Privacy notice

Information published on recruiting profiles

A student-athlete recruiting profile is published only when a signed profile-release consent record is on file. Published profiles may include the athlete’s name, jersey number, program and team, position, height, graduation year, hometown and country or state, biography, statistics, honors, highlight and full-game film, academic interests, NCAA Eligibility Center status, and CATS coaching-staff contact information.

Information that is never published

• Transcripts and any other student education records
• Birth dates
• Home addresses
• Personal telephone numbers and personal email addresses
• Parent or guardian information
• Passport, visa or immigration information
• Medical or injury information
• NCAA identification numbers

A grade point average appears on a profile only where the family has expressly authorised publication. Where that authorisation is not on file, the field is omitted entirely.

QR codes

Each recruiting profile has a permanent QR code. It resolves to the public profile page only. QR codes never link to transcripts, request forms containing personal data, or any private record.

Transcript requests

Transcripts are not stored on, or served from, the public website. A college coach submits a request from a student-athlete’s profile, providing name, institution, coaching title, institutional email address, telephone number, the type of document requested, the recruiting purpose, and a confirmation of legitimate purpose.

Requests are recorded as pending and reviewed by the CATS registrar or an administrator, who verifies the requesting coach and the consent on file before any document is released. Approved access is limited to a specific document, expires automatically, and can be revoked at any time. Download links are generated server-side and expire within ten minutes.

College coach accounts

Coaches register with an institutional email address and provide their full name, institution, coaching title, division, conference and telephone number. Accounts remain pending until CATS approves them. Account information is used to verify identity and to administer transcript access; it is not sold or shared for marketing.

Audit logging

Registrations, approvals, denials, grants, downloads, revocations and administrative changes are written to an internal audit log that is accessible only to authorised CATS staff.

Security

Data is stored in a managed PostgreSQL database with row-level security. Transcript documents are held in a private storage bucket that is not publicly readable; access is issued server-side through short-lived signed links. Privileged keys are never exposed to the browser.

Requests and corrections

Families and student-athletes may ask CATS to correct, unpublish or remove a recruiting profile at any time. Contact the basketball office using the details on the About CATS page.

Regulatory statement

This notice describes current site practice. It is not a statement of FERPA compliance. Handling of student education records is governed by CATS Academy Boston institutional policy and applicable law, subject to institutional and legal review.