Privacy policy

Effective 2026-09-29.

Controller: ALGD LTD, company number NI744090, 121 Glencam Road, Omagh, Tyrone, BT79 7HB, United Kingdom. Data-protection contact: support@clubroll.app.

What we hold

Account details for each association (association name, contact name and email), a login per officer and member (email and a scrypt hash of the password — never the password), and what the association enters: the member roll (names, email addresses, phone numbers, join dates, statuses, tags, biographies, directory opt-ins), dues records and payment references, the newsletter text and the per-issue send log, reminders sent, and events.

Who is who

The association decides what it holds about its members — it is the controller of that content, and we are the processor. We are the controller of the account and billing records for the association itself.

Where it lives

On servers provided by Fly.io (US region, iad) with the database on an encrypted-at-rest volume, and payment details held by Stripe, Inc. — card details are never stored by us. Email is sent through Amazon SES.

Cookies

One cookie: a session cookie (HttpOnly, SameSite=Lax) that keeps a signed-in user signed in. No analytics, no advertising trackers, no third-party embeds.

Retention and your rights

Records are kept while the association's account is open and deleted 30 days after cancellation on request; backups age out within 7 days. Members can correct their own details inside the platform, choose whether to appear in the public directory, and unsubscribe from the newsletter from the link in any issue. Data subjects can write to support@clubroll.app to exercise access, correction or deletion rights; we hand requests that concern an association's roll to that association.

This document is served from https://clubroll.app; the same text is at /terms, /privacy and /refunds on every Clubroll deployment.