Privacy Policy

Who we are

Starlight ("we", "us", "our") is Starlight Sports Inc., a Delaware corporation with its principal place of business at 25 Sylvan Rd S, Suite P, Westport, CT 06880. We operate starlightlax.com and the recruiting, game film and team communication tools available through it (the Services).

This policy explains what personal information we collect, why we collect it, who we give it to, and what you can do about it. It applies to athletes, parents and guardians, club and high school organizations, college coaches, and event companies.

Scope

This policy covers information we handle as a business. It does not cover:

• Information your school, club or organization holds about you independently of Starlight. If your club uploaded your roster, your club remains responsible for its own records.
• Information you give to a college program after they contact you. Once a coach reaches out and you correspond with them directly, that relationship is between you and the college.
• Third-party sites we link to. Their privacy practices are their own.

Information we collect

Information you give us

When you create an account or use the Services, we collect:

• Identity and contact information — name, email address, phone number, postal code, and a parent or guardian's email address where the account belongs to a minor.
• Athletic profile information — date of birth, graduation year, position, height, weight, jersey number, club and high school affiliations, academic information such as GPA and test scores where you choose to provide it, and the colleges you are interested in.
• Age and grade verification documents — where you use StarID verification, a birth certificate or government-issued identification and a transcript or proof of enrollment. See Age and grade verification below, which describes the additional protections that apply to these.
• Content you create — game film, highlight reels, clips, messages sent through team chat, and anything else you upload or post.
• Payment information — handled by Stripe, our payment processor. We receive confirmation of payment, the last four digits of the card and its expiry, but we never receive or store your full card number.

Information from organizations

Club and high school organizations, and event companies, may add athletes to rosters and upload film in which those athletes appear. When an organization gives us information about an athlete, the organization is responsible for having the right to do so, including any parental consent its own rules or applicable law require.

Information collected automatically

• Pages viewed, features used, and the time and duration of those visits.
• Device and browser information — device type, operating system, browser version, and screen size.
• IP address, and the approximate city or region derived from it. We do not collect precise GPS location.

How we use information

• To create and operate your account, and to authenticate you when you log in.
• To make athlete profiles and film available to the college coaches, organizations and event companies you have chosen to be visible to.
• To process payments, deliver purchased film, and manage subscriptions.
• To send messages you have asked for — team chat notifications, coach messages, film-ready alerts and order confirmations.
• To verify an athlete's age and grade so that coaches and event operators can rely on roster accuracy.
• To provide support, investigate problems, and keep the Services secure.
• To comply with law and enforce our Terms & Conditions.
• To improve the Services, using aggregated or de-identified information that does not identify any individual.

How we share information

We disclose personal information only as described here:

• With college programs. If an athlete's profile is set to be visible for recruiting, college coaches with Starlight accounts can view that profile and its film. Athletes and guardians control this setting and can turn it off at any time.
• With your organization. Coaches and staff at the club or high school an athlete belongs to can see that athlete's profile, film and team chat messages within their team.
• With event companies, for events the athlete is registered for, so that rosters, film and results can be produced.
• With service providers who process information on our behalf under contract and may not use it for their own purposes. These include Amazon Web Services (hosting, video storage and streaming), Stripe (payments), SendGrid (email delivery), Auth0 (login), and Sentry (error monitoring).
• For legal reasons — to comply with a subpoena, court order or other legal obligation; to enforce our terms; or to protect the rights, safety or property of any person. We will notify you of a legal demand for your information unless we are prohibited from doing so.
• In a business transfer. If Starlight is acquired or merges with another company, information may transfer as part of that transaction. We will give notice before your information becomes subject to a different privacy policy.

We do not sell your information

"Sell" and "share" here carry the meanings given to them by the California Consumer Privacy Act. If this ever changes we will update this policy, post a "Do Not Sell or Share My Personal Information" link, and — for athletes between 13 and 17 — obtain opt-in consent before any such sharing, as Connecticut and several other states require.

Athletes under 18

Most of the athletes on Starlight are minors. We treat that as the default case rather than the exception.

Under 13

We collect date of birth at registration. Where it indicates the athlete is under 13, we require the account to be set up by a parent or guardian, from their own verified email address, accepting these terms themselves. That is the verifiable parental consent required by the Children's Online Privacy Protection Act, and we record who gave it and when.

Accounts for athletes under 13 differ in one important way: they are not visible to college coaches. A parent's consent is enough for us to hold a young player's film and run their team features, but disclosing a child's information to third parties requires more, and college programs are third parties. Nothing is lost by this — recruiting contact rules put these players years away from being recruited.

As the parent or guardian of a child under 13, you may at any time:

• review the personal information we hold about your child;
• have it corrected or deleted;
• refuse to let us collect anything further, by closing the account.

We do not require a child to disclose more information than is reasonably necessary to use the Services. Email legal@starlightlax.com to exercise any of these, or if you believe a child under 13 has created an account without a parent.

13 to 17

Athletes aged 13 to 17 may create their own account. We ask for a parent or guardian's email address at registration and notify them that the account exists. A parent or guardian can request access to the athlete's profile so they can review, correct or delete information and control who the athlete is visible to, and where they hold that access we record their acceptance of our Terms & Conditions as well.

We do not use the personal information of any athlete under 18 for targeted advertising, we do not sell or share it, and we do not profile them in furtherance of decisions producing legal or similarly significant effects.

Age and grade verification

StarID verification is optional. If you use it, you upload a birth certificate or government-issued identification and a transcript or proof of enrollment so that coaches can trust an athlete's stated age and grade.

These documents receive additional handling:

• They are used only to verify age and grade. They are never shown to college coaches, organizations, or other users.
• They are stored encrypted and access is limited to the Starlight staff who perform verification.
• We delete the underlying document once verification is complete or declined, retaining only the verified date of birth and graduation year and the fact and date of verification.

You are never required to verify in order to use Starlight. An unverified profile simply displays as unverified.

Game film and likeness

Starlight is a film platform, so recordings of identifiable people — nearly all of them minors — are central to what we hold.

• Film uploaded by an organization is visible to that organization, to the athletes rostered in it, and to their guardians.
• Film attached to an athlete's recruiting profile is visible to college coaches while that profile is set to recruiting-visible.
• Film sold through an event is available to the purchaser under the terms of that purchase.

Our Terms & Conditions describe the licence you grant us over content you upload, including use in Starlight's own promotional material and how to opt out of that use. We do not use an athlete's name, image or likeness in a way that states or implies they endorse a third party's product or service.

We do not use facial recognition, and we do not generate biometric identifiers from film.

Cookies

We use cookies that are necessary for the Services to function — keeping you logged in, remembering which athlete profile you are managing, and protecting forms against cross-site request forgery. These cannot be turned off without breaking the site.

We honor the Global Privacy Control. If your browser or extension sends a GPC signal, we treat it as a request to opt out of any sale or sharing of your personal information. Because we do not sell or share, this changes nothing in practice, but we respect the signal regardless.

How long we keep information

We may keep information longer where we must to comply with a legal obligation, resolve a dispute, or enforce our agreements.

Security

We encrypt data in transit with TLS and at rest in our storage systems. We limit staff access to personal information to those who need it, run automated error and intrusion monitoring, rate-limit authentication endpoints against credential attacks, and use a third-party identity provider for login so that we do not store passwords ourselves.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information we will notify you and the relevant regulators as the law requires.

Your privacy rights

Depending on where you live, you may have the right to:

• Know what personal information we hold about you and get a copy of it.
• Correct information that is inaccurate.
• Delete your information, subject to exceptions the law allows.
• Opt out of targeted advertising, sale, or sharing — none of which we do.
• Withdraw consent where we relied on it.
• Not be discriminated against for exercising any of these rights.

To make a request, email legal@starlightlax.com. We will verify your identity against the information already on your account, and respond within 45 days — extendable once by a further 45 days where the request is complex, in which case we will tell you before the first period expires.

A parent or guardian may exercise these rights on behalf of an athlete under 18. If we decline a request you may appeal by replying to our decision; we will respond to an appeal within 60 days, and if we deny it we will give you a way to complain to your state Attorney General.

California residents

The California Consumer Privacy Act gives California residents the rights listed above, plus the right to limit our use of sensitive personal information. Our Notice at Collection lists the categories of personal information we collect, the purposes for each, and how long we keep it.

In the twelve months preceding the date of this policy we disclosed personal information for business purposes to the categories of service providers named in How we share information. We did not sell or share personal information, including that of any consumer we know to be under 16.

We collect sensitive personal information in two forms: government identification documents uploaded for age verification, and account login credentials. We use these only to perform the service requested and to secure accounts — never to infer characteristics about you. This is within the exemptions in Cal. Civ. Code § 1798.121(d), so no "Limit the Use of My Sensitive Personal Information" link is required. You may still ask us to delete verification documents at any time.

Europe and the UK

If you are in the European Economic Area, the United Kingdom or Switzerland, we process your personal information on these legal bases: performance of a contract for operating your account and delivering the Services; legitimate interests for security, fraud prevention and product improvement; consent for optional analytics and marketing email; and legal obligation for tax and accounting records.

You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with your supervisory authority. Where a child is below the age of digital consent in your country — between 13 and 16 depending on the member state — we rely on the parent or guardian's acceptance of our terms.

Starlight is based in the United States and our infrastructure is located there, so using the Services involves transferring your information to the US. Where we transfer personal information out of the EEA or UK we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

Canada

If you are in Canada, we handle your personal information in accordance with PIPEDA and applicable provincial privacy legislation. You may request access to your information or challenge its accuracy by writing to legal@starlightlax.com, and you may complain to the Office of the Privacy Commissioner of Canada. Your information is stored in the United States and is subject to US law, including lawful access requests by US authorities.

Changes to this policy

We will post any change here with a new "Last updated" date. Where a change is material we will give notice by email or in the Services before it takes effect. Continuing to use Starlight after a change takes effect means you accept the updated policy.

Contact us