Introduction
This policy describes what information The NIL Standard collects when you visit thenilstandard.com or subscribe to our email updates, how we use it, and the choices you have. It applies to the entire site and the email program it powers.
Information we collect
Email address
We collect your email address when you submit it through one of our email signup forms. We also record which page you were on when you signed up so we know which content drew you in. That's the only personal information the signup form captures — no name, no demographic fields.
Basic analytics
We use Vercel Analytics and Speed Insights to count anonymous page views and measure how quickly pages load. These services do not use cookies and do not build a cross-site profile of you. We see aggregate traffic patterns; we do not see individual browsing histories.
Valuation reviews and submissions
When you contact us through our verification form (/verify) to share reported figures, dispute a valuation, or ask that a listing be removed, we collect the information you choose to provide. That may include the player or listing you're referring to, the details and any figures you submit, where that information comes from, and — if you include them — your name, email address, and role (for example, player, agent, or collective). We use this only to review and, where warranted, update the valuation in question, and, if you provide an email address, to acknowledge your submission and follow up if we have a question.
Submissions are treated as confidential. We do not publish your name, your message, or the fact that you contacted us, and we do not sell this information or share it with anyone beyond the service providers that operate our site and deliver our email. It is kept separate from our email newsletter list and is not used for marketing. Where reported figures meaningfully change an estimate, we update the figure and note only that it reflects reported information — never the source. We keep submissions only as long as needed to review and act on them; to have a submission deleted, email verify@thenilstandard.com.
How we use it
- To send you The NIL Standard email updates after you confirm your subscription.
- To understand which posts, teams, and players draw the most interest so we can improve coverage.
- To diagnose site performance and reliability issues.
We do not use your information to build advertising profiles, and we do not sell or rent it to anyone.
Who we share it with
We use a small set of service providers to operate the site. Each receives only the data needed to do its job:
- Resend — delivers our email updates and the confirmation email. Your email address is stored in our Resend audience after you confirm your subscription.
- Supabase — hosts the database that stores subscriber records and the underlying valuation data.
- Vercel — hosts the site and runs the analytics described above.
We do not share your data with advertisers, data brokers, or marketing partners.
Information from players and representatives
When players, parents, agents, or program staff contact us through /verify or our other inbound channels — whether by direct message on X or Instagram, by email at verify@thenilstandard.com, by email at concerns@thenilstandard.com, or by any of the email addresses listed on /about — we treat that contact as confidential by default.
What we do with what you share:
- We read your message and any materials you attach (screenshots, contract excerpts, agency confirmations, supporting context) in the channel you sent them.
- If the materials substantiate a change to your published valuation, we record the resulting dollar amount, contract length, and source attribution if applicable. The source materials themselves are not downloaded, copied to our systems, or shared with third parties.
- We keep brief operator-side notes describing what was reviewed and what changed, retained for internal audit. These notes contain no contract excerpts, no screenshots, and no third-party identifiers.
- We never publish your source materials. We never confirm to a third party whether a specific player or representative has contacted us, unless required by law.
If you ask us to remove a record of your contact, email privacy@thenilstandard.com with the date and channel of the original message. We'll remove our operator-side notes and confirm when it's done.
If you share verification materials and later decide you don't want them used, email us at the same address. We'll roll back any change we made on the basis of those materials and remove the corresponding entry from our valuation overrides.
Your rights
- Unsubscribe at any time from any email update, or by emailing us at the address below.
- Request deletion of your subscriber record at any time by emailing us. We will remove your email from our database and from the Resend audience.
- Request a copy of the personal data we hold about you by emailing us.
Cookies
We use only the cookies that Next.js and Vercel set to operate the site (session continuity, security, and basic preference state). We do not use advertising cookies, tracking pixels, or third-party marketing tags. There is no consent banner because there is nothing to consent to beyond the essentials.
Children's privacy
The NIL Standard is built for adult readers of college sports. We do not knowingly collect information from anyone under 13. If you believe a child has submitted their email to our updates list, contact us at the address below and we will remove it.
Accounts, Pro and billing
This part applies when you create an account on the site or reserve or subscribe to Pro. Everything above still applies; this part adds what an account involves. Each item names what we keep, why, and for how long.
Your account email
Signing in uses your email address and a six-digit code sent to it; there is no password. The address and the times you sign in are stored by Supabase, which runs our sign-in; the code is emailed through Resend. We keep the account until you delete it.
Signed-in sessions
Each sign-in is recorded as a session: an identifier, when it began, when it was last seen, which deployment created it, and a salted hash of your browser's user-agent string, never the string itself. An account may hold at most two sessions at a time; a third sign-in signs out the oldest. A session record is deleted when you sign out, when it is signed out from another device, or when the account is deleted.
Sign-in limits
To limit abuse, requests for a sign-in code are counted per email address and per IP address over short windows. The counters hold salted hashes, never the address or the IP itself, and are deleted daily once they are two days old.
Usage: the coverage log
When paid values are shown to you, we record the account, the sport, the player and the day. Not the time of day, not your IP address. The log meters your coverage (the distinct players you open per sport in a rolling 30 days), detects abuse and supports billing. It is never used for anything else: it never feeds a valuation, a ranking, our content or any outreach. Rows are deleted daily once they are 35 days old.
Subscription records
We keep your plan, its status, the end of the current paid period, whether it is set to cancel, and the identifiers of your Stripe customer and subscription records. These stay with the account for as long as it exists, and as long as we must keep billing records.
Payments
Stripe processes payments. Card numbers go to Stripe and never to us; we never see them. We give Stripe your email address and an account identifier so receipts and the billing portal work, and we store the identifier of your Stripe customer record. Stripe's own privacy notice governs what Stripe keeps. The events Stripe sends us are logged by event identifier and type only, never with their contents, and deleted daily once they are 90 days old.
Analytics events
Besides page views, the site records a few named events in Vercel Analytics, such as a sign-in page being viewed, a code being requested, a sign-in succeeding, a reservation being started or returned from, and a paid panel being shown, locked or capped. No event carries your email address, your account identifier or a player's value.
Cookies for signed-in accounts
When you sign in, two cookies are set in addition to those described above: a session cookie (tns_a) that holds your session, marked HttpOnly, Secure and same-site, for this host only; and a marker cookie (tns_s) whose only value is “1,” so a page knows to ask whether you are signed in. Both are cleared when you sign out. No other cookies are added.
Email about your account
Unsubscribing from our email updates does not close your account. Mail that the account needs (sign-in codes, receipts, the reminders before a reservation's first charge and before each renewal, and notice of changes to the terms) is sent to the account's address for as long as the account exists.
Deleting your account
Your account page will carry a delete control; until it does, email support@thenilstandard.com from the account's address. Deletion removes the account and, with it, its sessions, its coverage log, its subscription records and its Stripe customer mapping from our database. It cannot proceed while a subscription or a reservation is active; cancel first. Stripe keeps the transaction records the law requires.
Do Not Track
The site does not respond to browser “Do Not Track” signals. It does not track you across other sites and sets no advertising or tracking cookies, so there is nothing the signal would turn off.
Who processes this data
- Supabase — the database and the sign-in service.
- Stripe — payments, receipts and the billing portal.
- Resend — sign-in codes and account email.
- Vercel — hosting and the analytics events above.
Contact for accounts and billing
Billing and account requests: support@thenilstandard.com. Privacy questions go to the address in Contact below.
Changes to this policy
If we materially change how we collect or use information, we will update this page and revise the “last updated” date at the top. We may also email confirmed subscribers when a change is substantive enough to warrant it.
Contact
Questions, deletion requests, or anything else related to this policy: privacy@thenilstandard.com.