This explains what EQUATOR collects, why, who sees it, and how to get it deleted. It is written in plain English on purpose. EQUATOR handles information about coaches, about players, and about minors on high school rosters, and a document that obscures any of that with legal language would be failing at the one job it has.
EQUATOR has three kinds of user, and what we hold about you depends on which one you are.
When your program signs up we store your name, email address, job title, your role on the platform, and which program you belong to. Your password is handled by Supabase Auth and we never see or store it.
We store what your program configures: your schemes, personnel packages, recruiting preferences, position needs, scholarship values, and the coaching grades you enter on players. We record when a program accepts the platform agreement and who accepted it.
We keep a log of actions taken in the War Room — who moved a player on the depth chart, who dismissed a priority — so a staff of several people can see what changed and who changed it.
Programs enter roster information about their players. That includes name, position, class year, jersey number, height, weight, athletic measurables such as a 40 time or vertical jump, game statistics, eligibility status, injury and medical status, and film links. For college programs it also includes athletic and academic aid amounts.
If you are a high school player who has claimed your own profile, we additionally store your email address, the login you use to sign in, your date of birth, and the consent you gave — and anything you submit yourself, such as your GPA, a short bio, or a film link. Anything you submit goes to your coach for approval before it appears on your profile; we keep a record of what you submitted, when, and whether it was accepted.
We store which college programs have viewed or expressed interest in a high school player, and whether a program has said it is attending a specific game.
High school rosters contain information about minors. We treat that as the most sensitive data on the platform.
A high school player claiming their own profile must confirm their date of birth. If they are 13 or older, they must acknowledge in plain terms that their measurables and film links will be visible to college coaching staff, and consent to that. If they are under 13, they cannot complete the process themselves: a parent or guardian has to give consent first, and we will not activate the account until that happens.
A player's date of birth is used for that check and for eligibility calculations. It is not shown to recruiting programs and is not part of any profile a coach sees.
A parent or guardian can ask us to delete everything we hold about their child at any time, and we will do it. Use the data deletion request page or email us directly.
Very little, and none of it for advertising. We set a session cookie so you stay signed in, and we store your light-or-dark theme choice in your browser. We do not use advertising cookies, tracking pixels, or third-party analytics that follow you across other sites. The cookie policy covers this in full.
When something breaks we record an error log entry: what failed, when, which route, and technical detail such as a truncated stack trace. We deliberately strip identifying detail out of these — for example a failed login rate-limit check records which limiter failed but not the email address involved.
We count recent attempts against sensitive endpoints such as login and password reset, keyed to the account being attempted, so that accounts cannot be brute-forced. These records are deleted after 24 hours.
EQUATOR collects roster information published openly by college athletic departments on their own websites. From those pages we extract position, height and weight — no names, no jersey numbers, no contact details.
That information is used in two ways: aggregated into conference-wide averages that let us score a player against others at the same position in the same conference, and summarised per school so a program can see the size and depth profile of an opponent it is scheduled to play.
We also maintain a public directory of programs, built from publicly available information, so that a program can find and claim its own profile.
To run the platform: showing your roster, computing the scores and projections the platform exists to produce, sending the emails you have asked for such as a weekly digest or a player invite, and letting your staff work in the same system at the same time.
To connect programs. A high school player's profile is visible to college programs, because that is the platform's purpose and the reason a high school program signs up. A college program's stated recruiting preferences may be visible to high school programs for the same reason.
To support and fix. We read error logs to find and repair problems, and we may look at your data if you ask us to help with something specific.
We do not sell your information. We do not use it to train advertising models. We do not share it with data brokers.
Other people at your own program see your program's data. That is what a shared platform is.
College programs on EQUATOR can see high school player profiles, including measurables and film. A college program's interest in a player is shown to that player and their program only when the college program chooses to identify itself — a program can look at a player anonymously, and when it does we tell the player that an unnamed program looked, never which one.
Anyone with a share link you generate can see the specific profile that link points to, until it expires. Share links are signed and time-limited, and you choose how long they last.
A high school player who has completed the consent step can create a link to their own recruiting card, to send to a college coach themselves. The card shows their name, school, position, height, weight, graduation year, combine numbers, film links and bio. It never shows GPA, game statistics, or any recruiting interest. Anyone with the link can see the card until it expires, and if consent is withdrawn every link the player created stops working.
High school players can see how many college programs in each division have posted a recruiting need at their position this season. Only division-level counts are shown, and a division appears only once at least three of its programs have a need there, so no individual school's recruiting plans can be read from it.
We use a small number of service providers to operate: Supabase for the database and authentication, Vercel for hosting, and Resend for sending email. They process data on our behalf and only to provide those services. Our internal documentation of every third-party service and what it receives is maintained in the repository as part of our due diligence.
We will disclose information if the law requires it. If that ever happens and we are permitted to tell you, we will.
Data is stored in Supabase, on infrastructure in the United States. Access is restricted at the database level: a program's rows are readable only by that program's own users, enforced by row-level security policies rather than by application code alone.
Passwords are hashed and managed by Supabase Auth. Administrative access to the platform is limited to the EQUATOR operator. Tokens for share links, unsubscribe links and player invites are cryptographically signed and expire.
No system is perfectly secure, and we would rather say so than imply otherwise. If we ever become aware of a breach affecting your data we will tell you.
Program and roster data is kept while your program has an account, and roster history is kept deliberately across seasons — being able to look at a previous season's roster is a feature, not an oversight.
Rate-limiting records are deleted after 24 hours. Resolved error logs older than 30 days are cleared.
If your program leaves the platform, contact us and we will delete your data. If you do nothing, we keep it, because a program that returns usually wants its history back.
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. A parent or guardian can do the same on behalf of a player under 18.
The fastest route is the data deletion request page, which sends your request straight to us. You can also email equatorfootball.jd@gmail.com. We will respond within 30 days and usually much sooner — EQUATOR is a small operation and requests come directly to the person who can act on them.
If you are a player, note that some of your roster information belongs to your program's records as well as to you. Where we cannot delete something without destroying your program's own records, we will tell you exactly what that is and why, rather than quietly doing part of what you asked.
Depending on where you live you may have additional rights under laws such as the GDPR or the CCPA. We honour deletion and access requests regardless of where you are, because maintaining two standards would mean deciding which users deserve less.
If we change this policy in a way that materially affects what we collect or who sees it, we will update the date at the top and tell account holders by email. We will not quietly broaden what we do with your data and leave you to notice.