Prospect Card is made by Alfred Digital LLC, a company registered in New York. It turns a player's information into a single card a college coach can open from a link. Most of the people it describes are minors, so this policy is written to be read by their parents.
Questions, corrections, or a request to delete something: help@alfred-digital.com.
A player's own contact details are never published
A player's own email address and phone number never appear on a shared card. They are stored, because the club needs a way to reach the family, and they are visible to the coaches and administrators at that club. They are not on the card a stranger can open.
What a coach may see instead is an adult: the parent, or the organization. That only happens when two separate things are both true — a parent chose it on the intake form, having been told where it would appear, and the organization enabled contact for that player's team. Either one alone publishes nothing, and both start switched off.
A player's social media handles work the same way: they appear only if a parent ticked that box, and they are shown as plain text rather than as links.
What we collect
From the account holder (a parent, a coach, or an organization administrator — always an adult): an email address, used to sign in with a one-time code. There is no password.
About a player: name, headline, positions, jersey number, graduation year, school, hometown, height and weight; academic details if entered (GPA, SAT or ACT score, intended major, NCAA ID, honors); batting, pitching and fielding statistics; team affiliations; a photo; highlight videos, either links to YouTube or Vimeo or files uploaded to us; letters of recommendation, which may include the writer's name, title and email address and a PDF or video (the writer's name and title appear on the shared card; their email address never does — a coach who wants to reach them goes through the club); and the player's own email, phone and social handles, held under the rules described above. Coaches and administrators can also write private notes, which are never shown on a card.
From a parent intake form: everything a parent chooses to submit, plus the parent's name and email and a record that they gave consent. This sits in a private review queue and touches nothing until an administrator approves it.
From a player's private link: videos and proposed changes to their own card, which wait for a coach or administrator to approve them.
About organizations: name, city and state, contact email and phone, website, a logo, and a manual income and expense ledger if the club uses one. We collect no payment details for that ledger — it is a notebook, not a payment system.
When a card is viewed: a count of how many times a share link has been opened, and when it was last opened. No identity, no location, no visitor profile.
Payments: handled by Stripe. Card numbers never reach our servers; we keep Stripe's customer and subscription identifiers so we know what an account is entitled to.
Who can see a card
- A card is reachable only through a private link containing a long, unguessable code. There is no public directory of players anywhere in the app, and no way to browse or search for one.
- Card pages tell search engines not to index them, and the site's
robots.txtasks crawlers to stay away. - Anyone holding the link can open it. That is what makes it useful to send to a coach — and it means a link forwarded onwards works too. Treat it as you would a phone number.
- The organization can deactivate a card at any time, which breaks the link immediately. Photos and video stop being retrievable at the same moment.
- Inside a club, a player's full record is visible to that club's administrators and to the coaches of their teams. Other organizations using Prospect Card cannot see it — the database denies access by default.
Who we share it with
We do not sell, rent or trade anyone's information. Not to advertisers, not to recruiting services, not to data brokers. We do not use what you store here to train AI models, and we show no advertising.
We use these companies to run the product, and they receive only what their job requires:
- Vercel — hosting. Receives the IP address, browser and URL of every request.
- Supabase — database, sign-in and file storage. Holds everything listed above.
- Stripe — payments. Receives the account holder's name, email and billing address.
- Resend — sends the emails the app sends: a card to a coach when someone chooses to send one, a video-drop invitation a coach asks for, and review alerts to coaches. No marketing email.
- Sentry — error monitoring. Receives stack traces, URLs and browser details, and records a session replay only when an error occurs, never during ordinary use, with text and images masked by default.
- Google Fonts — the site loads its typefaces from Google when a page opens, which tells Google the visitor's IP address and browser.
All of these operate in the United States. We may also disclose information if the law requires it.
How long we keep it
A card and its files stay until the account holder deletes the player or the organization removes them. Deleting a player immediately stops the card and its photos and video being reachable by anyone holding the link.
Parent intake submissions do not sit in the review queue forever. Rejected submissions are deleted after 30 days, and submissions nobody has reviewed after 90 days — the row and the photo together. An approved submission is not deleted — by then it is part of the player's card. The clearing runs daily, and again whenever an administrator opens the queue.
Your choices
- Correct or remove anything: contact the organization that holds the card, or email us. An administrator can correct, remove or deactivate a player's information.
- Change who a coach may contact: a parent can submit the intake form again with a different choice, or ask the club to change it.
- Get a copy: email us and we will send what we hold about you or your player.
- Delete an account: email us and we will delete it and the cards it manages.
Children
Accounts belong to adults — parents, coaches and organization administrators. Players do not create accounts and cannot sign in. A player's own private link lets them add a video or propose a change to their card; nothing they send appears anywhere until an adult approves it.
Prospect Card does not ask for a player's date of birth and stores no age. Where an organization uses it for younger players, contact details stay switched off — the card shows video, statistics and a design, and nothing a stranger could use to reach the child.
Security
Access to every table is denied by default and granted by explicit rule, so one organization's data is not reachable from another's account. Photos and videos live in private storage and are served through short-lived links. Uploaded photos from an intake form are quarantined until an administrator approves them. Sign-in is by one-time code; we store no passwords. No system is perfect, and we do not claim otherwise.
Changes
If we change this policy in a way that matters, we will say so in the app before it takes effect. The date at the top is when the current version started.
Contact
Alfred Digital LLC, New York. help@alfred-digital.com