Privacy Policy

1. What we collect

If you join the waitlist

• Your email address: the only personal detail we ask for.
• An age range: whether you told us you are 13–17 or 18+. Our signup form asks your birth month and year to run this age check, but your date of birth itself is never sent to or stored on our servers; only the resulting age range is.
• Your current grade (optional): if you choose to tell us, we store your current grade (9th grade through graduated/in college) so we can understand who's joining and tailor what we build. This field is optional; you can leave it as "prefer not to say," and the grade options never include grades below high school.
• Signup context: which form on the site you used (for example, the student or parent section), the page that referred you, your browser's user-agent string, and, when we're testing two versions of a page section, which version you were shown.

If you leave feedback with the comment widget

• The comment text you write, an optional name if you choose to give one, and where on the page you pinned the comment. Please don't include personal information in comments.
• The comment widget is a private review tool, not a public feature: it only appears for reviewers we've sent a special link to, and it isn't shown to ordinary visitors.

Automatically

• Aggregate analytics: we use Vercel Analytics, which reports anonymized, aggregated page-view and interaction metrics (for example, how many visitors saw each version of a page section we're testing) and does not use cookies to track you across sites.
• Fonts: pages load fonts from Google Fonts, which means your browser sends Google a standard web request (including your IP address) to fetch the font files.

2. What we use it for

• Emailing you when CollegeProphet launches, and occasional related updates.
• Understanding which parts of the page convince people to sign up, so we can improve it.
• Reading and responding to feedback you leave.

We do not sell your personal information, and we do not share it with third parties for their own advertising.

3. Children's privacy (COPPA)

We take the Children's Online Privacy Protection Act (COPPA) seriously because students visit this site. We do not knowingly collect personal information from children under 13. Our waitlist forms include a neutral age screen; if it indicates a visitor is under 13, the form does not collect their email address at all, and we invite a parent or guardian to sign up instead. If you believe a child under 13 has given us personal information, email us at matt@collegeprophet.com and we will delete it promptly.

4. Where your data lives and who processes it

• Supabase: hosts the database that stores waitlist signups and comments. Access to the waitlist table is locked down: the public site can add a signup but can never read the list back.
• Vercel: hosts the website and provides the aggregate analytics described above.
• Resend: delivers the confirmation email we send when you join the waitlist, and any launch announcement that follows. They receive your email address for that purpose only.
• Google Fonts: serves the site's typefaces.

These providers process data on our behalf under their own security and privacy commitments. We don't use advertising networks or tracking pixels.

5. How long we keep it

Waitlist emails are kept until you ask us to delete them, or until the waitlist is retired after launch. If you unsubscribe, we keep your address on a do-not-email basis rather than deleting it outright (that record is how we make sure we don't email you again), but you can ask us to erase it completely at any time. Feedback comments are kept while they're useful for improving the site.

6. Your rights and choices

• Access, correction, deletion: email us and we'll tell you what we hold about you, fix it, or delete it.
• Unsubscribe: every email we send includes a way to opt out, and you can also just ask us.
• State privacy laws: if you live in California or another state with a consumer-privacy law, you may have additional rights (such as the right to know and the right to delete). We honor these requests for everyone regardless of where you live, and we do not discriminate against you for exercising them. Since we don't sell or share personal information for advertising, there's nothing to opt out of on that front.

To exercise any of these rights, email matt@collegeprophet.com from the address in question. Parents or guardians may make requests on behalf of their children.

7. Security

The site is served over HTTPS, and the waitlist database is protected by row-level security so the public site cannot read stored emails. No system is perfectly secure, but we deliberately collect very little so there is very little at risk.

8. Changes to this policy

If we change this policy, we'll update the "Last updated" date above. If a change meaningfully affects how we handle waitlist emails, we'll email the list about it.