Privacy Policy

Last updated: May 2, 2026 · Version v1-2026-05-02

1. Who we are

This Privacy Policy describes how College Thread LLC dba Athletes Thread ("Athletes Thread," "we," "us") collects, uses, and protects personal information when you visit our websites at athletesthread.com, athletes.athletesthread.com, or any athlete page hosted on a custom domain we operate, and when you interact with our products or services.

Our principal place of business is 1216 Broadway Street, Suite 415, New York, NY 10001. For privacy questions, email us at help@athletesthread.com.

2. Information we collect

2.1 Information you provide directly

When you sign up on an athlete's landing page, place an order, contact us, or otherwise interact with our services, we collect information you provide, including:

• Identifiers — name, email address, postal address, phone number
• Account credentials — if you create an account, your authentication information
• Communications content — messages you send to us or to an athlete via our forms
• Order and payment information — billing and shipping address; payment is processed by our payment processor and we do not store full card numbers
• Marketing preferences — which athlete lists you opted into and your consent record (timestamp, IP address, user agent, and the specific consent text version you agreed to)

2.2 Information collected automatically

• Device and connection data — IP address, browser type, operating system, device identifiers
• Usage data — pages viewed, links clicked, time on page, scroll depth, referring URL
• Email engagement — whether you opened our emails and which links you clicked
• Marketing source data — UTM parameters and the URL you arrived from

2.3 Information from third parties

• Public sources — publicly available information about athletes (rosters, stats, social handles) we use to populate landing pages
• Service providers — analytics, payment processing, and email delivery vendors
• Athlete agencies — contact information shared by agencies on behalf of athletes they represent

3. How we use information

We use the information we collect to:

• Operate, maintain, and improve our websites and services
• Process orders, payments, and shipping
• Send transactional emails (order confirmations, shipping updates, account notices)
• Send marketing emails about athletes you opted into and our products, where you've consented
• Personalize content and product recommendations
• Measure marketing performance and attribute revenue to athlete pages
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Comply with legal obligations

4. When we share information

We do not sell personal information for money. We share information only in these limited situations:

• Service providers — vendors that help us operate the business (email delivery via SendGrid; analytics; payment processing; cloud hosting via Vercel and Supabase). These vendors are contractually required to use your information only to provide services to us.
• Athletes and their representatives — when you sign up on an athlete's page, we may share your email and signup metadata with that athlete and their authorized agent so they can communicate with their fan list.
• Legal compliance — when required by law, subpoena, or court order, or to protect the rights, safety, or property of Athletes Thread, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to affected users.

For purposes of California's CCPA and similar laws, certain disclosures of personal information to advertising and analytics providers may be considered a "sale" or "share." See Section 5 for how to opt out.

5. Your California privacy rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act as amended by the CPRA gives you the following rights:

• Right to know — what personal information we collect, the sources, the purposes, and to whom we disclose it
• Right to access — a copy of the specific pieces of personal information we have about you, in a portable format
• Right to delete — request deletion of personal information we collected from you, subject to legal exceptions
• Right to correct — request correction of inaccurate personal information
• Right to opt out of sale or sharing — direct us not to sell or share personal information for cross-context behavioral advertising
• Right to limit use of sensitive personal information — restrict our use of sensitive categories beyond providing the requested service
• Right to non-discrimination — we will not discriminate against you for exercising your rights

To exercise these rights, email help@athletesthread.com with the subject line "California Privacy Request." We will verify your identity (typically by matching the email address on file with your account) before fulfilling the request. We respond within 45 days.

You may also designate an authorized agent to make a request on your behalf. We require written proof of authorization.

Categories of personal information collected in the past 12 months: identifiers, internet/network activity, geolocation (general), commercial information, inferences. Sources: directly from you, automatically from your interactions, from athletes' agents. Business purposes: as described in Section 3. Disclosed to: service providers as described in Section 4.

6. Your New York privacy rights (SHIELD Act)

The New York SHIELD Act requires us to maintain reasonable administrative, technical, and physical safeguards for personal information of New York residents. We:

• Encrypt personal information in transit (TLS) and at rest where feasible
• Restrict employee access to personal information based on job responsibility
• Use industry-standard authentication for our administrative systems
• Maintain incident-response procedures and notify affected New York residents in the event of a security breach as required by law
• Train personnel on data protection responsibilities

If you believe your personal information has been compromised, contact help@athletesthread.com immediately.

7. Other state rights

Residents of states with comprehensive privacy laws (including but not limited to Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, and Delaware) have rights similar to California's, including the rights to access, delete, correct, and opt out of targeted advertising. Email help@athletesthread.com to exercise these rights. We respond within the timeframes required by your state's law.

8. Email and marketing communications

When you sign up on an athlete page, you are consenting to receive marketing emails from Athletes Thread about that athlete's drops, news, and exclusive offers. The specific consent text and version are stored with your subscription record.

You can unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of any marketing email we send. We honor unsubscribe requests within 10 business days as required by the CAN-SPAM Act.

We may continue to send transactional messages (order confirmations, security notices) even after you unsubscribe from marketing — these are not subject to the unsubscribe preference.

9. Cookies and tracking

We use cookies and similar technologies for:

• Strictly necessary — authentication and password-gate access to athlete preview pages
• Analytics — first-party event data (page views, clicks, scroll depth) to understand how athlete pages perform
• Attribution — UTM parameters to credit traffic sources

We do not currently use third-party advertising cookies. You can control cookies through your browser settings.

10. Data security

We use administrative, technical, and physical safeguards to protect personal information, including encryption in transit, access controls, and regular security reviews. No security program is perfect, and we cannot guarantee absolute security.

11. Data retention

We retain personal information for as long as necessary to provide the services, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account and order records — for the life of the account plus 7 years for tax and accounting purposes
• Marketing subscribers — until you unsubscribe, then we retain unsubscribe records to honor your preference
• Analytics events — typically 24 months in identifiable form, then aggregated

12. Children's privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, contact us at help@athletesthread.com and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent version. Material changes will be notified via email to active subscribers and through a notice on our websites at least 30 days before they take effect.

14. How to reach us

College Thread LLC dba Athletes Thread
1216 Broadway Street, Suite 415
New York, NY 10001
Email: help@athletesthread.com