Privacy policy

Information we collect

When you join the waitlist, we collect your email address and, if you provide them, your role and group size. We also store the signup time and the website you signed up from. If you contact us, we receive the details you include in your message.

Our hosting and security providers process technical information such as IP addresses, browser information and requests to the website. Our waitlist rate limiter uses a hashed network identifier to help prevent abuse. Please do not submit patient information.

How we use your information

We use signup details to maintain the waitlist, send your confirmation email, notify our team about your interest and contact you about RosterKind access and updates. We also use technical information to keep the website working, prevent spam and investigate problems.

Website analytics and session replay

We use PostHog, hosted in the United States, to understand how people use this website. Analytics includes page visits, referring websites, browser and device information, FAQ questions opened, waitlist interactions and walkthrough activity. A browser-generated identifier helps connect activity across visits; we do not identify analytics visitors using their waitlist email address.

PostHog session replay reconstructs interactions within this website, including clicks, scrolling and page changes, so we can understand confusing steps and improve the experience. It is not a recording of your camera, microphone, other apps or other browser tabs. Form inputs are masked before recording data is sent. Custom role and group-size controls and the security challenge are blocked from replay. We disable recording of console logs and network request and response bodies, and do not add signup email addresses, roles or group sizes to analytics events.

PostHog stores analytics identifiers and session information in browser storage. Our analytics configuration disables IP-address capture. Hosting and security services may still process your IP address to deliver and protect the website. Learn more about PostHog’s privacy practices.

Services that help run RosterKind

We use Vercel to host the website, Supabase to store waitlist information, Resend to deliver emails, Cloudflare Turnstile to prevent automated signups, and PostHog for analytics and session replay. These providers process information needed to provide their services. Signup notifications are sent to the RosterKind team’s configured recipients.

We do not sell waitlist information or use it for third-party advertising. Information may also be disclosed where required by law or needed to protect the website and its users. Providers may process information in countries other than where you live, including the United States.

Storage and retention

We retain waitlist information to manage your signup and communicate about access, unless you ask us to remove it. Analytics and replay data are retained according to the project’s retention settings. Security rate-limit records are cleared after approximately one day. Provider logs, email delivery records and backups can have separate retention periods.

We restrict access to signup information and use encrypted connections for the website and its service integrations. No method of storage or transmission can guarantee absolute security.

Your information and choices

To request access to, correction of or deletion of your waitlist information, or to stop receiving updates, email athahar@upcraft.xyz. We may need to verify your request before acting on it. Depending on where you live, you may have additional rights under applicable privacy law.

Turning off analytics stops future collection in this browser; it does not automatically delete previously collected records. Contact us if you need help with a data request.

Updates and contact

We may update this policy as the website and its services change. The date above shows when it was last revised. For privacy questions, contact the RosterKind team at athahar@upcraft.xyz.