Privacy policy
This policy covers the small self-hosted apps operated at chiaffredo.org and named in the messaging policy. They are run by one person for family, friends and amateur sports teams. There is no company, nothing is sold, and there is no advertising.
The short version
Your information is used to run the group you joined and nothing else. It is never sold, rented, or shared with anyone for their own purposes. There are no advertising trackers and no analytics services. Everything is stored on hardware operated by the person who runs these apps.
What is collected
Information you give:
- Your name or the name you go by, as shown to your group
- Your mobile phone number, if you choose to receive text messages
- Your email address, where an app uses one to sign you in
- A login PIN or password, stored only as a cryptographic hash — never in a form that can be read back
- Whatever you enter into the app: availability, schedules, arrival times, ride offers, shared expenses, game and scoring data
Information recorded automatically:
- A consent record when you opt in to text messages, containing the date and time, the exact wording shown to you, and the IP address the request came from. This is kept as evidence that consent was given.
- Basic server logs, including IP address and timestamps, kept for security and troubleshooting.
- A session cookie that keeps you logged in. It is strictly necessary for the app to function. There are no advertising or tracking cookies.
Mobile information
Your mobile phone number and your consent to be texted are never sold, rented, or shared with third parties or affiliates for marketing or promotional purposes.
Phone numbers are shared only with the messaging provider that delivers the message on our behalf, and only for that purpose. Information obtained as part of the text-messaging opt-in is not shared with any third party for their own marketing.
Who can see your information
- Other members of your group see what the app is for — your name, availability, arrival details, and anything you enter for the group to see.
- The person who operates these apps has administrative access to the servers, which necessarily means access to stored data.
- Service providers, limited to what they need: the messaging provider that delivers text messages, and where applicable an email provider for sign-in messages.
- Nobody else. No advertisers, no data brokers, no analytics companies.
Information may be disclosed if legally required, or where necessary to protect someone’s safety.
Where it is stored, and for how long
Data is stored on privately operated servers. Group data is kept while the group is active and for a reasonable period afterwards. Consent records are kept for as long as they may be needed to evidence consent. Server logs are kept for a short period.
Security
Connections use HTTPS. Passwords and PINs are hashed, never stored in readable form. Access is limited to the operator.
No system is perfectly secure. These are hobby applications run by an individual, not enterprise software, and they should not be used to store anything sensitive.
Your choices
- Stop text messages — reply
STOPto any message, or turn them off in the app. See the messaging policy. - Correct your information — edit it in the app, or ask.
- Delete your information — email the address in the footer and your account and personal data will be removed. Some group records may remain where they are part of another member’s data, such as a shared expense you were part of.
- Ask what is held — email and ask.
Children
These apps are not directed at children under 13 and do not knowingly collect their information. Where an app involves youth sports, accounts belong to a parent or guardian, who is responsible for what they enter.
Changes
Material changes will update the effective date at the top of this page. Prior versions are retained in the project’s version history.
Contact
Email the address in the footer of this page.