Privacy Policy

1. Introduction

LaxLab ("we," "us," or "our") operates the website laxlab.app (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting the privacy of all users, especially minors. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Age Requirements & Children's Privacy (COPPA Compliance)

Minimum age: You must be at least 13 years old to create an account or claim a profile on LaxLab. We do not knowingly collect personal information from children under 13.

Users ages 13–17: You may create an account and use LaxLab independently. However, a parent or legal guardian must approve any purchases or paid features. When a user under 18 initiates a purchase, we will:

• Require a parent/guardian's email address at the time of purchase
• Send a payment approval request to the parent/guardian
• Not process the transaction until guardian approval is received
• Allow the parent/guardian to review, modify, or delete their child's information at any time

Users 18+: Full self-service access, including independent purchases.

If we learn that we have collected personal information from a child under 13 without verified parental consent, we will delete that information as quickly as possible. If you believe we might have any information from or about a child under 13, please contact us at privacy@laxlab.app.

3. Information We Collect

3a. Information You Provide

• Account information: Name, email address, date of birth, Google account ID (via Sign in with Google)
• Profile information: Position, height, weight, hometown, high school, GPA, test scores, bio, photos, video links, social media handles
• Parent/guardian information: Email address (for users ages 13–15)
• Communications: Emails composed and sent through our Service to coaches

3b. Information Collected Automatically

• Usage data: Pages viewed, features used, time spent on the Service
• Device data: Browser type, operating system, device type, screen resolution
• Log data: IP address, access times, referring URLs

3c. Email Tracking Data

When you send emails to coaches through our Service, we may embed tracking technologies (tracking pixels and redirect links) to help you understand engagement. We collect:

• Whether an email was opened (via tracking pixel)
• Whether links in the email were clicked (via redirect URLs)
• Timestamps of these events

This data is only visible to the player who sent the email. We do not sell or share email tracking data with third parties.

4. How We Use Your Information

• To create and maintain your recruiting profile
• To enable communication between student-athletes and coaches
• To provide email composition and tracking features
• To verify your identity during profile claiming
• To comply with legal obligations, including COPPA
• To improve and optimize the Service

We do not use your information for advertising, sell your data to third parties, or create advertising profiles.

5. How We Share Your Information

Public profile data: Your profile page (name, stats, team, position, highlights, links) is publicly visible by design — this is the core purpose of the Service. You control what additional information (bio, academics, contact info) is displayed.

Email recipients: When you send an email through the Service, the recipient (coach) receives the email content you composed and approved.

Service providers: We may share data with trusted service providers who assist in operating the Service (hosting, email delivery), subject to confidentiality agreements.

Legal requirements: We may disclose information if required by law, regulation, or legal process.

We do not sell, rent, or trade your personal information.

6. Data Storage & Security

Your data is stored on secure servers. We implement appropriate technical and organizational measures to protect your personal information, including:

• Encrypted data transmission (HTTPS/TLS)
• Secure authentication via Google OAuth 2.0
• Access controls limiting who can view and modify data
• Regular security reviews

No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your account and personal information
• Export your data in a portable format
• Withdraw consent at any time (for features requiring consent)

Parents/guardians of users ages 13–15 may exercise these rights on behalf of their child at any time by contacting privacy@laxlab.app.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law.

Unclaimed profiles (pre-populated from public athletic data) display only publicly available athletic statistics. Players may claim these profiles or request their removal.

9. Third-Party Services

The Service integrates with:

• Google OAuth: For authentication (Sign in with Google). Subject to Google's Privacy Policy.
• YouTube: For video hosting and embedding. Subject to Google's Privacy Policy.
• Gmail API: For sending emails on your behalf (with your explicit consent). Subject to the Google API Services User Data Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. For users under 18, we will also notify the parent/guardian email on file.

11. Contact Us

If you have questions about this Privacy Policy, your data, or wish to exercise your rights, contact us at:

Email: privacy@laxlab.app