StarAthlete Privacy Policy

StarAthlete ("StarAthlete", "we", "us", "our") operates the website at starathlete.co and the StarAthlete platform, a professional network and marketplace that connects semi-professional athletes with scouts, clubs, agents, coaches, and camp organizers across basketball, volleyball, and handball.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the rights you have under the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA), among other applicable data protection laws. StarAthlete is a global platform, and as our user base grows internationally we may update this Policy to address additional regional requirements. The version below reflects the protections currently in place as of 13 August 2026.

Data controller: StarAthlete B.V., Eerste Kostverlorenkade 11-4, 1052 EM Amsterdam, Noord-Holland, the Netherlands. KvK: 89389557.
Contact: contact@starathlete.co

StarAthlete is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe someone under 18 has created an account, please contact us at contact@starathlete.co and we will remove the account and associated data.

Depending on how you use StarAthlete, we may collect:

• Account information: your name, email address, and password (stored in encrypted form), and your account role (athlete, scout, or agent).
• Agent roster links: if you sign up through an agent's invite link, we store the link between your account and that agent, together with the date it was created and whether it is still active.
• Date of birth. We collect your date of birth when you register in order to confirm that you are 18 or over, and we store it on your athlete profile. It is visible only to registered scouts, never on public profiles.
• Athlete profile information: position, current club and club country, height, weight, dominant hand, career history and season-by-season statistics, profile photo, highlight video links, competition details (used to determine which competitive division an athlete participates in), skill ratings (self-reported ratings out of 10 for shooting, playmaking, defense, and motor, clearly labeled as self-assessed), standardized athletic testing data (vertical leap, 3/4 Court Sprint, and wingspan, where provided), representation details (agent name, where provided), previous coaches (names and professional context, where provided), and a short biography.
• Sensitive profile information you choose to provide: date of birth, salary expectations, and contract details (status and expiration).
• Scout profile information: organisation, role, and other credibility details you provide. In addition, scouts may provide an organization name and organization type (scout, agent, coach, club, or camp organizer), which is displayed publicly on opportunities they post.
• Agent profile information: the same details as a scout profile. Agents use the same profile and search features as scouts.
• Opportunities: if you are a scout, the details of opportunities you post (title, description, type, location, dates, salary or cost information, and position sought). If you are an athlete, records of opportunities you have applied to and the status of those applications.
• Notification preferences: your saved search criteria and whether you have opted in to email digest notifications for new athlete matches.
• Communications: messages you send to other users through the platform, and any contact you have with us directly.
• Usage and technical data: how you interact with the platform (for example searches, profile views, and expressions of interest), along with standard technical information such as your device type and approximate location derived from your IP address.
• Anonymous salary reports: if you submit a salary report on our basketball market pages, we collect only the country, league, role, monthly pay amount, whether that figure is net or gross, the season, and which benefits were included. We do not collect your name, email address, club, or any other identifying detail, and no account is required. To prevent spam and abuse we store a one-way hashed, irreversible form of your IP address, which cannot be used to identify you. Reports are reviewed before publication and are only ever displayed as aggregated salary ranges, never as individual contracts.

StarAthlete is a discovery platform, so some of your information is meant to be seen by others.

• Information on your athlete profile, including your name, photo, position, club, career history and statistics, is visible to other registered users. If your profile is set to Visible, it is also visible to the public and may be indexed by search engines so that scouts can find you.
• Your sensitive information, including date of birth, salary expectations, contract details, agent contact details, and previous coach contact information, is only ever shown to verified scouts. It is never shown to the general public or to other athletes.
• Club identity details, including your current club, club country, and the team and league names in your season-by-season career history, are only shown to registered users. Logged-out visitors see these fields as blurred placeholders.
• You control whether your profile is Visible or Hidden at any time in your settings. Setting your profile to Hidden removes it from discovery and public view.
• Organization name and organization type provided by scouts are displayed publicly on opportunities they post, as this is their intended purpose.
• Opportunity listings posted by scouts are visible to all registered users. Application records are visible only to the scout who posted the opportunity and the athlete who applied.
• Opportunity listings are also visible to logged-out visitors in a limited preview: position, location, competition, season, and deadline are shown, while salary details and the full description are hidden until the visitor creates a free account. Applicant identities are never shown to logged-out visitors, only a total count.
• Agent invite links and rosters. An agent can generate a personal invite link. If you sign up as an athlete through that link, your account is linked to that agent and you appear on their roster. The roster shows your name, your position, and how complete your profile is, plus a link to your profile. It gives the agent no extra access to your information beyond what any scout already has. You can see which agent you are linked to in your settings, and you can remove the link yourself at any time. Once removed, you no longer appear on that agent's roster.

We process your personal data on the following legal bases under the GDPR:

• To perform our contract with you, to create and operate your account, display your profile, enable search and discovery, and allow expressions of interest and messaging between athletes and scouts.
• With your consent, for example, when you choose to make your profile public, or provide optional sensitive information. You can withdraw consent at any time.
• For our legitimate interests, to keep the platform secure, prevent fraud and abuse, understand how the service is used, and improve it. We balance these interests against your rights.
• To comply with legal obligations, where we are required to retain or disclose data by law.

We use your data to: create and manage your account; display your profile to the appropriate audience; power search, filtering, and matching between athletes and scouts; enable expressions of interest and messaging; send you service-related notifications (such as new messages or interest received); maintain the security and integrity of the platform; and analyse and improve our service.

• Other users: as described in Section 4. Athlete profiles are shared with scouts and, if Visible, with the public; messages are shared with the user you are communicating with.
• Service providers (processors): we use trusted third parties to operate StarAthlete, including our cloud hosting and database provider and our email delivery provider. These providers process data only on our instructions and under appropriate data protection agreements.
• Legal and safety: we may disclose data where required by law, to enforce our Terms, or to protect the rights, safety, and security of our users or the public.

We do not sell your personal data.

Our infrastructure providers may store and process data on servers located in the European Union. Where personal data is transferred outside the European Economic Area, we ensure it is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

We keep your personal data for as long as your account is active. When you delete your account, your profile and associated personal data are removed from the platform. Some limited information may be retained where we are legally required to do so, or to resolve disputes and enforce our agreements.

Under the GDPR you have the right to: access the personal data we hold about you; correct inaccurate data; request erasure of your data; restrict or object to certain processing; receive your data in a portable format; and withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at contact@starathlete.co. You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

• Right to know what personal data we collect, use, and disclose about you (see Section 3 and Section 7 above).
• Right to delete your personal data, subject to certain legal exceptions.
• Right to correct inaccurate personal data we hold about you.
• Right to opt out of the "sale" or "sharing" of personal data. We do not sell your personal data, and we do not share it for cross-context behavioural advertising.
• Right to limit use of sensitive personal information. We only use sensitive information you provide (such as date of birth, salary expectations, or contract details) to operate the Service as described in this Policy, for example restricting it to verified scouts, and not for unrelated purposes.
• Right to non-discrimination for exercising any of these rights.

To exercise any California privacy right, contact us at contact@starathlete.co. We will verify your request using the information associated with your account before acting on it.

We use technical and organisational measures to protect your data, including encrypted connections, access controls, and database-level security rules that restrict who can access which information. No system is completely secure, but we work to protect your data and to respond promptly to any security issues.

Necessary cookies and storage. We use the cookies and local storage needed to keep you signed in, maintain your session, protect against abuse, and remember your cookie choice. These are strictly necessary to operate the platform, so they are always active and are never blocked by your cookie choice. Our authentication and session cookies fall into this category.

Analytics. We use Google Tag Manager and Google Analytics 4 for aggregate usage measurement, for example which pages are visited and how visitors move through the site. Analytics loads only after you consent to analytics cookies. Until then Google Consent Mode v2 keeps analytics storage denied, so no analytics cookies or identifiers are set. We do not use advertising cookies, and the advertising consent signals (ad storage, ad user data, and ad personalization) remain denied at all times.

How you choose. We do not use a third party consent tool such as CookieYes. Consent is handled by our own self-hosted banner, which appears at the bottom of the screen on your first visit. You can select Accept all to allow analytics, Necessary only to keep everything except necessary cookies switched off, or Cookie settings to open a preferences panel where analytics can be switched on or off individually. Necessary cookies are shown there as always on. Your choice is stored for 12 months in a cookie and in local storage, so the banner does not reappear on later visits.

Changing your mind. You can change your choice at any time using the Cookie settings link in the site footer, which reopens the same preferences panel. Your new choice replaces the previous one immediately.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you.

For any questions about this Privacy Policy or your personal data, contact us at contact@starathlete.co.

If you attempt to register and are under 18, we do not create an account for you. You can choose to give us your email address so that we can contact you when you become eligible. In that case we store only your email address and the date on which you turn 18. We do not keep your name or your date of birth, so the email we send is addressed generically. A daily job checks which stored dates have been reached and sends one email letting you know you can now join. Every such email includes an unsubscribe line. You can ask us to remove your details at any time at contact@starathlete.co.

When you send feedback through the in-app feedback button or a contextual feedback prompt, we store the message you wrote, the category you chose (something is broken, an idea, something is confusing, or something else), your account role (athlete, scout, or agent), the page you sent it from, and the account it came from. We use it only to fix problems and improve the product. Only the site owner can read feedback submissions. You can ask us to delete your feedback at any time at contact@starathlete.co.

If you fill in our short questionnaire, we store the answers you choose or type and, if you decide to give it, your email address. Giving an email address is optional and the questionnaire works without it. We use the answers only for product research, so we can understand what players, coaches and agents need. The data is stored in the European Union and only the site owner can read it. You can ask us to delete your answers at any time at contact@starathlete.co.