Trust & Transparency
Your data. Our responsibility.
This page is maintained by Utah Top 50 to answer common security and privacy questions about our website and events.
Important: This page describes the controls and practices we have chosen for the Utah Top 50 website. It is app-owned content and is not an independent certification, audit report, or legal agreement. Platform capabilities described below are provided by our hosting and service providers; application-level practices are the responsibility of Utah Top 50.
Access & Authentication
- User accounts are required for admin access to submission data.
- Authentication is handled through our secure backend provider with hashed credentials and session management.
- We do not allow anonymous sign-ups or shared admin credentials.
- Role-based access controls limit who can view player, nomination, and contact data.
Platform & Hosting
- The site is hosted on a managed edge platform with HTTPS enforced by default.
- Our backend database uses row-level security policies so users only access data they are authorized to see.
- Server-side logic runs in isolated, stateless functions without persistent server access.
- Database connections and API keys are handled server-side and are not exposed to the browser.
Data Collection & Use
- We collect information you voluntarily provide: contact messages, player nominations, invitation requests, and email subscriptions.
- Player information is used for event planning, evaluation, and college-coach distribution with appropriate consent.
- We do not sell personal data to third parties.
- Submission data is accessible only to authorized Utah Top 50 administrators.
Security Practices
- All public pages are served over HTTPS.
- Database access is restricted by role and policy, not by client-side checks alone.
- Server functions validate input before writing to the database.
- Sensitive operations are performed server-side with service-level credentials.
Cookies & Analytics
The Utah Top 50 website does not use third-party analytics or advertising cookies. We may use a small first-party cookie to remember UI preferences (such as navigation state). No personal data is collected through cookies for tracking or profiling purposes.
Retention & Deletion
We keep contact, nomination, and invitation data only as long as needed to operate our events and communicate with participants and families. If you would like your information removed or updated, contact us using the information below and we will process your request as quickly as possible.
Privacy Requests
To access, update, or delete your personal information, or to ask a privacy question, email us at info@utahtop50.com.
Report a Vulnerability
If you discover a security issue on our site, please let us know at info@utahtop50.com. Include enough detail for us to reproduce and address it. We take all reports seriously.
Questions?
This page is a living document. If something is unclear or you need more detail, contact us at info@utahtop50.com.