Privacy Policy

MyLaxList ("we," "our," or "us") operates the website located at mylaxlist.com (the "Service"). This Privacy Policy describes how we collect, use, and protect information you provide when using our Service.

By using MyLaxList, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

We collect the following categories of information:

Account Information

When you create an account, we collect your name and email address. We use Supabase to manage authentication and store this data securely.

Athlete Profile Information

To generate your personalized school matches, we collect information you voluntarily provide about your athlete, including:

• Academic information (GPA, intended major, graduation year)
• Athletic information (self-assessed level, coach/evaluator assessments, club team, position)
• Personal preferences (preferred regions, campus size, climate, lifestyle priorities)
• Financial context (family income bracket, used only to estimate net college costs)
• Home state and general location

All profile information is voluntary. You may provide as much or as little as you choose, and you may update or delete it at any time.

Usage Data

We automatically collect certain information when you use the Service, including pages visited, features used, and general interaction patterns. This information is used to improve the Service and is not linked to personally identifiable information beyond your account.

MyLaxList is intended for use by families researching college lacrosse programs for high school athletes. We recognize that athletes using this Service may be minors.

Under 13 (COPPA)

We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent, as required by the Children's Online Privacy Protection Act (COPPA). If you are under 13, please have a parent or guardian create and manage your account.

If we learn that we have collected personal information from a child under 13 without parental consent, we will promptly delete that information. Parents or guardians who believe their child under 13 has provided us personal information should contact us at admin@mylaxlist.com.

Ages 13–17

We strongly encourage parental involvement for athletes between the ages of 13 and 17. Parents or guardians may create accounts on behalf of their athlete or jointly manage the account. Profile information for minor athletes should be entered by or with the knowledge of a parent or guardian.

Parents or guardians may request to review, update, or delete information associated with a minor's account by contacting us at admin@mylaxlist.com.

We use the information we collect to:

• Generate personalized college lacrosse program fit scores and rankings
• Operate, maintain, and improve the Service
• Send transactional emails (account confirmation, password reset, service notifications)
• Respond to your questions and support requests
• Analyze aggregate usage patterns to improve the Service (using anonymized data)
• Comply with legal obligations

We do not use your information for advertising, and we do not sell, rent, or share your personal information with third parties for their marketing purposes.

We use the following third-party services to operate MyLaxList. Each has its own privacy policy governing how they handle data:

• Supabase — Database and authentication provider. Stores your account credentials and profile data. See supabase.com/privacy.
• Vercel — Web hosting and infrastructure. Processes requests to our Service. See vercel.com/legal/privacy-policy.
• Resend — Transactional email delivery. Used to send account confirmation and password reset emails. See resend.com/legal/privacy-policy.

We limit data shared with these providers to what is necessary for them to perform their services.

Your data is stored on servers provided by Supabase, which uses industry-standard security measures including encryption at rest and in transit. We implement reasonable administrative, technical, and physical safeguards to protect your information.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

You have the right to:

• Access the personal information we hold about you
• Update or correct inaccurate information through your profile settings
• Delete your account and associated data
• Export your profile data upon request
• Withdraw consent for data processing (which may limit your ability to use the Service)

You can reset your profile or permanently delete your account directly from the Profile page under My Account. Account deletion removes your login credentials, profile, and saved schools. To request a data export, email admin@mylaxlist.com from your account address and we will respond within 30 days.

We retain anonymized usage logs (pages visited, features used) after account deletion for service improvement and security purposes. These logs do not contain your name, email, or profile content.

Residents of California, Virginia, Colorado, and other states with applicable privacy laws may have additional rights. Contact us to exercise any such rights.

MyLaxList uses session cookies to maintain your login state. These are strictly necessary for the Service to function and cannot be disabled without logging out. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

The Service may contain links to college and university websites, athletic program pages, or other external resources. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify registered users by email. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

If you have questions about this Privacy Policy, or to exercise any of your rights described above, please contact us: