Privacy policy

When you sign up, we keep an account with:

• Your email address and the name you gave us, or the name Google shares when you continue with Google.
• A subject identifier from Supabase Auth, our login service, so we can recognize you next time. Your password is held by Supabase as a hash; we never store it.
• Your timezone, which you can change and which we use to send digests at a sensible hour.

As you use the site, we also keep:

• The coaches and schools you follow, and the coaches you are connected to or have asked to connect with.
• Which coach profiles you open, so a coach can see how many people read theirs and readers can see what others read next. If you are not logged in, a random id in a cookie stands for you; it identifies no one.
• Your notification preferences for email and push, and which browsers you have allowed push notifications from. A push registration stores the endpoint and keys your browser gives us, plus its user agent string.
• A log of the notifications we sent you, what they were about, and whether they arrived. Individual entries are deleted after 90 days; monthly counts are kept so we can tell whether we are sending you too much.
• Any corrections or additions you submit to the data, with your account attached so you get credit.

If you buy a paid plan, our payment processor keeps your card and billing details. We store only the identifiers it gives us for your customer and subscription, the plan you are on, and when it renews or ends.

We do not run third-party analytics or advertising scripts. Our hosting providers keep standard server logs, which include your IP address and the pages you request, for a short time for security and debugging.

We use this information to run the site and nothing else. In practice that means signing you in, showing you the things you follow, sending the notifications you asked for, keeping your paid plan working, crediting your contributions, and answering you when you write to us.

We do not sell personal information and we do not share it with advertisers. We do not use your account data to train models.

We set the cookies needed to keep you logged in. They are issued by our login service and refreshed as you browse. Logging out clears them.

Your light or dark theme choice is stored in your browser and never sent to us. There are no tracking cookies.

A few companies process data on our behalf so the site can exist. Each one only receives what its job requires.

• Supabase provides login and hosts our database.
• Google handles login when you choose to continue with Google. Google shares your email address and name with us; we never receive your Google password.
• Vercel hosts the website. Render runs our API and background jobs.
• Stripe processes payments for paid plans and holds your billing details.
• Resend delivers the emails we send you.

We use Anthropic to read public news articles and extract staff moves from them. Your account data is never part of that.

Your account and everything attached to it stay for as long as you have an account. Notification logs roll up to monthly totals after 90 days. Payment records stay for as long as tax and accounting rules require.

When you delete your account, its follows, connections, preferences, push registrations, and notification history are deleted right away. Contributions you made to the record stay, because they are part of the public record, but your name is removed and they are credited anonymously.

• You can change your display name, timezone, and notification preferences from your account at any time, or turn notifications off entirely.
• You can revoke push notifications from your browser settings, which stops them immediately regardless of your preferences here.
• You can delete your account from your account page. It takes effect immediately and cannot be undone.
• You can ask us for a copy of the information we hold about you, or ask us to correct it, by writing to the address below.

If you are in a place with specific privacy rights, such as the European Economic Area, the United Kingdom, or California, those rights apply and we will honor them. Write to us and we will respond within the time the law allows.

The site is not directed to children under 13 and we do not knowingly collect information from them. If you believe a child has created an account, write to us and we will delete it.

Carousel documents the professional careers of college football coaches and staff. That information comes from public sources: school announcements, published news reports, and public reference works. Every entry cites the page it came from.

If you are listed and something is wrong, tell us and we will check it against the source and correct it. Write to us at hello@coachcarousels.com or use the correction link on the page in question.

If we change what we collect or how we use it, we will update this page and the date at the top. For a change that matters, such as a new category of data or a new use, we will tell signed-in users by email before it takes effect.

The terms of service that go with this policy are at coachcarousels.com/terms.