Lofted

Privacy policy

Last updated November 9, 2026

Lofted helps student-athletes and their families build a recruiting profile for college coaches, starting with golf. Many of the athletes who use it are minors, so we collect as little as we can, show only what the family chooses to publish, and never sell or rent anyone's information. This policy explains what we collect, why, and the choices you have.

Who sets up an account

Each athlete's account is created for, and managed by, a parent or legal guardian (the “account owner”). The owner can invite the athlete and other family members to help. If an athlete is under 13, the parent or guardian must be the one who provides and manages their information. We do not knowingly collect personal information directly from a child under 13 without a parent's involvement; if you believe that has happened, contact us and we will delete it.

What we collect

  • Sign-in details: your name and email address from Google when you sign in. We never see your Google password.
  • Athlete profile: what the family enters, such as name, graduation year, hometown, high school, height, handicap and GHIN number, academics and test scores, rankings, a short bio, social media links, and contact details for the athlete, a parent, a school counselor or references.
  • Results and plans: events, scores (for golf, tournaments and rounds), finishes, highlights, upcoming events and camps, and private notes such as costs and deadlines.
  • Photos and video: images and videos you upload, and links to videos hosted elsewhere. We remove location and other hidden metadata from photos when they are uploaded.
  • Change history: a record of which signed-in user changed what and when, so families can trust their own data.
  • Technical data: the minimum our hosting providers log to run and secure the service, such as IP address and browser type.

What is public and what stays private

Each athlete has a public page that anyone with the link can view. Only information the family enters for that page appears there, and some things are never shown publicly, including:

  • home address, birth date and the athlete's phone number
  • family-only notes, costs and registration deadlines
  • references' email addresses and phone numbers
  • who signed in and the change history

Public pages ask search engines not to index them, so they are generally found only by people you share the link with. Anyone who receives the link can still view or forward it, so share it thoughtfully.

How we use information

  • to run the service: sign you in, save your data and show the athlete's page
  • to calculate statistics such as scoring average and best round from the results you enter
  • to keep the service secure and fix problems
  • to reply when you contact us

We do not use your information for advertising, and we do not sell, rent or trade it.

Cookies and tracking

We use only the cookies needed to keep you signed in and remember which athlete account you are working in. We do not use advertising cookies, third-party analytics or tracking pixels. If an athlete's page includes a YouTube video, it is played through YouTube's privacy-enhanced mode.

Service providers

We rely on a few providers to run Lofted. They process data only to provide their service to us:

  • Supabase: database, sign-in and file storage (United States)
  • Vercel: website hosting
  • Google: sign-in
  • Mux: video upload and playback

We may also disclose information if required by law, or to protect the safety of a user or the public.

How long we keep data

We keep an account's data while the account is active. If the account owner asks us to delete the account, we delete its data from our systems within 30 days, except where we must keep something to meet a legal obligation. Copies in routine backups expire on their normal schedule.

Your choices

  • Edit or remove most information yourself at any time, and it updates on the public page right away.
  • Hide whole sections of the public page in Settings.
  • Ask for a copy of your data, or for the account to be deleted, by emailing hello@loftedrecruiting.com.

Security

Data is encrypted in transit and at rest by our providers, each account's data is walled off from every other account, and sign-in is handled by Google. No system is perfectly secure, so please tell us right away if you think an account has been compromised.

Changes and contact

If we change this policy in a way that matters, we will update the date above and let account owners know. Questions or requests: hello@loftedrecruiting.com.