Data & trust

Privacy Policy

DRAFT · pending legal review

WHAT WE COLLECT

  • Account data — email, name, stage name, avatar, the chapter you're in.
  • Age — your year of birth and a record that you confirmed you're 18 or older. We collect the year only (not a full date of birth) to verify eligibility for our 18+ club and for age-based tiers (e.g. student / senior).
  • Audition / interest forms — what you tell us, voluntarily.
  • Activity — posts, messages, RSVPs, lessons completed, badges earned.
  • Technical — IP, browser, device class for security and abuse prevention.
  • Marketing attribution — UTM tags on links you click that bring you here.

WHAT WE DON’T

We do not sell personal data. We do not run third-party ad tracking on member-facing pages. Payment details are handled by Stripe — we never see or store card numbers.

WHO SEES WHAT

  • Public posts and your stage name are visible to other approved members and to anonymous visitors on public pages.
  • Audition submissions are visible to admins of the club only.
  • Direct messages are visible to the people in the conversation.
  • Admins can read audit logs of moderation actions for accountability.

YOUR CONTROLS

You can edit or delete your profile, leave crews, and unsubscribe from email at any time. You can also delete your account yourself — on the web under Account settings, or in the app under Profile → Settings → Delete account. Deletion is immediate and permanent. For a full data export, or if you need help, write to privacy@sticksandstrings.org. We respond inside 30 days.

SUBPROCESSORS

We use Supabase (database / auth / storage), Vercel (hosting), Stripe (payments), and an email provider for transactional mail. Each holds data only for the operations they perform for us.

CHANGES

Material changes get announced in the member feed and dated below. Last revised: DRAFT.