Privacy Policy

College Baseball Match Finder (“Match Finder”) · Effective October 8, 2026

1. Who we are

College Baseball Match Finder (“Match Finder”), including our Program Quality Index (“PQI”) ratings, at bsbmatchfinder.com is run by CoJoMojo LLC (“CoJoMojo,” “we,” “us”), a California limited liability company. This Privacy Policy explains what information we collect when you use the website, Match List, Search Schools, Scouting Reports, shared Match List links, purchases, sign-in and related emails (together, the “Service”), and what we do with it. Questions go to info@cojomojo.com.

2. What we collect

We try to collect as little as possible. Depending on how you use Match Finder, that means:

2a. If you use the Match List or Search Schools

• No account is needed for the free preview.
• The filters and priority sliders you choose, and the school names you search for, are sent to our server to calculate your rankings and return results. We don’t save them to a profile; your browser keeps your current settings in session storage until you close the tab.
• If you have Full Access, you sign in with your email address. We email you a one-time link (sent through Cloudflare Email Sending from noreply@bsbmatchfinder.com, with Reply-To info@cojomojo.com). The link works once and expires in about 30 minutes. When you finish signing in, we set a sign-in cookie named __Host-mf_session that lasts up to 30 days. We store your email address, your access level (tier), when that access ends, the invite code you used (if any), and when you joined and last signed in, in Cloudflare’s D1 database. Only a hashed form of your session id and sign-in tokens is stored. When you sign in, we record the date, a one-way hash of your IP address, your approximate location (country, region and city, from Cloudflare) and your browser type, to keep accounts secure and enforce personal-use terms. We keep these records for 90 days. Some testers may still sign in through Cloudflare Access as a legacy fallback, which keeps a record of sign-in events (for example, time, email and IP address) and may set its own CF_Authorization cookie.
• If you make a shared Match List link, we store a frozen snapshot of the top 20 schools shown (no slider settings) for 30 days; anyone with that link can view it. Shared links are hidden from search engines.
• Feature use. If you have an account, we record when you use features such as printing or sharing a Match List, to run and improve the Service and keep purchase records.

2b. If you took part in our closed beta

If you filled out our preferences form during the closed beta, we hold the name or label, email address and preferences you gave us (regions, campus settings, school sizes, NCAA levels and how you rated ten program factors), plus form details such as when you submitted it. We no longer accept new form submissions.

2c. Information collected automatically

• Technical request data. Like almost every website, our hosting provider (Cloudflare) processes your IP address, browser type and the pages you request, in order to deliver the site, keep it secure and troubleshoot problems. Our server also uses your IP address, and your sign-in email if you’re signed in, to count requests for short-term rate limiting that stops abuse and scraping.
• Fonts. Our fonts are served from our own site. No third-party font service is used, so loading a page doesn’t connect your browser to a font provider.

We do not use analytics services, advertising networks, social-media pixels or cross-site tracking.

2d. If you email us

We receive whatever you send us, including your email address and message. That includes questions about Full Access, and refund or account requests.

Before Full Access was available, some people entered their email address in a “Notify me” box on the site. For those people, we stored that address, the date they entered it and which page they used, only so we could tell them when Full Access became available. We keep it only until we’ve sent that email, or sooner if you ask us to delete it.

2e. If you buy Full Access

• You enter your payment details directly on a checkout page run by Stripe, our payment provider. We don’t receive or store your full card number. Payment may be by card, Apple Pay, Google Pay or Link (Stripe’s saved-payment service).
• Stripe shares with us the information we need to provide Full Access and keep records: your name, email address, the amount and date of the purchase, the card brand and last four digits, billing country and postal code, and whether the payment succeeded, was refunded or was disputed.
• We use your email address to give you Full Access sign-in and to send receipts and service messages about your purchase.

3. How we use your information

We use your information only to:

• calculate your personalized program matches and rankings;
• email people who asked, before Full Access was available, to hear when it became available;
• let people with sign-in access use Match Finder’s full features;
• process your purchase, provide Full Access, send receipts, handle refunds and disputes, and keep tax and accounting records;
• reply to your questions and requests;
• keep the Service secure, prevent scraping and abuse, and fix problems; and
• meet legal obligations and enforce our Terms of Use.

We don’t sell your personal information. We don’t share it for advertising. We don’t share it with college coaches, recruiters, schools or other third parties for their own use unless you ask us to. We don’t use your information to make decisions that have legal or similarly significant effects on you.

4. Results links and emails

During the closed beta, we reviewed some form submissions and emailed a private results link from info@cojomojo.com. We no longer create new results links. A results page and its PDF show the name or label you gave us and your ranked matches. The link uses a long, hard-to-guess address and is hidden from search engines, but anyone who has the link can open it, so please share it only with people you trust, such as family or an advisor. Existing links stay active until we retire them or you ask us to remove yours, which we’ll do promptly.

5. Service providers we use

We rely on a small number of providers that process information on our behalf to run the Service:

• Cloudflare — website hosting and security; D1 database storage for accounts, sessions, shared Match List snapshots and purchase records; Email Sending for sign-in links (from noreply@bsbmatchfinder.com); rate limiting; and Cloudflare Access as a legacy sign-in fallback for a few testers.
• Stripe — processes Full Access payments on a Stripe-hosted checkout page. Stripe receives your payment details, name, email, billing address or postal code, IP address and device information, and uses them to process payments and prevent fraud, under its own privacy policy (stripe.com/privacy). If you choose to save your details with Link, Stripe’s saved-payment service, Link’s own terms and privacy policy apply. Available methods may include card, Apple Pay, Google Pay and Link.
• Typeform — hosted our closed-beta preferences form. We no longer use it for new preference submissions; some closed-beta responses may still be held in our Typeform account until we delete them.
• Apple iCloud Mail — the email service for info@cojomojo.com, which we use to answer messages and, during the closed beta, sent results links.
• Cursor (Anysphere, Inc.) — a cloud workspace, including AI-assisted tools, that we use to keep our working files and that we used to prepare closed-beta results from form submissions.

These providers have their own privacy policies. We may also share information if the law requires it, to protect the rights, safety or security of our users, ourselves or others, or as part of a merger, sale or transfer of the Service (in which case this policy will continue to apply to your information).

6. How long we keep information

• Account data (email, access level, expiry, invite code used, and related fields): kept while your account is active, and deleted or anonymized when you ask us to delete it, except where we must keep a record (for example, a purchase).
• Sign-in sessions: browser sessions last up to 30 days; expired sessions are removed from our database.
• Sign-in emails and one-time tokens: the email is sent once; the token expires in about 30 minutes and used or expired tokens are purged.
• Shared Match List links: the frozen snapshot is kept for 30 days after the link is made, then cleared; leftover records are removed after a further cleanup period.
• Purchase records: kept for 7 years for tax and accounting.
• Form submissions (name, email, preferences) and the results we build from them from the closed beta: kept until we retire closed-beta records, or deleted sooner if you ask.
• Closed-beta form notifications on our server were deleted automatically within 14 days.
• Results pages and PDFs: kept online until we retire them or you ask us to remove yours (see section 4).
• Cloudflare Access sign-in records (legacy fallback) are kept by Cloudflare Access under its standard log-retention periods.
• Rate-limit counters reset within about a minute. Server logs are kept by Cloudflare for a short period (typically a few days) for security and troubleshooting.
• Emails with us are kept as long as needed to help you, and to keep a record of any request you make, then deleted.

Typeform keeps closed-beta form responses in our Typeform account until we delete them. You can ask us to delete yours at any time.

7. Security

We protect information with:

• HTTPS encryption across the site;
• a sign-in gate for full features;
• long, hard-to-guess addresses for private results and shared Match List links;
• hashed session ids and sign-in tokens;
• restricted access to the accounts and tools that hold your information; and
• short-term rate limits against automated abuse.

No system is perfectly secure, though, and we can’t guarantee absolute security. If we learn of a breach affecting your personal information, we’ll notify you as required by law.

8. Your choices and rights

Email info@cojomojo.com from the address you used with Match Finder (or tell us which response or results link is yours) to:

• see the personal information we hold about you;
• correct it;
• delete it and end any access we’ve given you, such as sign-in access;
• remove your form submission, results page and PDF;
• or ask a question about how it’s used.

We may need to confirm your identity before acting on a request. We’ll respond within 45 days.

9. California privacy rights

If you live in California, you have the right to:

• know what personal information we collect, use and disclose, and why;
• request access to, correction of and deletion of your personal information;
• opt out of the “sale” or “sharing” of personal information — we do not sell or share personal information as those terms are defined under California law, including for cross-context behavioral advertising, and we have not done so in the past 12 months; and
• not be discriminated against for exercising these rights.

In the past 12 months we have collected these categories of personal information: identifiers (such as email address, the name or label you give us, and IP address); internet or network activity (technical request data); preferences (your filter and priority choices); and commercial information (records of Full Access purchases). We collected them from you, your browser and (for purchases) Stripe for the purposes in section 3, and we disclosed them only to the service providers listed in section 5. We do not collect sensitive personal information as defined by California law.

You or an authorized agent can make a request by emailing info@cojomojo.com. Because we don’t track users across sites, we don’t respond differently to “Do Not Track” signals; we treat Global Privacy Control signals as a request to opt out of sale or sharing, which we don’t do anyway. California users under 18 can ask us to remove content they’ve provided to the Service (see section 11).

10. Cookies and browser storage

• Our public pages, including the free Match List preview and Search Schools, don’t set cookies or use tracking technology. The free preview uses your browser’s session storage to remember your filters and sliders until you close the tab.
• Email-link sign-in sets a cookie named __Host-mf_session (HttpOnly, Secure, SameSite=Lax, Path=/) so we know you’re signed in. It lasts up to 30 days. Your browser’s session storage still remembers your filters and sliders until you close the tab. These are needed for the tool to work.
• Cloudflare Access (legacy fallback for a few testers) may set a CF_Authorization cookie under Cloudflare Access’s own settings.
• Cloudflare may set strictly necessary security cookies to protect the site from attacks and bots.
• Stripe’s checkout pages (on Stripe’s own domain, after we redirect you there) may use cookies and similar technology that Stripe needs to process payments and prevent fraud. We don’t load Stripe.js on our pages.

We don’t use advertising or analytics cookies, so there’s no cookie banner to manage.

11. Children and teens

Match Finder is designed for high school and transfer baseball players, their parents and guardians, and their coaches and advisors.

• Not for children under 13. The Service is not directed to children under 13, and we don’t knowingly collect personal information from them. If you’re under 13, please don’t use the Service or send us information — ask a parent or guardian to use it for you instead.
• Teens 13 to 17 should use Match Finder with a parent or guardian. We encourage a parent or guardian to provide the information and email address on the teen’s behalf.
• Parents and guardians can contact info@cojomojo.com to review or delete information about their child.

If we learn that we’ve collected personal information from a child under 13 without verified parental consent, we’ll delete it promptly.

12. Where information is processed

Match Finder is intended for users in the United States. Our providers may process information in the United States and other countries where they operate.

13. Changes to this policy

We may update this policy as Match Finder changes. We’ll post the new version here with a new effective date, and if a change is significant, we’ll tell you by email (if we have your address) or with a notice on the site.

14. Contact

CoJoMojo LLC
1060 Lincoln Ave Suite 20 #1239
San Jose, CA
info@cojomojo.com