Privacy Policy

This policy explains what information EveryMVP (operated by Stepstool LLC) collects on everymvp.com, how we use it, and who we share it with. It applies to people who join our launch list, to coaches/organizers setting up a fundraiser, and to buyers placing an order.

From people who join our launch list: name, email, role, city, state, sport(s), and how you heard about EveryMVP, plus the name of your team, league, or school. If you check “Send me EveryMVP news,” we record that you asked for it.

From coaches/organizers: name, email, mailing address, sport, optional EIN, and card design choices (colors, texture, stickers, team logo). If you sign in with Google, we receive your name and email from your Google account.

From buyers: email, optional phone number, shipping address, player name, the other details you add to the card (like position, stats, and a short bio), and the player photo you upload.

Payment information: handled directly by Stripe. We don’t receive or store your full card number.

Automatically collected: standard technical information like IP address, browser type, and device info, collected through normal website and hosting logs. We also use PostHog, a product analytics service, to understand how people use everymvp.com, for example which pages are visited, which buttons are clicked, and where people get stuck while setting up a fundraiser or placing an order. PostHog uses a first-party cookie and similar browser storage to recognize returning visitors. We don’t record your screen or what you type, and we don’t send player photos or player names to PostHog.

Errors and speed: we also use PostHog to find problems before they slow you down. When something on the site breaks, we send a short error report saying what failed and where in our code. We also measure how long things take, such as how quickly pages load, how long a photo takes to upload, and how long card images take to make. These reports don’t include player photos, player names, email addresses, or anything you type.

Many of the photos uploaded to EveryMVP are of children. Here’s specifically how we handle them:

A photo is used only to produce the specific card it was uploaded for. By uploading a photo, the buyer certifies they are that player’s parent or legal guardian, or have that person’s permission — the same certification required at checkout.

Before a card is printed, an automated check looks at the player photo and the words on the card, to catch photos that won’t print well and anything that breaks our Sportsmanlike Conduct rules. The check uses Claude, an AI service from Anthropic. We send Anthropic a smaller copy of the photo, without location or camera details, and the words on the card with the player’s name taken out. We don’t send Anthropic the buyer’s name, email, or address. Under its commercial terms, Anthropic doesn’t use what we send to train its AI models, and it deletes it within 30 days unless it needs to keep it longer to enforce its usage rules or to comply with the law. A person on our team reviews photos the check isn’t sure about, and we keep the result of each check with the order.

We share the photo only with our printing/fulfillment partners, as needed to produce and ship the physical card, and with Anthropic for the check described above. We do not sell player photos, and we don’t use them in our own marketing or social media without separate, explicit permission from the person who uploaded them.

We automatically delete the original uploaded photo 60 days after the order is sent to our printing partner for production — enough time to cover production, shipping, and a reasonable window afterward to resolve any print-quality issue with a reprint. The finished card design (and the image file used to produce it) is kept longer, for up to 6 months after production, to support reorders or reprints requested later. If an order is never sent for printing, we automatically delete its photo and card design 7 days after the team’s order deadline if it wasn’t paid for, or 60 days after it was canceled. After each of those windows, the corresponding file is deleted automatically, unless the law requires us to keep it longer; the rest of your order record (like the buyer name, order amount, and shipping address) is kept longer as described in Section 6. If you’d like a photo or design removed sooner, contact us and we’ll delete it, subject to any records we’re required to keep.

EveryMVP is not directed at children. Accounts are created only by adult coaches/organizers, and photos are submitted by adult buyers on a player’s behalf — not collected directly from children.

We use the information above to process and fulfill orders, check photos and card text before printing, produce and ship cards, calculate and pay out each team’s share, communicate with you about your order or fundraiser, respond to support requests, and improve the Service. If you join our launch list, we use your answers to review your signup and decide when to invite you, and your email to send you a confirmation, your invitation, and reminders about it. If you asked for EveryMVP news, we also send you news and updates about EveryMVP. We use analytics data only to understand and improve the Service, including finding and fixing errors and slow pages. We don’t use it for advertising, and we don’t sell it.

We share information with the service providers that make EveryMVP work: Stripe (payments and payouts), our card printing/fulfillment partners (to produce and ship your order), Anthropic (the automated photo and card check described in Section 3), our email provider (Resend), our database and hosting provider (DigitalOcean), our log storage provider (Better Stack), our analytics and error-reporting provider (PostHog), and our newsletter provider, only for people who asked for EveryMVP news. We don’t sell your personal information. We may also disclose information if required by law.

Player photos and card design files follow the shorter, automatic schedule described in Section 3. The rest of an order record — buyer name, order amount, shipping address, and dates — is kept longer, for as long as needed to support reprints, resolve disputes, and meet our accounting and tax obligations. We keep launch-list answers until you ask us to remove them. Contact us to request deletion of your information where we’re not otherwise required to keep it.

Deleted information may remain in our secure backups for up to 30 days before it is permanently erased; we do not use backups except to recover from errors.

You can contact us at any time to access, correct, or request deletion of your information. You can ask us to remove you from the launch list at any time. If you asked for EveryMVP news, you can stop it whenever you like by using the unsubscribe link in any news email or by contacting us. Depending on where you live, you may have additional rights under state privacy laws (for example, California residents under the CCPA). You can limit analytics by turning on your browser’s “Do Not Track” setting, which we honor, or by blocking or clearing cookies. The site works normally either way.

We use reasonable technical and organizational safeguards to protect your information, but no method of storage or transmission is 100% secure.

EveryMVP is intended for use by adults (coaches, organizers, and buyers) and is not directed at children under 13. If we become aware that a child submitted information directly, without a parent or guardian’s involvement, we’ll delete it.

We may update this policy from time to time. We’ll update the “Last updated” date above when we do.

Questions about this policy, or want to access, correct, or delete your information? Reach us at [email protected].