Your data, plainly.

Only what the site needs to work:

• Your account: email address, a password (stored as a hash we can't read) and the name you sign up with.
• Your profile, if you fill it in: profile type, skills, bio, Instagram handle, music and website links, photos you upload, home cities, where you are now, upcoming travel and festival plans.
• What you do here: messages, hold requests and the conversation on each, gigs you post or apply to, people you save as favorites, your private notes, rosters, and people you block or report.
• Verification: the Instagram handle or note you send us when you ask to be verified.
• Technical basics: the cookies that keep you signed in, and the standard server logs our hosting provider keeps (IP address, browser, time of request).
• Crash reports: if a page breaks while you're using it, the site records the error, the page it happened on (never what you searched for) and your browser type, so we can fix it. It isn't tied to your account.

We don't run advertising or analytics trackers, and we don't buy data about you from anyone.

• Only verified profiles can be listed. A listed profile is public: anyone, signed in or not, can see it on the map, in the directory and in search engines.
• A hidden profile is visible only to you, to people you've contacted or who are in a thread, gig or roster link with you, and to site admins.
• Messages and hold requests are visible to the two people in the thread, and to admins when handling a report.
• A gig you post is public, but never who posted it: signed-out visitors don't see your name, and an email or Instagram you add to a gig is shown to verified members only. Applications are visible to you and the poster.
• Your shortlist (saved people and private notes) and your block list are visible only to you.
• Verification submissions and reports are visible only to admins. When checking who you are, admins also see the email address you signed up with. Nobody else ever does.

• To run your account and show your profile the way you've chosen.
• To make search work: matching people to a city, a role and a date.
• To carry requests and messages between you and the people you work with.
• To keep the site safe: verifying accounts, acting on reports, preventing abuse.
• To email you about your account and, when enabled, about requests and messages.

We use a small number of providers, who process data on our behalf:

• Supabase stores the database, handles sign-in and hosts uploaded photos.
• Vercel hosts the website and keeps the server logs.
• OpenStreetMap (Nominatim) turns a city name you type into map coordinates. Only the text of the search is sent, from our server, not your identity.
• NASA GIBS serves the night-lights map imagery straight to your browser, so NASA's servers see your IP address the way any website you visit does.
• An email delivery provider sends account and notification emails.

Some of these providers operate outside your country, including in the United States.

For as long as you have an account, unless you remove something sooner. When you delete your account, your profile, photos, messages you sent, requests, gigs, favorites, notes and verification details are deleted with it. Copies may persist in routine backups for a short period before they expire. Messages other people sent you stay in their account.

Conversations can be archived or deleted from your inbox. A deleted conversation sits in your Recently deleted list for 30 days, where you can restore it; after that its messages are removed from your account for good. The other person keeps their own copy until they delete theirs. A message is erased from our systems once nobody who took part can see it any more.

Time-limited things expire on their own. Open Work posts are removed six months after their last day, together with the applications to them. Agency requests and crew plans are removed six months after their event. Messages in agency rooms are removed a year after they were sent. Closed holds and past dates leave your inbox for its archive two weeks after the last message, where they stay until you delete them.

Forwarding. When you pass a post or a hold request on to someone, we keep a record of the forward (what, from whom, to whom, and who first opened it) for six months, then remove it; a shared link stops working at the same time. A link shows the work to whoever opens it, but never the names of the people behind it until they sign in. If you forward a hold request, the person who asked is told who you passed it to.

Our own records expire as well: crash reports 30 days after they were last seen, a rejected verification request a year after the decision, and a report about a profile a year after we resolved it.

• Hide or list your profile at any time from your profile page.
• Edit or remove anything on your profile whenever you like.
• Delete your account yourself from account settings. It takes effect immediately.
• Block anyone from contacting you, from their profile page.
• Depending on where you live (for example the EU, UK or California), you may also have the right to a copy of your data, to have it corrected, to object to how it's used, and to complain to your data protection authority. Contact us and we'll help.

We set only the cookies needed to keep you signed in. There are no advertising or tracking cookies, which is why there's no cookie banner.

Strobecall is for working professionals aged 18 and over. We don't knowingly collect data from anyone younger.

If this policy changes in a way that matters, we'll update the date at the top and tell signed-in users before it takes effect.