GridStar Privacy Policy

Effective date: July 20, 2026  ·  Last updated: July 20, 2026

GridStar ("GridStar," "we," "us," or "our") provides a web-based youth football platform that helps players build football habits, track speed and agility, save athletic achievements and video clips, create parent-controlled player profiles, prepare recruiting and camp materials, and register for football camps.

We take children's privacy seriously. This Privacy Policy explains what information GridStar collects, how we use and disclose it, how parents and guardians control their children's information, and the choices available to families. GridStar is designed to comply with the Children's Online Privacy Protection Act and Rule ("COPPA") when we collect personal information online from children under 13.

Parents and legal guardians should read this policy and the separate Direct Notice to Parents before creating or managing a profile for a child under 13. We obtain verifiable parental consent before collecting, using, or disclosing a child under 13's personal information, except where COPPA permits a limited exception.

1. Who May Use GridStar

GridStar serves youth and high-school football players and their parents or legal guardians. A parent or legal guardian owns and controls the primary family account, creates or approves player profiles, manages privacy settings, controls public sharing, manages subscriptions, and registers minor players for camps.

A child under 13 may not independently create a GridStar account, submit personal information, make a profile public, or authorize disclosure of personal information. Any optional player access must be linked to and supervised by a verified parent or legal guardian.

Coaches, camp personnel, and other adults are not treated as a child's parent merely because they coach, teach, or supervise the child. GridStar will not rely on a coach to provide parental consent unless the arrangement has been separately reviewed and is legally permitted.

2. Information We Collect

We collect only information reasonably necessary to provide the GridStar feature or activity requested by the parent or guardian.

A. Parent or guardian information

• Full name;
• Relationship to the player;
• Email address;
• Mobile telephone number;
• Account credentials and authentication information;
• Communication and notification preferences;
• Records of notices, permissions, and parental consent;
• Subscription status, transaction identifiers, and billing status; and
• Messages, support requests, privacy requests, and other communications sent to GridStar.

GridStar does not store full payment-card numbers. Payment information is handled by our payment processor.

B. Player information

Depending on the features the parent chooses to use, we may collect:

• Player's first and last name;
• Date of birth and age;
• Profile photograph;
• Jersey number;
• Primary and secondary football positions;
• School, team, football program, city, state, and graduation year;
• Height, weight, age group, grade, and optional academic information such as GPA;
• Football biography, goals, seasons, achievements, awards, and experience;
• Daily challenge completions, streaks, points, badges, GridScore, and activity history;
• Hand-timed or manually entered speed and agility results, including 10-yard, 20-yard, 40-yard, shuttle, three-cone, and similar testing information;
• Testing date, surface, start type, timing method, optional location name, weather, and notes;
• Video clips, video links, captions, game or event information, and selected highlights;
• Hype Cards, recruiting materials, camp materials, and share links; and
• Any other information a parent voluntarily adds to an available profile field.

GridStar performance data may be self-reported or hand-timed. It is not medical information, an official combine grade, or a guarantee of athletic performance, team selection, recruiting interest, scholarships, or offers.

C. Camp registration information

When a parent registers a player for a GridStar camp, we may collect:

• Player and guardian information described above;
• School, grade, football experience, position, T-shirt size, and camp goals;
• Emergency contact name, relationship, and telephone number;
• Allergies, emergency medication, accessibility needs, injuries, activity restrictions, or other limited safety information the guardian believes authorized camp personnel should know;
• Registration status, confirmation number, check-in status, and attendance information; and
• Participation acknowledgments, emergency-care authorization, information-accuracy confirmation, operational communication permission, and optional photo/video or marketing permissions.

We ask families not to submit Social Security numbers, insurance policy numbers, or unrelated medical histories. Camp health and emergency information is stored separately from ordinary player-profile information and is not displayed on public profiles.

D. Technical and usage information

When a person uses GridStar, we and service providers working on our behalf may automatically collect limited technical information, such as:

• Internet Protocol address;
• Browser type, device type, operating system, and language;
• Login, security, error, and fraud-prevention logs;
• Pages or features viewed and actions completed;
• Date, time, referring page, and general region inferred from an IP address; and
• Cookies, local storage, session identifiers, and similar technologies necessary for authentication, security, preferences, and core product analytics.

We do not use this information to create behavioral advertising profiles of children or to track children across unrelated websites or services.

E. Information we do not currently collect

GridStar does not currently use facial recognition, voice matching, facial templates, voiceprints, fingerprint scanning, or other biometric identification features. We do not collect precise GPS location for player tracking. We will update our notices and obtain any legally required consent before introducing a materially different collection or use of children's information.

3. How We Use Information

• Create, authenticate, secure, and support parent-controlled accounts;
• Create and manage player profiles;
• Deliver the Daily Grid Challenge, streaks, points, badges, GridScore, and progress history;
• Operate GridStar Speed Lab and record speed or agility results and personal records;
• Store and organize parent-approved football clips and links;
• Generate Hype Cards, player profiles, and recruiting or camp kits;
• Create private, unlisted, or public sharing links selected by the parent;
• Register players for camps and communicate schedules, venue details, check-in instructions, weather notices, safety information, or event changes;
• Process subscriptions, maintain billing status, and prevent fraud;
• Respond to support, safety, privacy, and parental-access requests;
• Maintain, troubleshoot, secure, and improve GridStar;
• Measure general product performance without using children's data for behavioral advertising; and
• Comply with law, enforce our agreements, and protect users, GridStar, and others.

We do not require a child to disclose more personal information than is reasonably necessary to participate in a particular GridStar feature or activity.

4. How and When We Disclose Information

We do not sell children's personal information. We do not use or disclose children's personal information for targeted or behavioral advertising.

A. Service providers acting for GridStar

We use vendors that help us operate the service, such as cloud hosting and database providers, authentication and security providers, file or media storage providers, transactional email or text-message providers, analytics providers configured for permitted operational uses, and payment processors.

These providers may process information only to perform services for GridStar and are required by contract or other written assurances to protect the confidentiality, security, and integrity of the information. GridStar evaluates providers before allowing them to process children's personal information.

B. Parent-controlled player profiles and sharing

Player profiles are Private by default. A verified parent may choose one of the following settings:

• Private: available only to the parent, authorized player, and GridStar personnel or service providers who need access to operate the service;
• Unlisted: accessible to anyone who has the unique link; or
• Public: accessible through a public GridStar profile address.

Depending on the parent's selections, an Unlisted or Public profile may display the player's name, photograph, position, jersey number, school or team, city and state, graduation year, height, weight, achievements, GridScore, speed or agility results, Hype Cards, featured clips, and other profile information specifically approved for display.

GridStar never displays a child's date of birth, home address, guardian login email, guardian telephone number, billing information, private health information, emergency contact, or internal account identifiers on a shared profile.

Making a child's personal information available through an Unlisted or Public profile is a disclosure. For a child under 13, GridStar obtains separate verifiable parental consent before enabling that disclosure. A parent may turn off sharing or regenerate an unlisted link at any time. Disabling sharing prevents future access through the GridStar link, but GridStar cannot retrieve copies previously downloaded, recorded, or reshared by recipients.

C. Camps and event safety

GridStar may provide registered-player information to specifically authorized camp administrators and event personnel who need it to manage eligibility, communications, check-in, safety, or emergency response. Access is limited according to role. Ordinary volunteers and standard registration exports do not receive private health information.

We do not provide a player's GridStar profile, clips, performance history, or unrelated account information to a camp organizer merely because the player registered for a camp. Any disclosure for an organizer's independent use requires separate notice and consent when required by law.

D. Legal, safety, and business circumstances

We may disclose information when reasonably necessary to comply with law or legal process; protect the safety, rights, or property of a child, family, GridStar, or another person; investigate fraud, abuse, or security incidents; or respond to an emergency.

If GridStar is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy and applicable children's privacy requirements. We will provide notice and obtain new consent where required before materially changing how children's personal information is collected, used, or disclosed.

5. Parental Notice and Verifiable Parental Consent

Before collecting personal information online from a child under 13, GridStar provides the parent or legal guardian with a separate Direct Notice to Parents explaining:

• The information we propose to collect;
• How we will use it;
• Whether and why it may be disclosed;
• The parent's right to consent to collection and internal use without consenting to non-integral third-party disclosure;
• How the parent may provide verifiable consent; and
• What happens if consent is not completed within the stated period.

GridStar uses a method reasonably designed, in light of available technology and the proposed use or disclosure, to verify that the person providing consent is the child's parent or legal guardian. The verification method may differ depending on whether information remains within GridStar and its operational service providers or will be made available publicly or disclosed to another party for an independent purpose.

Before enabling an Unlisted or Public profile for a child under 13, GridStar requires a fresh, separate parental-consent action using a method appropriate for disclosure. A child, player login, coach, or other user cannot activate public sharing for a child under 13.

We maintain records of the notice, consent language, version, date, and consent status. A parent may revoke consent through Settings → Privacy or by contacting us.

6. Parents' and Guardians' Rights

• Review the personal information GridStar has collected from their child;
• Correct inaccurate information;
• Direct GridStar to delete the child's personal information;
• Revoke consent and refuse further collection or use;
• Decline non-integral disclosures while allowing collection and use necessary for internal GridStar features;
• Change a profile from Public or Unlisted to Private;
• Revoke optional photo/video or marketing permission for future uses; and
• Obtain information about the types of third parties to which information has been disclosed.

Parents may exercise these rights through Settings → Privacy or by emailing Support@GridStar.app. We will take reasonable steps to confirm that the requester is the child's parent or legal guardian before providing access to or deleting information.

Revoking consent or requesting deletion may disable features that reasonably require the information, but a parent is not required to consent to public disclosure for a child to use internal GridStar features or register for a free camp.

7. Data Retention and Deletion

GridStar retains children's personal information only for as long as reasonably necessary to fulfill the specific purpose for which it was collected. We do not retain children's personal information indefinitely.

Our current retention schedule is:

• Active account and player information: retained while the parent maintains the account and the information is needed to provide selected GridStar features.
• Parent contact information collected only to request consent: deleted within 30 days if consent is not completed, unless a shorter period is stated in the Direct Notice to Parents.
• Deleted accounts or parent deletion requests: public and unlisted links are disabled promptly. Active-system copies are deleted or de-identified within 30 days after verification of the request, except for information that must temporarily be retained for security, fraud prevention, legal compliance, dispute resolution, or protection of users.
• Backups: residual copies may remain in protected backups for up to 90 additional days and are not restored to active use except for disaster recovery, security, or legal necessity.
• Expired premium subscriptions: premium clips, Hype Cards, and recruiting-kit materials may be archived for up to 90 days after expiration to allow renewal or download, then deleted unless the parent renews, deletes them sooner, or another lawful retention need applies.
• Camp emergency and health information: deleted or de-identified within 30 days after the applicable camp ends, unless the information is reasonably necessary for an active safety incident, legal claim, or legal obligation.
• Camp registration, consent, waiver, attendance, and transaction records: retained for the period stated in the applicable camp notice and as reasonably required for event administration, legal compliance, accounting, dispute resolution, or the establishment, exercise, or defense of legal claims.
• Payment and transaction records: retained for the period required by tax, accounting, fraud-prevention, and other applicable laws. Full payment-card details are maintained by the payment processor, not GridStar.

When the applicable retention period ends, GridStar securely deletes or de-identifies the information so that it is no longer reasonably linkable to the child.

8. Security

GridStar maintains a written information security program designed to protect the confidentiality, security, and integrity of personal information collected from children. Our safeguards include, as appropriate:

• Encryption in transit and encryption at rest where supported by the service;
• Role-based access controls and least-privilege access;
• Separate, restricted access to camp health and emergency information;
• Authentication, logging, monitoring, and administrative audit records;
• Access reviews and periodic risk assessments;
• Secure development, vulnerability management, incident-response, retention, and deletion procedures; and
• Review of service providers and written assurances concerning their security practices.

No system is completely secure. Parents should use a unique password, protect account credentials, and contact GridStar immediately if they believe an account has been accessed without authorization.

9. Cookies, Analytics, and Advertising

GridStar may use cookies, local storage, and similar technologies that are necessary for login, security, preferences, fraud prevention, service operation, and limited first-party or service-provider analytics.

GridStar does not:

• Serve targeted or behavioral advertising to children;
• Use children's information to build advertising profiles;
• Allow third-party advertising networks to track children through GridStar;
• Sell children's personal information; or
• Condition use of the service on consent to targeted advertising or non-integral third-party disclosure.

If these practices materially change, GridStar will update this policy, provide direct notice, and obtain separate opt-in parental consent where required before implementing the change.

10. Third-Party Links and Video Services

Parents may choose to add links to videos hosted by services such as Hudl, YouTube, Vimeo, or Google Drive. Following an external link takes the user to a service GridStar does not control. The external provider's privacy policy and settings apply there.

GridStar will not automatically embed a third-party player or plug-in on child-directed pages if it would independently collect personal information without the notice, consent, contractual safeguards, and other protections required by law.

Parents should review the visibility and privacy settings of any externally hosted video before adding its link to GridStar.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in GridStar, law, or our information practices. We will post the revised policy with a new "Last updated" date.

If a change materially affects the collection, use, or disclosure of a child's personal information, we will provide the parent with direct notice and obtain new verifiable parental consent when required before applying the change to the child's information.

12. Contact GridStar

Parents may contact the operator responsible for this Privacy Policy and children's privacy at:

Operators and Service Providers Collecting or Maintaining Information Through GridStar

1. GridStar operator: Noise Media Network, LLC
2. Database, authentication, and file storage provider: Support@NoiseMedia.us
3. Payment processor: Stripe
4. Transactional email or text-message provider: Support@NoiseMedia.us
5. Operational analytics, error-monitoring, or security provider: Noise Media Network — Support@noisemedia.us