Privacy

UPDATED OCTOBER 8, 2026

Your information on AthleMix

Google and Apple sign-in provide a stable account identifier, email, and an optional display name. Dedicated App Review accounts use an email address and a password; AthleMix stores a password hash, not the plaintext password. Existing hosted sign-in accounts can link a new sign-in method without changing their member profile. Browser sessions are stored in the database and use secure, HTTP-only cookies. Google and Apple access and refresh tokens are encrypted on the server. Apple may provide a private relay email. The iPhone app keeps its revocable sign-in token in device secure storage; the server stores only a hash of that token. Apple refresh credentials are encrypted on the server so authorization can be checked and revoked when the account is deleted. These identify your membership; your sign-in email and identifier are not shown in your recruiting profile. AthleMix records your account type, profile details, highlights, posts, messages, settings, and relevant account activity. Registration does not ask for an age group, birth date, or identity document and does not verify age. A new account has no recorded age; it is not recorded as an adult. Existing age declarations and protected-sharing settings are retained.

Existing protected profiles and sharing

AthleMix is a general soccer community, not a service directed to children under 13. If we learn that we hold personal information from a child under 13, we restrict the account and address parental consent or deletion as required. Existing protected accounts remain protected from anonymous visitors and unrelated members. A guardian invitation is bound to an account email, expires after seven days, and can be used once. Both accounts confirm the relationship. This process records an attestation, not independent verification that two accounts belong to different people.

A linked guardian may enable sharing with other teens whose guardians also enabled the teen community. They may separately enable college outreach. Each new coach introduction needs guardian approval before that coach receives access. Reviewed affiliation alone does not expose every teen profile. Active linked guardians can see the athlete’s profile, including a private draft.

Recruiting conversations

Teen recruiting conversations include the athlete, the individually reviewed coach, and the linked guardian. All three can read and send messages after approval and coach acceptance. Changing guardian permissions, account status, coach authority, or blocking a participant can pause access. Adult–teen direct messages and cross-age comments are unavailable outside this recruiting workflow.

Adult accounts and existing records

Adults can choose public, members-only, or private profile visibility. Adult feed posts have a separate member audience; reviewed coach posts can also appear to teens. Earlier adult-network applications retain the profile snapshot explicitly submitted to an organization. Current representatives of the receiving organization can access those application records.

Files and external websites

Uploaded media is stored with your account and served through current access checks. New images and videos remain available only to the uploader and founder until a human review approves sharing. Text submissions use a basic prohibited-content filter, and members can report content for further review. Videos are stored as uploaded, without transcoding or guaranteed removal of embedded metadata. Remove private location information and share footage only with permission. External highlights and school questionnaires use their own privacy rules. Opening an external link may disclose information to that website. AthleMix does not submit external questionnaires or send your profile to a school automatically.

Official video players and social posts

Official Reels videos are published by the credited clubs, athletes, or competitions. Choosing Play loads YouTube’s official player using its Privacy Enhanced Mode at youtube-nocookie.com. The Reels player and YouTube preview are not requested before that choice. Other profile and video pages may request a publisher thumbnail before you open the player. When provider content loads, your device connects directly to Google or the social provider, which receives network information such as your IP address, browser or device information, the requested content, and playback interactions. Privacy Enhanced Mode does not mean that no information is collected; YouTube may show non-personalized ads.

Instagram and TikTok links in Reels open the original service. Existing website profile posts can load an Instagram embed when you choose View Instagram post. Those services apply their own cookie, retention and advertising practices. AthleMix does not forward your AthleMix sign-in token, password, or private member profile to these players or links. The provider may recognize an account you have already signed into in your browser. AthleMix profile visibility cannot change the availability of an original public video.

YouTube Terms · Google Privacy Policy · Instagram Privacy Policy · TikTok Privacy Policy

Private notes, profile activity, and existing billing

Recruiting-board notes and next-step dates are private to your account, with founder access for support and administration. They are included in your data export and removed when account deletion completes. Public profile-link opens are counted by profile and UTC day. These counters contain no viewer identity, IP address, or browser fingerprint. Known bots and the owner’s signed-in visits are excluded; repeated visits and undetected bots can still count. Current core features are free and do not depend on subscription status. Existing subscribers can manage billing on Stripe’s hosted pages. AthleMix retains the Stripe customer identifier and reads subscription status for billing information; card details are not stored in AthleMix. New membership checkout is closed.

Storage and administration

ChatGPT Sites provides the hosted application, using Cloudflare database and file storage. The founder can access private data for support, safety, administration, and recovery. Guardian email addresses and coach review evidence are used for their respective account workflows. In-app notifications are stored in AthleMix; this release does not send notification emails or text messages.

Your controls

Settings provides profile visibility, blocks, an account-data download, and permanent deletion. Permanent deletion hides the account as soon as it starts, removes uploaded files and authored posts and messages, clears submitted profile snapshots and guardian/coach evidence, and revokes browser and mobile sessions. Large media libraries or temporary service errors may require pressing Continue deletion until completion. A content-free record remains to preserve database relationships. Earlier 30-day deletion requests keep their cancellation window until processed or replaced by permanent deletion. Copies already exported by another person cannot be recalled. The founder must also remove account data from any separately retained recovery exports before restoring them; the app cannot erase downloads from another device. An account export includes your authored recruiting messages, not another person’s private account or review details.

Privacy changes cannot recall copies someone already obtained or material hosted elsewhere. Avoid home addresses, phone numbers, medical records, identity documents, and unnecessary personal information in profiles, posts, or videos.

Questions and corrections

Use the public Support page for privacy requests, an incorrect age group, a disputed guardian relationship, or a directory correction. Support stores the reply email, topic, message, and handling notes you provide. Sign-in sessions and sign-in request counters record the network address and browser information for account security. Other short-lived request counters use a hash of the network address for abuse prevention; they are not used for advertising or cross-app tracking. External media providers have separate data practices as described above. Changing an age category requires review and never happens automatically because a graduation year changes.