Process payments and manage memberships;
• Schedule and manage evaluation calls and check-ins;
• Publish public-facing athlete profiles when the family has authorized it (see Section 6);
• Comply with NCAA, NAIA, OHSAA, and other governing-body rules;
• Detect and prevent fraud or misuse of our services;
• Comply with legal obligations.

5. How We Share Your Information

We do not sell your information. We share it only in the following circumstances:

• With college coaches and programs, on behalf of athletes we represent, as part of the recruiting service.
• With our service providers listed in Section 3, only to the extent needed for them to provide services to us.
• With family members authorized by the family to access the Athlete Portal.
• If required by law, such as in response to a valid subpoena, court order, or government request.
• In a business transaction, if EB Sports Recruiting is acquired or merges with another business, your data may be transferred as part of the transaction (and will continue to be protected by a privacy policy at least as protective as this one).

6. Public Athlete Profiles

We may publish a coach-facing public profile at a URL such as ebsportsrecruiting.com/athlete-profile.html?id=..., both for engaged clients and for athletes who create a Free Athlete Profile themselves. These public profiles are opt-in. For engaged clients, the family must approve publication. For Free Athlete Profiles, publication is chosen by the registrant at signup. In both cases the athlete and their family can turn the public page on or off themselves at any time from the Athlete Portal, and Eric can do the same from our admin system. Public profiles show only athletic and bio information that's safe to share with coaches (athlete name, sport, position, measurables, jersey number, high school, graduation year, GPA / SAT / ACT if provided, highlight film links, sport stats, and athletic social-media handles such as Hudl, MaxPreps, Twitter/X, Instagram, YouTube, MileSplit, and Athletic.net). They do not show date of birth, gender, athlete or family contact info, parent or guardian details, the family's college list, internal recruiting notes, coach communication history, agreement files, or any payment information. The family can unpublish a profile themselves from the Portal at any time, and Eric can also unpublish it instantly.

Search engines. While a profile is published, it can be crawled and listed by search engines such as Google, which means it may appear in search results for the athlete's name. This applies only to the fields chosen as visible; hidden fields are stripped out before the page is sent, so they are never available to a search engine or to anyone viewing the page. Unpublishing a profile takes the page down immediately, but search engines may take several weeks to drop a listing they have already indexed, and that timing is outside our control. If you need a listing removed faster, contact us and we will help you submit a removal request to the search engine.

7. Children's Privacy (COPPA)

Our services are intended for student-athletes age 13 and older. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If a child under 13 will be an athlete client, the parent or legal guardian must sign our Recruiting Services Agreement and explicitly consent to the collection and use of the child's information for recruiting purposes.

If you believe we have collected information from a child under 13 without proper consent, please contact us at eric@ebsportsrecruiting.com and we will delete that information promptly.

8. Data Security

We use commercially reasonable security measures to protect your information, including:

• Encrypted data storage with Supabase (TLS in transit, encryption at rest);
• Row-Level Security policies that restrict each family to only their own athlete's data;
• Admin access limited to Eric Brown and any explicitly authorized staff;
• PCI-compliant payment processing via Stripe (we do not store full card numbers);
• Automatic database backups and disaster recovery.

No system is perfectly secure. While we take reasonable precautions, we cannot guarantee that unauthorized parties will never gain access to your information. If a data breach involving your personal information occurs, we will notify you as required by Ohio law (Ohio Revised Code 1349.19).

9. Data Retention

We retain your information for as long as it is needed to provide our services to you, and for a reasonable period after — typically up to seven (7) years — to comply with legal, accounting, and dispute-resolution obligations. After that period, we delete or anonymize your data, except where longer retention is required by law.

If you stop being a client, we may retain limited record-keeping data (such as past invoices) for the period required by Ohio law and the IRS. You can request earlier deletion of records that are not legally required to be kept; see Section 11 below.

10. Cookies and Tracking

We use a small number of cookies and similar technologies:

• Authentication cookies from Supabase to keep you signed in to the Athlete Portal.
• Anonymized analytics from Cloudflare Web Analytics, which does not use third-party cookies or build advertising profiles.

We do not use advertising trackers, social-media trackers, or cross-site behavioral cookies. Most browsers let you block or delete cookies through their settings; doing so may prevent the Athlete Portal from working.

11. Your Rights and Choices

You have the right to:

• Access your information — request a copy of what we hold about you or your athlete;
• Correct inaccurate or out-of-date information;
• Delete your information (subject to legal record-keeping requirements);
• Withdraw consent for things you previously approved (e.g., publishing a public athlete profile);
• Opt out of marketing emails by replying with "unsubscribe" or contacting us directly;
• Lodge a complaint with the Ohio Attorney General's Office or applicable regulator.

To exercise any of these rights, email eric@ebsportsrecruiting.com. We will respond within thirty (30) days.

12. California, Virginia, and Other State Residents

If you are a resident of a state with a comprehensive consumer privacy law (California, Virginia, Colorado, Connecticut, Utah, or similar), you may have additional rights, including the right to know what personal information we have about you, the right to delete that information, and the right to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information for cross-context behavioral advertising. To exercise any state-specific privacy rights, contact us at the email above.

13. International Users

Our services are intended for use in the United States, and we serve families nationwide. If you access our site from outside the U.S., your information will be transferred to and processed in the United States, which may have different data-protection laws than your country of residence.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top. Material changes will be communicated by email to active clients or by a clear notice on the site. Continued use of the site or our services after an update constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please reach out:

EB Sports Recruiting
Attn: Eric Brown
Columbus, Ohio
Email: eric@ebsportsrecruiting.com
Phone: (614) 316-0120