Legal
Data we collect
Every piece of information Rotation Master collects, in plain words: what it is, why we need it, who can see it, and how long we keep it. If you spot something in Rotation Master that isn’t on this page, please tell us.
On our website
Visiting the website
- What
- Your IP address, your browser type, the page asked for and the time: what every website receives.
- Why
- To deliver the pages and keep out attacks.
- Who sees it
- Cloudflare, which hosts the website, and us, in short technical logs.
- Where
- Cloudflare.
- How long
- Our technical logs last a few days. The website sets no cookies of its own and runs no analytics.
In the app
The browser check
- What
- Your IP address, details of your browser and how it behaves during the check. When the check passes, a cookie that says so.
- Why
- To keep bots out before anything in the app loads.
- Who sees it
- Cloudflare, which runs the check (it is called Turnstile). Its Turnstile privacy addendum explains what it does with these signals.
- Where
- Cloudflare. The cookie is kept in your browser.
- How long
- The cookie lasts 30 days. A private window, or clearing cookies, brings the check back.
Your account
- What
- Your name, your email address, your role (admin, manager or coach), the gyms you belong to, when your account was made and when you last signed in. Your password is kept only as a one-way code that can check it but can’t be turned back into it.
- Why
- So you can sign in and see the right gym, with the right permissions.
- Who sees it
- Your gym’s admins and managers see your name and email address. When you change a class, everyone in your gym can see your name on it, or your email address if you haven’t set a name. Rotation Master support.
- Where
- Supabase, in the United States.
- How long
- While you belong to a gym. If you are removed from every gym, we delete it within 90 days, or sooner if you ask. If your whole gym leaves, it goes with the gym’s workspace.
Signing in
- What
- With each signed-in session, your IP address and browser. If you choose to sign in with an emailed link, the email we send you.
- Why
- To keep sessions secure and spot sign-ins that look wrong.
- Who sees it
- Supabase, which runs our sign-in system, and Rotation Master support.
- Where
- Supabase, in the United States.
- How long
- Until you sign out or the session expires. Supabase also keeps short technical logs for a few days.
Signing in with Google, if you choose it
- What
- Your name, email address, Google account ID and profile picture link, sent to us by Google. Only where the sign-in page offers Continue with Google.
- Why
- To sign you in without a password.
- Who sees it
- Google and Supabase, and Rotation Master support.
- Where
- Supabase, in the United States.
- How long
- With your account.
Your gym’s schedule
- What
- Your gym’s name and time zone; its classes, categories, days and times; its equipment; rotations, schedules and weekly variations; the names and colours of the coaches on the schedule, and which of them have their own sign-in. A class also shows the name of whoever last changed it.
- Why
- It is what Rotation Master is for.
- Who sees it
- People in your gym, according to their role, and Rotation Master support.
- Where
- Supabase, in the United States.
- How long
- While your gym uses Rotation Master. When your gym leaves, we keep it for 30 days so you can ask for a copy, then delete it within the next 30 days. Your gym can delete things itself at any time.
The change history
- What
- Who changed what in your gym’s schedule and when, with a short summary such as “saved Tuesday’s rotations”, and each time someone opens or leaves the app.
- Why
- To answer “what happened to Tuesday?”, to help put mistakes right, and for security.
- Who sees it
- Rotation Master support. Changes support makes aren’t recorded here; a class support changed shows “rm-support” as its last editor.
- Where
- Supabase, in the United States.
- How long
- With your gym’s workspace.
Usage counts
- What
- How many times each main page (Rotations, Timeline, Classes, Equipment, Coaches, Manual and Settings) is opened from the menu. And, hour by hour, how many requests the app makes to our servers, how large and how quick they are, and how many fail. Never what was on the page, what you searched for or what is in your schedule.
- Why
- To see which features are used, keep the app quick, and plan what it costs to run.
- Who sees it
- Rotation Master support. They are kept against your account and gym, and we look at them as totals.
- Where
- Supabase, in the United States.
- How long
- Page counts stay with your gym’s workspace. Request counts are deleted after about 90 days.
Ideas and bug reports
- What
- What you write, with your name, your email address, your gym and the version of the app.
- Why
- To fix problems and decide what to build next.
- Who sees it
- Rotation Master support.
- Where
- Supabase, in the United States.
- How long
- With your gym’s workspace.
Talking with us
The contact form
- What
- Your name, email address and gym, your message, and, if you add them, your city and how many classes your gym runs a week.
- Why
- To reply to you and talk about whether Rotation Master suits your gym.
- Who sees it
- Only us.
- Where
- Cloudflare delivers it as an email to our inbox at Google. Apart from a short technical log that notes your gym’s name, it isn’t saved anywhere else.
- How long
- For as long as we are talking, then deleted, normally within two years of the last message.
The demo
- What
- Your name, email address and gym, and, if you add them, your city and state, when you open the demo at demo.rotation-master.com. Then, while you use it: which of its pages you open, how many times you come back and how long it is on your screen. Nothing you type or change in the demo is sent to us.
- Why
- To know who is trying Rotation Master and what interests them, to ask how it went, and to send you occasional news about Rotation Master. Every email has a way to unsubscribe.
- Who sees it
- Only us.
- Where
- Cloudflare delivers your details as an email to our inbox at Google, and our website keeps them, with the page counts, in our database at Supabase, in the United States.
- How long
- Until you unsubscribe or ask us to delete it, and otherwise deleted within two years of our last email with you.
Emails with us
- What
- Whatever you write to info@rotation-master.com, and the address you write from.
- Why
- To help you.
- Who sees it
- Only us.
- Where
- Our inbox at Google (Gmail). Cloudflare forwards our address to it.
- How long
- As long as it is needed, normally deleted within two years of the last message.
Gyms we contact
- What
- A gym’s name, address and public class timetable, and the names, work email addresses and phone numbers of its owners or managers, from public sources such as the gym’s own website.
- Why
- To tell gyms about Rotation Master and show how it could work for them.
- Who sees it
- Only us.
- Where
- Our database at Supabase, our own files, and our inbox.
- How long
- Until you ask us to stop, or two years after we last heard from you.
Stored in your browser
The website stores nothing in your browser itself. The app stores these for everyone who uses it; Rotation Master support’s own tools keep a few more of the same kind. None of them is used for tracking or advertising. Clearing your browser’s data removes them; you’ll be signed out and see the browser check again.
| What it is for | Kept as | How long |
|---|---|---|
| Remembers that this browser passed the browser check__Host-rm_pass | Cookie | 30 days |
| Keeps you signed insb-…-auth-token | Local storage | Until you sign out |
| Light, dark or systemrm-theme | Local storage | Until you change it |
| The gym you opened lastrotation-master:gym:… | Local and session storage | Until you clear it |
| The schedule you opened last in each gymrotation-master:season:… | Local storage | Until you clear it |
| How the board is laid outrotation-master:board-view | Local storage | Until you clear it |
| The Settings tab you used lastrotation-master:settings-tab | Local storage | Until you clear it |
| The coach you follow on Liverotation-master:live-follow:… | Local storage | Until you clear it |
| That you closed the “add to home screen” tip on Liverotation-master:live-install-seen | Local storage | Until you clear it |
| A message you are sending, so it isn’t lost or sent twicerotation-master:contact:… | Session storage | Until it is sent or you close the tab |
| That you have opened the demo, so it opens straight away next timerotation-master:demo-entered | Local storage | Until you leave the demo or clear it |
| The name and email you opened the demo with, shown back to you as your account there, and the code that ties your visits to your sign-uprotation-master:demo-visitor | Local storage | Until you leave the demo or clear it |
On both the website and the app, Cloudflare may also use short-lived security cookies or storage of its own, to tell people from bots.
Companies that handle it
Your gym’s data
These two companies handle the personal data in your gym’s workspace for us. In the words of the Data Processing Addendum, they are our “sub-processors”.
| Company | What it does for us | Where |
|---|---|---|
| Supabase | Our database and sign-in system, including sign-in emails. Everything in the app is stored here. | United States (Oregon), on Amazon Web Services |
| Cloudflare | Hosts the website and the app, protects them from attacks, runs the browser check, and routes and sends our email. | United States, with data centers worldwide |
They also handle what we keep for ourselves, such as security records and usage counts. Before another company starts handling your gym’s data, we’ll add it here and email your gym’s admins at least 30 days ahead.
Also used for our own business
| Company | What it does for us | Where |
|---|---|---|
| Our email inbox (Gmail), where messages to info@rotation-master.com and from the contact form arrive. | United States | |
| Sign in with Google, only for people who choose it. | United States |
What we don’t collect
- Payment card or bank details. There are no payments yet. When there are, a payment provider will handle them, and we’ll list it here first.
- Athletes’ information. The Terms ask gyms not to enter it.
- Your precise location, your contacts, your photos, your camera or your microphone.
- Advertising identifiers, or anything about what you do on other websites.
When this page changes
This page changes whenever Rotation Master starts or stops collecting something, or a company is added or removed. The date at the top shows the last change.
Questions about any of this, or a request about your data? Email info@rotation-master.com. A person reads every message.