Information We Collect
Account information
When you create an account, we collect:
- Name and email address
- Athletic affiliation (university, sport, position)
- Verification status, which confirms you are a real athlete
- Account preferences
Review information
When you write a review, we collect:
- Your ratings and written feedback
- Deal context (service type, working period)
- Anonymous token — a randomly generated identifier that cannot be traced back to you
Usage data
We automatically collect:
- Browser type and device information
- Pages visited and time spent
- Search queries within NILAR
- IP address, used for security and not stored long-term
Analytics & Telemetry
NILAR uses two Vercel services to measure page performance and how people move through the platform: Vercel Web Analytics and Vercel Speed Insights. Vercel acts as a data sub-processor for both. You can review Vercel's data practices in their privacy policy.
What flows to Vercel
- Route patterns only — for example,
/agents/[slug]or/deals/[id]. The actual slug, deal ID, query string, and URL fragment are stripped before the data leaves your browser. Admin and API paths are dropped entirely. - Core Web Vitals (LCP, INP, CLS), collected by Speed Insights to track page load and interaction performance over time.
- Bucketed conversion events — a fixed set of nine named actions: signup completion, email verification, review submission, deal creation, deal acceptance, deal disclosure, agent claim, trusted-circle invite, and search. Each event carries only bucketed properties. A review event records whether the rating was low, mid, or high, never the numeric value. A deal event records a value range (under $1k, $1k–$10k, $10k–$100k, $100k+), never the dollar amount. No free-form strings, IDs, or names are included.
What does not flow to Vercel
- No personally identifying information of any kind
- No raw IDs, slugs, tokens, or athlete names. These are scrubbed in your browser before anything is sent.
- No query strings or search terms
- No IP addresses. Vercel truncates IP data on receipt and does not store or log it.
- No cookies. Vercel Analytics is cookieless by design, so no tracking cookie is set on your device.
Retention and Do Not Track
Vercel retains aggregated analytics data for 30 days by default.
If your browser has Do Not Track enabled, NILAR honors it. Both pageview beacons and conversion events are suppressed for those browsers, and no data is sent to Vercel for those sessions.
Protecting Your Anonymity
Reviews are never traceable to an individual athlete.
This is built into our technical architecture, not just stated in a policy.
Technical safeguards
- Anonymous tokens: reviews display a random identifier, not your user ID.
- Stylometry protection: we analyze and adjust writing patterns to prevent identification.
- Database separation: review data is stored apart from user identity data.
- No metadata leakage: timestamps, device info, and location are not exposed.
How We Use Your Information
To operate the platform
- Verify athlete status before allowing reviews
- Display aggregated ratings and reviews to other users
- Prevent duplicate reviews (one review per athlete per agent)
- Improve search and filtering
To communicate with you
- Send verification emails and account updates
- Notify you about responses to your reviews, if you opt in
- Share platform updates and new features
What we do not do
- Sell or share your data with third parties
- Use your data for advertising or marketing beyond NILAR
- Share review authorship with agents or anyone else
- Track you across other websites
Your Rights & Choices
You have control over your data:
- Access: request a copy of all your data at any time.
- Update: edit your profile information in account settings.
- Delete: request full account deletion, and we will remove all identifiable data.
- Export: download your reviews and account data in a machine-readable format.
- Opt out: control email notifications in your settings.
A note on review deletion
If we delete your account, published reviews stay on the platform under their anonymous token. This keeps the review system trustworthy while keeping you anonymous.
Data Security
We use industry-standard security measures:
- Encryption in transit (HTTPS/TLS)
- Encryption at rest for sensitive data
- Regular security audits and penetration testing
- Access controls and authentication requirements
- Automated backup and disaster recovery
No system is completely secure, but we take every reasonable precaution to protect your data.
Younger Athletes
NILAR is not intended for anyone under 16 years of age. If you are under 18, use NILAR with guidance from a parent or guardian. We do not knowingly collect personal information from anyone under 16.
Changes to This Policy
We may update this privacy policy from time to time. If a change is material, we will tell you by email and post a notice on the platform. Continuing to use NILAR after a change means you accept the updated policy.
Contact Us
Questions about this policy or how we handle your data? Reach the privacy team:
NILAR Privacy Team
Email: privacy@nilartech.com
We usually respond within 48 hours.