MatRecruit Privacy Policy

Effective date: 2026-06-14 Last updated: 2026-06-19 (retention windows pinned)

MatRecruit is operated by Matside Wrestling Co. ("Matside," "we," "us," or "our"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to your use of MatRecruit at matrecruit.org, matrecruit.com, and any related services.

MatRecruit is a recruiting platform for high-school wrestlers. A wrestler creates and controls their own MatRecruit profile. The platform also surfaces a wrestler's profile to college coaches at a public URL the wrestler can share. Because we serve high-school athletes — many of whom are minors — we handle personal information with care, and we operate in accordance with the U.S. Children's Online Privacy Protection Act ("COPPA"). For COPPA-specific details, see our separate Children's Privacy Policy (COPPA).

If you have questions about this policy or how we handle data, contact us at support@matside.org.

1. Who has accounts on MatRecruit

MatRecruit accounts are created by high-school wrestlers themselves. We require every account holder to confirm a graduation year within an active high-school recruiting window. Wrestlers under 13 are not permitted to use MatRecruit — see our Children's Privacy Policy (COPPA) for details on how that boundary is enforced and what we do if we learn an under-13 user has an account.

Parents and guardians are welcome to use MatRecruit alongside their wrestler — for example, to help build a profile or manage outreach to college programs — but the account itself belongs to the wrestler, and the email on file is the wrestler's primary point of contact for the service.

College coaches and other adults do not have separate "coach accounts" on MatRecruit at this time. Coaches view public profile pages without logging in.

2. Information we collect

2.1 Account information

When you create a MatRecruit account, we collect:

Your email address
Your graduation year (gated to an active high-school recruiting window — see §1 above)
Authentication metadata from our identity provider (Supabase Auth), which may include a one-time login link or a Google account identifier if you sign in with Google

We do not store passwords. Sign-in uses an email "magic link" or Google sign-in; there is no separate MatRecruit password to remember or to leak.

2.2 Profile information you provide

When you build out your MatRecruit profile, you may provide:

Your full name
Your hometown
Your weight class
Your wrestling styles (folkstyle, freestyle, Greco-Roman)
A profile photo
Athletic accolades (event placements, years)
Academic accolades (event placements, years)
Coaches' names and contact information — for both your school program and any club you wrestle for
Your tournament schedule (event name, date, location, style)
Highlight video links (YouTube)
Links to your social profiles on X, Instagram, Facebook, and TikTok

You decide what to include. Every profile field above is optional except the ones we explicitly mark required during profile creation.

2.3 Information about coaches that you add

When you add a coach to your profile — either your school coach or a club coach — you provide that coach's name and optionally their role, email, and phone number. You are responsible for confirming that you have permission to list a coach's contact information on a profile that may be made public. We treat coach information as part of your profile data; we do not separately notify or onboard coaches you list.

2.4 Private tracker information

MatRecruit includes a private recruiting tracker (separate from the public profile) where you can record the college programs you're interested in, status of outreach, contact dates, your own private notes, and similar planning information. Tracker information is private to your account — no other MatRecruit user, and nobody on the public internet, can see it. The technical controls behind this are described in §7 below.

2.5 Information we collect automatically

When you use MatRecruit, we automatically collect:

Basic technical information (browser type, device type, approximate location derived from IP address, pages visited)
Account activity (logins, profile changes, tracker mutations, publish/unpublish actions)
Application errors and performance signals, via our error-monitoring provider (Sentry)

Our error-monitoring tooling is explicitly configured not to capture personal information by default. We carry a runtime guard that scrubs email-, phone-, and SSN-shaped values from internal audit logs before they are stored. These technical safeguards are described in more detail in §7.

2.6 Information we receive from third parties

If you sign in with Google, we receive your Google account email and a stable identifier from Google to recognize you on return visits. We do not request, and do not receive, your Google contacts, calendar, drive, or any other Google service data.

3. How we use information

We use the information described above to:

Create and maintain your MatRecruit account
Build and display your athlete profile
Render your public profile page at a stable URL when you choose to publish it (see §4 below)
Operate your private recruiting tracker
Send transactional emails related to your account (sign-in links, notifications about your own actions, account-recovery communications)
Investigate problems you report, debug application errors, and improve the platform
Detect and respond to abuse or misuse of the service
Comply with legal obligations

We do not sell your information, and we do not use it to target you with advertising on MatRecruit or elsewhere.

4. Your public profile page

When you finish your profile and choose to publish it, MatRecruit generates a public URL at matrecruit.org/p/<your-profile-slug>. This URL is accessible to anyone on the public internet — including college coaches, scouting services, family members, and search-engine crawlers — without logging in.

A published profile renders the information you provided in §2.2 and §2.3 above: your name, hometown, weight class, styles, photo, accolades, listed coaches' names and contact information, tournament schedule, highlight videos, and social links. It does not render anything from your private tracker (§2.4), and it does not render the email or login metadata associated with your account.

You control whether your profile is published. While your profile is in draft, the public URL returns "not found" — there is no leak between "no such profile" and "exists but unpublished." When you unpublish, the public URL stops rendering again, and any profile photo you uploaded is removed from storage on unpublish.

Coaches you list on a published profile. If you publish a profile that lists a coach's email address or phone number, that contact information is visible at the public URL. You are responsible for the consent you have to list a coach's contact information publicly (see §2.3).

5. How we share information

We share information only in the limited circumstances below:

Service providers. MatRecruit is built on top of third-party platforms that process information on our behalf. These currently include Supabase (database, authentication, storage), Vercel (application hosting and CDN), Sentry (error monitoring), Resend (transactional email), and YouTube (when you embed highlight videos, your visitors load that video from YouTube's player). These providers process information only as needed to run their service for us, under their own terms.
Public profile pages. As described in §4, information you choose to publish on your public profile is visible to anyone with the URL.
Legal requests. We may disclose information if we believe in good faith that disclosure is required by law, court order, or other valid legal process.
Safety. We may disclose information if we believe in good faith that it is necessary to protect the rights, property, or safety of Matside, our users, or others.
Business transfers. If Matside Wrestling Co. is involved in a merger, acquisition, or sale of assets, your information may transfer to the surviving entity. We will notify you before your information becomes subject to a different privacy policy.

We do not sell your information.

6. Data retention

We retain account information for as long as your account is active. Active means your subscription is current OR you have signed in within the past 18 months.

Inactivity timer. A MatRecruit account is functionally tied to a recruiting cycle that ends at your stated graduation class year. Eighteen months past your stated class year, if your account has had no activity (no logins, no profile updates), we will send an inactivity-warning email to your account email at the 16-month mark, allow a 60-day grace period during which you can log in to reset the timer or export your data, and then permanently delete the account and all associated profile + tracker data.

User-initiated deletion. You can request account deletion at any time. If you ask us to delete your account, we delete your account record and your associated profile, accolades, coach entries, tournament schedule entries, highlights, social links, and tracker entries.

Tracker data on subscription cancellation. Cancelling your subscription does not delete your tracker data — your tracker history is preserved so that if you re-subscribe later, your previous tracker entries are restored. Tracker data is deleted only if you request account deletion OR if the 18-month-past-class-year inactivity timer fires.

Audit log. Internal audit-log entries that record account-changing actions are retained on a rolling 24-month schedule and are scrubbed of personal identifiers before storage as described in §7. After 24 months, audit-log entries are automatically deleted.

Service-provider logs. Application logs and error reports are retained on schedules set by our service providers (Sentry — currently 90 days; Vercel — per platform retention).

Stripe payment records. Stripe customer and subscription records are retained per Stripe + applicable tax law (typically 7 years).

If you delete your profile photo or unpublish your profile, the corresponding photo is removed from photo storage at that time.

The cross-product retention policy that this section mirrors is published at matside-hq:docs/legal/retention-policy-v1.md.

7. Security

We take the security of your information seriously and apply both technical and administrative controls. Specifically:

Database row-level security. Your profile, accolades, coaches, schedule, highlights, social links, and tracker data are stored with row-level security rules enforced at the database layer. The rules restrict mutations and tracker reads to the account that owns the data; the rules separately allow public reads of profile data only when the profile is in a published state.
Authentication. Sign-in uses Supabase Auth — either an emailed magic link or Google sign-in. We do not store passwords ourselves.
PII-aware error monitoring. Our error-monitoring tooling (Sentry) is configured with sendDefaultPii: false on every surface (server, client, edge) so that personal information is not collected by default in error reports.
Audit-log PII scrubber. When we write internal audit-log entries describing what happened during a server action, a runtime guard walks the entry's metadata and redacts any email-, phone-, or SSN-shaped string before the entry is stored. If a developer ever accidentally tries to log personal information, the guard catches it and our monitoring is alerted.
Owner-folder storage. Profile photos are stored with policies that restrict each user to writing only inside their own folder.

No system is perfectly secure. If we learn of a breach affecting your information, we will notify you in line with applicable law.

8. Children's privacy

MatRecruit is intended for high-school wrestlers in an active recruiting window. We do not knowingly collect personal information from children under 13. Our Children's Privacy Policy (COPPA) describes how the under-13 boundary is enforced, what happens if we learn an under-13 user has registered, and how a parent or guardian can contact us about a child's information.

9. Your choices

You can:

Edit your profile. Update name, photo, accolades, coaches, schedule, highlights, social links, and other profile information at any time from your account dashboard.
Unpublish your profile. Take your public profile page offline at any time. The URL stops rendering and your photo is removed from photo storage.
Delete information. Remove individual accolade entries, coach entries, schedule events, highlights, or tracker entries from the dashboard.
Request account deletion. Email support@matside.org to request deletion of your MatRecruit account. We will confirm the request and delete your account record and the data described in §6.
Ask us a question. Email support@matside.org at any time about how your information is being handled.

10. Cookies and similar technologies

MatRecruit uses cookies and similar storage on your device to:

Keep you signed in between visits
Remember settings within your account dashboard
Operate basic application features (CSRF protection, session continuity)
Help us investigate errors and performance issues via Sentry

We do not use third-party advertising or marketing cookies on MatRecruit.

You can clear cookies through your browser settings. Some MatRecruit features (notably sign-in) will not work if cookies are disabled.

11. Third-party services we use

The companies below process information on our behalf as service providers. We have summarized why each one is in the stack so that you can evaluate them if you wish.

Supabase — database, authentication, file storage
Vercel — application hosting and content delivery
Sentry — error monitoring and performance signals
Resend — transactional email delivery
Google — optional Google sign-in
YouTube — embedded playback for highlight videos you choose to include on your profile

When you embed a highlight video, the player is loaded by your visitors directly from YouTube. YouTube applies its own privacy policy and may collect information from visitors who load that player.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective date" and "Last updated" lines at the top of the document. Material changes will be summarized in-product or by email to the address associated with your account.

13. Contact

If you have questions about this policy, the data we hold about you, or your choices under it, contact us at:

Matside Wrestling Co. 10685-B Hazelhurst Dr. # 43104 Houston, TX 77043 USA Email: support@matside.org