Data & trust

Privacy Policy

DRAFT · pending legal review

WHAT WE COLLECT

  • Account data — email, name, stage name, avatar, the chapter you're in.
  • Audition / interest forms — what you tell us, voluntarily.
  • Activity — posts, messages, RSVPs, lessons completed, badges earned.
  • Technical — IP, browser, device class for security and abuse prevention.
  • Marketing attribution — UTM tags on links you click that bring you here.

WHAT WE DON’T

We do not sell personal data. We do not run third-party ad tracking on member-facing pages. Payment details are handled by Stripe — we never see or store card numbers.

WHO SEES WHAT

  • Public posts and your stage name are visible to other approved members and to anonymous visitors on public pages.
  • Audition submissions are visible to admins of the club only.
  • Direct messages are visible to the people in the conversation.
  • Admins can read audit logs of moderation actions for accountability.

YOUR CONTROLS

You can edit or delete your profile, leave crews, unsubscribe from email, and request full data export or account deletion at privacy@sticksandstrings.org. We respond inside 30 days.

SUBPROCESSORS

We use Supabase (database / auth / storage), Vercel (hosting), Stripe (payments), and an email provider for transactional mail. Each holds data only for the operations they perform for us.

CHANGES

Material changes get announced in the member feed and dated below. Last revised: DRAFT.