Privacy Policy

S3 Technology LLC ("S3 Technology," "we," "us," or "our") operates the FORGE Sports platform at forgesports.io (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect personal information from users of the Platform, including information about children under the age of 13.

We take the privacy of your family and your child seriously. Because FORGE Sports serves youth athletes, including those under 13, we are committed to compliance with the Children's Online Privacy Protection Act (COPPA), the Federal Trade Commission's COPPA Rule, and applicable state privacy laws.

1. Information We Collect

1.1 Information Provided by Parents/Guardians

• Parent/guardian name and email address
• Player name, date of birth, and age
• Club or team affiliation
• Position and other athletic profile information
• Payment information (processed by Stripe; we do not store full card numbers)

1.2 Information Provided by Coaches/Evaluators

• Coach name, email, and organizational affiliation
• Player evaluations, ratings, and written assessments
• Scouting notes and development recommendations

1.3 Information Provided by Players/Families

• Player photographs and profile images
• Game video and highlight reels
• Contact information (email, phone number)

1.4 Information Collected Automatically

• Device type, browser type, operating system
• IP address and approximate location
• Pages visited, time spent on pages, and navigation patterns
• Cookies and similar tracking technologies (see Section 7)

2. How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve the Platform
• Create and manage user accounts
• Deliver player evaluations and development reports
• Process payments and subscriptions
• Communicate with users about their accounts, evaluations, and Platform updates
• Facilitate connections between players, families, coaches, and clubs
• Ensure the safety and security of the Platform
• Comply with legal obligations

We do not sell personal information to third parties. We do not use personal information from children under 13 for targeted advertising.

3. Children's Privacy (COPPA Compliance)

FORGE Sports collects personal information from children under the age of 13 only with verifiable parental consent. We implement the following protections:

3.1 Parental Consent

Before collecting any personal information from a child under 13, we require verifiable parental consent. Parents/guardians must create the account and explicitly authorize the collection and use of their child's information. We may verify parental consent through:

• Email confirmation requiring a follow-up action from the parent
• A signed consent form (electronic or physical)
• Other methods approved under the COPPA Rule

3.2 Parental Rights

Parents and legal guardians have the right to:

• Review the personal information collected from their child
• Request deletion of their child's personal information
• Refuse further collection or use of their child's information
• Revoke previously given consent at any time

To exercise any of these rights, contact us at don@s3technology.io. We will respond within 30 days.

3.3 Data Minimization

We only collect personal information from children that is reasonably necessary to provide the Platform's services. We do not condition a child's participation on the disclosure of more information than is reasonably necessary.

3.4 Data Retention for Children

We retain a child's personal information only as long as necessary to fulfill the purposes for which it was collected, or as required by law. When a parent requests deletion or revokes consent, we delete the child's personal information within 30 days, except where retention is required by law.

4. How We Share Information

We may share personal information with:

Recipient	Purpose
Stripe, Inc.	Payment processing. Stripe's privacy policy applies to payment data.
Coaches/Evaluators	Player profile and performance data within the scope of their assigned access.
Partner Clubs	Aggregated team data and individual player profiles per the terms of the club's partnership agreement.
Service Providers	Hosting, analytics, email delivery, and other operational services necessary to run the Platform, subject to data processing agreements.
Legal/Compliance	When required by law, regulation, legal process, or governmental request.

We do not sell or rent personal information to third parties for marketing purposes.

5. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Role-based access controls limiting who can view player data
• Regular security assessments and monitoring
• Secure authentication and session management

No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain personal information for as long as your account is active or as needed to provide services. Upon account termination, we will retain data for up to 90 days to allow for account recovery, after which data will be deleted unless retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our Terms of Service).

Player evaluations and performance data may be retained in anonymized form for analytical purposes after account deletion.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Platform, remember your preferences, and improve your experience. We use:

• Essential cookies: Required for Platform functionality (authentication, session management). Cannot be disabled.
• Analytics cookies: Help us understand how users interact with the Platform. Can be disabled in your account settings.

We do not use cookies or tracking technologies to serve targeted advertising to children under 13.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Request deletion of your personal information
• Object to or restrict processing of your personal information
• Data portability (receive your data in a structured, machine-readable format)
• Withdraw consent at any time

To exercise these rights, contact us at don@s3technology.io. We will respond within 30 days.

9. State-Specific Privacy Rights

California Residents: Under the California Consumer Privacy Act (CCPA/CPRA), California residents have additional rights regarding their personal information, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell personal information. To exercise your rights, contact us at don@s3technology.io.

Iowa Residents: Under the Iowa Consumer Data Protection Act, Iowa residents have rights to access, delete, and opt out of targeted advertising and sales of personal data. Contact us at don@s3technology.io to exercise these rights.

10. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policies of any third-party service you access through the Platform.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the Platform at least thirty (30) days before the changes take effect. For changes affecting children's data, we will obtain new parental consent where required by COPPA.

12. Governing Law

This Privacy Policy is governed by the laws of the State of Iowa. Any disputes arising under this Privacy Policy shall be resolved in the state or federal courts located in Linn County, Iowa.

13. Contact Us

If you have questions about this Privacy Policy, your data, or your rights, contact us at: