Privacy Policy
Last updated: March 24, 2026
Overview
RosterRally ("we," "our," or "us") is a group trip planning tool that helps friend groups coordinate availability and choose destinations. We are committed to being transparent about what data we collect, how we use it, and how we protect it. We do not sell, rent, or trade your personal information to any third party — ever.
Information We Collect
We collect only the minimum data necessary to operate the service:
- Organizers: When you sign in to create a trip, we collect your email address and a unique user identifier through Google Sign-In, powered by Firebase Authentication. We do not store your Google password or access your Google account beyond basic profile information.
- Participants: When you join a trip, we collect the name you provide and your availability selections or date preferences. No account or email address is required to participate.
- Trip data: Trip names, descriptions, date windows, and destination lists are stored so that your group can collaborate. This data is associated with the organizer's account.
- Usage data: We use Vercel Analytics to collect anonymized, aggregate data about how the site is used (e.g., page views). This data is not tied to individual users and contains no personally identifiable information.
How We Use Your Information
- To display your trip information to you and your group members.
- To calculate and display availability results for the organizer.
- To authenticate organizers and protect trip management features.
- To improve the product based on aggregate usage patterns.
We do not use your data for advertising, profiling, or any purpose beyond the direct operation of RosterRally.
Data Storage and Security
All data is stored in Google Firebase (Firestore), a secure, SOC 2-certified cloud database. Access to trip data is governed by Firebase Security Rules: only authenticated organizers can manage their own trips, and trip results are private by default. Data is encrypted in transit via HTTPS and at rest within Firebase infrastructure.
Data Retention
Trip data remains in our database until an organizer deletes their trip. Participant entries (name and availability) are tied to the trip and are removed when the trip is deleted. We do not retain your data beyond its useful life for the service.
Third-Party Services
RosterRally uses the following third-party services:
- Firebase (Google): Authentication and database. Governed by Google's Privacy Policy.
- Vercel: Hosting and anonymous analytics. Governed by Vercel's Privacy Policy.
We do not integrate with any advertising networks, data brokers, or social tracking services.
Your Rights
You have the right to request deletion of your data at any time. Organizers can delete their trips and participant data directly from the dashboard. If you need assistance or would like to request deletion of account data, please contact us at the address below.
Children's Privacy
RosterRally is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of RosterRally after changes are posted constitutes your acceptance of the updated policy.
Contact
If you have any questions about this Privacy Policy or how your data is handled, please reach out to us at hello@roster-rally.com.