Privacy Policy — FBALL.link

This Privacy Policy describes how Preplink ("we", "us"), a service of Qonfab, LLC (d/b/a Preplink), collects, uses, and shares information when you create a profile, visit a profile, or sign up to an athlete’s mailing list. Preplink operates FBALL.link and related sites.

1. Information we collect

Account information

When you sign up we store your email address, a hashed password (or OAuth identifier), your chosen handle (fball.link/yourname), and your plan tier (Starter or Recruit).

Profile content

Anything you add to your profile — name, position, jersey number, bio, photos, videos, links, schedule, stats, and uploaded files — is stored securely in our cloud backend so we can display it on your public page at fball.link/<handle>.

Visitor analytics

When someone visits a public profile, we increment an anonymous view counter for that profile. We do not store IP addresses, cookies, or fingerprints for visitors and we do not build visitor profiles.

Email signups on athlete profiles

If a visitor submits an Email Signup block on an athlete’s profile, we collect their email address, send them a confirmation email, and — once confirmed — store the subscription against the athlete’s profile. The athlete is the controller of that list; we process it on their behalf.

Transactional email

We send transactional emails for account verification, email signup confirmation, and unsubscribe requests. We keep a send log and an internal suppression list for addresses that bounce, complain, or unsubscribe so that we do not email them again.

2. How we use information

To operate your account and render your public profile.
To deliver transactional email (sign-in, verification, confirmations).
To count profile views so you can see basic analytics.
To enforce plan limits and storage quotas.
To investigate abuse and keep the service secure.

We do not sell your personal data and we do not run third-party advertising trackers on profile pages.

3. Sharing

Your public profile is, by design, public — anything you add to it can be viewed by anyone with the URL. Beyond that, we share data only with subprocessors needed to run the service (hosting, database, email delivery), and when required by law.

Subprocessors

Cloud hosting & database provider — runs our application, database, file storage, and authentication.
Content delivery network — serves the site quickly and securely worldwide.
Transactional email provider — delivers verification, confirmation, and unsubscribe emails.

A current list of named subprocessors is available on request through our Contact page (select “Privacy” as the reason).

4. Your choices

Unpublish. Toggle your profile to unpublished at any time from the dashboard. The public URL stops resolving immediately.
Delete. Request full account deletion through our Contact page (select “Privacy” as the reason). We will remove your profile, blocks, uploaded media, and subscriber list. Your handle will be reserved so no one else can impersonate you.
Unsubscribe. Every email we (or an athlete) send through FBALL.link includes a one-click unsubscribe link.
Access & correction. Most profile data is editable directly in the editor. For other requests, use our Contact page.

5. Children's Privacy (COPPA)

We comply with the U.S. Children's Online Privacy Protection Act (COPPA). Account holders must be 13 or older. Athletes under 13 are welcome with a parent or legal guardian as the account holder through our Parent Account flow.

What we collect at signup. For Parent Accounts we collect the parent's name, email, and password, plus the athlete's birth year only (never the full date of birth). The parent decides what additional information — if any — appears on the athlete's profile.

Default protections for under-13 athletes. When the athlete is under 13, the profile is created in a protected mode:

Profile is private by default — not publicly viewable, not listed in search, not indexed by search engines.
Last name, school, club, and city are hiddenunless the parent explicitly opts in per field.
Photos and highlight videos require per-asset parent approval before they appear anywhere.
Comments, direct messages, and friend connections are disabled.
No behavioral analytics or third-party advertising pixels run on the profile.
The athlete does not have their own login; the parent is the sole account holder.

Verifiable Parental Consent (VPC). Before any under-13 profile can be made shareable (link-only or public), the parent must complete a verification step that satisfies COPPA's VPC requirements. We currently use a credit-card authorization (a $0.50 charge that is immediately refunded) to confirm parental identity. Consent can be revoked at any time, which instantly returns the profile to private.

Parent rights. A parent or guardian managing an under-13 account can, at any time:

Review all personal information we have collected about their athlete.
Request a copy of that information in a portable format.
Refuse to permit further collection or use of the information.
Delete the athlete's profile and associated data.

Use the Contact page or email privacy@fball.link to exercise any of these rights. We honor verified parent requests within 7 days.

What we don't do. We do not knowingly collect personal information directly from children under 13, do not condition a child's participation on disclosing more information than is reasonably necessary, do not share under-13 profile data with third-party advertisers, and do not run behavioral profiling on under-13 accounts.

6. Data retention

We retain account data while your account is active. Deleted profiles are removed from production systems; backup copies expire on a rolling schedule. The email suppression list is retained indefinitely so we continue to honor unsubscribe requests.

7. Changes

We will update this page when the policy changes and update the “Last updated” date at the top.

8. Contact

Questions about this policy or a privacy request? Reach out through our Contact page and select “Privacy” as the reason.