Privacy Policy
Last updated October 30, 2026
TransferSight helps college football players and their families see where an athlete might start after a transfer. To do that, we use public information about college rosters, and we use what you tell us. This policy explains what we collect, why, who sees it, and what you can ask us to do.
The short version
- We build projections from public school roster and stats pages, plus what you enter.
- We don't notify schools or coaches when you run a lookup.
- We don't sell or rent lists of personal information, and we don't share it for advertising.
- Public pages on our site show counts and percentages for each team's position group. They never name players.
- Anyone can ask us to remove their information, including players who have never used TransferSight.
Who we are
TransferSight is an independent service. We aren't affiliated with the NCAA or any school. Contact us at privacy@transfersight.com.
Information you give us
- Waitlist: your email, whether you're an athlete, parent, or trainer, and, if you add them, your sport and position. If you joined through someone's link, we record that link's code so we can credit them.
- Lookups: your name, school, and sport; your email, which we confirm with a 1-time code; and your answers to our questions: seasons of eligibility left, where you sit on the depth chart, what matters most to you, how far from home you'd go, your home ZIP code, your major, the levels of football you'd consider, programs to leave out, and your recruiting star rating if you add it. We also search the web for your public film and social profiles (for example Hudl) and keep the links you confirm.
- School email: if you verify with your school email address, we keep that address and the date you verified it.
- Parents: if you invite a parent, we keep their email so we can send the invite. A parent sees your report only if you invite them, and they can pay for it. Paying doesn't give a parent access you didn't grant.
- Messages: anything you send us by email.
Information we collect automatically
- Page views: we use Vercel Web Analytics to count page views. Before a page view is recorded, we remove the query string and replace lookup and report IDs, so no page view points to one athlete. It doesn't use cookies.
- Sign-in: your browser stores a session token so you stay signed in during a lookup.
- Bot check: when you start a lookup or ask for a sign-in code, Cloudflare Turnstile checks that you're a person. Cloudflare receives your IP address and browser details for this.
- Server logs: our hosting providers log technical details such as IP address, browser type, and time of request to run and protect the service.
- Fonts: our home page loads fonts from Google Fonts, so Google receives your IP address and browser details when the page loads.
Information about college athletes from public sources
We keep a database of FBS football rosters, including players who have never used TransferSight. It holds:
- From school athletics websites: name, jersey number, position, class year, height, weight, hometown, high school, previous school, major when listed, season statistics, and the profile page address.
- From public news and web search results: signing announcements, reported transfer-portal entries and commitments, and coaching changes, with the source and date.
We don't use ESPN, On3, 247Sports, or Rivals. We keep copies of the public pages we read so we can check and correct our work.
We use this information to:
- Show public room pages. They give counts and percentages for each program and position group, never names or player-level stats. We show no room with fewer than 4 players, and we hide any class with fewer than 3 players.
- Match an athlete who runs a lookup to their roster entry.
- Build reports. The full report, once it's available, describes position rooms at other programs. It shows players without names, with statistics only as ranges (for example, 500-749 yards), and shows a transfer status only with its source and date. Otherwise the status reads "Unknown."
- Improve our projections by comparing them with what happened, such as where players transferred.
How we use AI
Fit scores use fixed formulas, the same for everyone. We use AI tools to help sort public reports, for example whether a news story describes a signing, a portal entry, or a coaching change, and to clean up position names. These labels can be incomplete or out of date, which is why we show the source and date.
Who we share information with
- Service providers that run TransferSight for us, under contracts that limit their use of the data: Supabase (database, sign-in, and servers), Vercel (website hosting and page-view counts), Resend (email), Firecrawl (reading public web pages and search), Anthropic (AI sorting of public reports), Cloudflare (the bot check at sign-in), and DreamHost (forwarding email sent to our addresses).
- People you choose, such as a parent you invite. They see your report, not your account.
- When the law requires it, or to protect someone's safety or our rights.
- A buyer or successor, if TransferSight is sold or merged. This policy would still apply to the information.
We don't share your lookups or answers with schools, coaches, collectives, or agents.
Our service providers store and process information in the United States. Our database runs in Oregon.
Do we sell personal information?
We don't sell or rent lists of personal information, and we don't share it for advertising. The full report will describe position rooms using public roster information, without names and with statistics as ranges. If the law where you live treats any part of that as a sale or share, you can opt out by asking us to remove your information.
Your choices
Anyone can ask us to:
- See the information we have about them.
- Correct something that's wrong.
- Delete their account, answers, and reports.
- Remove their roster information. We take you out of lookup matches, reports, and room counts.
- Stop marketing email. Reply to any email from us, or write to privacy@transfersight.com.
To ask, email privacy@transfersight.com. Someone you authorize, such as a parent, can ask for you; we may ask for proof that you authorized them.
To see or delete account information, we confirm the request comes from the account's email. To remove roster information, we ask for your name, school, and sport, and we may ask a question to confirm it's you. We don't ask for more than we need, and we don't ask for ID to stop marketing email or to opt out.
We answer within 30 days. If we can't do what you asked, we'll say why, and you can reply to ask us to look again. We won't charge you or treat you differently for using any of these choices.
We don't track you across other websites, so we don't change how the site works when your browser sends a "Do Not Track" signal.
How long we keep information
- Waitlist emails: until you ask us to delete them.
- Accounts, answers, and reports: until you ask us to delete them.
- Payment records: as long as tax and accounting rules require.
- Public roster information and copies of public pages: kept to build history and check our work, unless removed at your request.
Security
We encrypt information in transit, keep program data and payment records readable only by our servers, require sign-in for every report, and use the security controls our service providers offer. No system is perfectly secure. If a breach affects your information, we'll notify you as the law requires.
Young people
TransferSight is for college athletes and their families. It isn't meant for children under 13, and we don't knowingly collect information from them. If we learn we have, we delete it. If you're under 18, use TransferSight with a parent or guardian's permission. A parent or guardian can ask us to delete a minor's information at privacy@transfersight.com.
Changes to this policy
When we change this policy, we'll update the date at the top. If a change is significant, we'll also email account holders before it takes effect.