The data this product touches, and how a minor’s data is gated
The scoring wire carries no student at all; every other surface is gated before it carries one
The scoring wire carries no student. The engine behind the box score is census-neutral by construction: a game is an opaque reference, a sport is an opaque reference, a team is an opaque reference, and a play is an opaque tag. Scoring is attributed at the team level only. There is no athlete, student, player, or roster reference in the engine or on that wire, which is why the route can be anonymous and public without a consent question arising at all. A team label supplied by a school is a display label the school chose, never a student’s name.
Film clips are tenant-checked, and their bytes are somebody else’s job. Before the film route will accept a tag that references a clip, it confirms the clip belongs to your school; a clip in another school is a fail-closed 404, never a silent cross-tenant tag. The route reads the clip record only to confirm tenancy and existence. It never reads the storage key, never presigns a URL, and never serves a byte. Every clip a viewer actually watches is served by the platform’s existing consent-gated video path, which owns that consent decision by itself — this product adds no consent code of its own and bypasses none.
Eligibility detail is consent-gated and redacted. The eligibility read is tenant-scoped, walled against a sales representative, and gated behind the athletics module. The grade-derived detail underneath a verdict passes through the directory-information consent chokepoint, so a student whose family has suppressed directory information is redacted rather than leaked. Officials are not students. The officials surface handles opaque contractor references, reads no student table, and writes no student row; a minor is never a subject on it.
A school without the athletics module sees nothing. The school-scoped surfaces sit behind a module entitlement. A school that does not hold it gets a response byte-identical to a school where these surfaces do not exist. A module gate on this platform is an absent surface, not a greyed-out button. Student data is owned by the school. It is not sold, and it is not shared with outside companies.