Privacy notice

RosterBro is a private, non-commercial project operated by Jonathan Huschle, Switzerland. Questions, requests about your data and complaints: privacy@rosterbro.com.

You add the calendar link of your roster. RosterBro reads it regularly and shows your schedule to you and to the friends you have accepted, so you can plan days off together.

• Account: your email address, or your name and email from Google if you sign in with Google, and a display name.
• Roster: the entries in your calendar link (flights with flight number, route, times, aircraft and function; standby, reserve, days off, vacation, training and similar) and a history of changes to your roster.
• Your calendar link: it works like a password. It is stored encrypted and is never shown again.
• Friends: who you are connected with, and what you share with each of them.
• Technical data: IP addresses and similar data appear in the logs of the hosting providers (security and operation).

Only you and the friends you have accepted. For each friend you choose whether they see full details or only whether you are free or busy, and you can change this or remove a friend at any time.

Your roster is not shared with airlines, employers or other third parties, there is no advertising and no tracking, and the data is not sold. The operator can technically access the database to run and repair the service, and does not use rosters for any other purpose.

• Supabase: database and login, Zurich (Switzerland).
• Vercel: hosting of the website, Frankfurt (Germany).
• Hetzner: a server that reads your calendar link regularly and keeps the encrypted backups, Germany.
• Brevo: sends the login emails (receives your email address and the login message), France.
• Google: only if you choose "Continue with Google". Google's own terms apply to that login.

Some of these are international companies. Where data is processed outside Switzerland and the EU/EEA, this is based on the contractual safeguards of the respective provider.

Only what is needed: the login session, and small settings such as the page to return to after login and the friends chosen in the comparison. There are no tracking or advertising cookies.

Your data is kept as long as your account exists. Past roster months stay visible because the history is kept. You can delete your account yourself under Settings → Account → Delete my account. This immediately and permanently deletes your login, your calendar link, all your roster entries and their history, your friendships and your sharing settings. Technical logs at the providers are kept by them for a short time under their own rules.

Encrypted backups of the database protect against accidental loss. They are kept for up to 30 days and can only be opened with a key held by the operator. Data you delete disappears from the backups at the latest after these 30 days.

You can ask for access to your data, for correction, for deletion and for restriction of processing, and you can object to processing. Write to privacy@rosterbro.com. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC).

If this notice changes, the date above changes. Larger changes are announced in the app.