Your data, plainly.

Strobecall is run by its founder, based in Hong Kong, as an individual while the company that will take it over is being formed. The company's name, registration and address will be listed here the day it is registered.

For anything about your data, write to contact@strobecall.com. That address reaches the person responsible for access and correction requests.

Only what the site needs to work:

• Your account: email address, a password (stored as a hash we can’t read) and the name you sign up with. If you add Face ID or another passkey, we keep only its public key: your face or fingerprint never leaves your device.
• Your profile, if you fill it in: your roles, bio, Instagram handle, music, portfolio and website links, photos you upload, home bases, where you are now, upcoming trips and festival plans.
• What you do here: messages, hold requests and the conversation on each, group chats you start or join and the people you invite to them, work you post or apply to, people on your Shortlist and your notes on them, rosters and people you block or report.
• Verification: the Instagram handle or note you send us when you ask to be verified.
• Phone and browser notifications, if you turn them on: the address your phone or browser gives us for sending notifications to that device. Turning them off removes it.
• Technical basics: the cookies that keep you signed in and remember your time zone, and the standard server logs our hosting provider keeps (IP address, browser, time of request). When you look up a place in the search box, a scrambled fingerprint of your connection (never your IP address itself) is kept for an hour, to limit how many lookups one connection can make. A few settings live in your browser’s own storage: which site brought you here (until you sign up) and small interface preferences.
• Where you’re signed in: for each sign-in, the browser it’s in and the rough city and country our hosting provider sees it from, so you can check your devices under Account and get an email when a new one signs in. It’s removed when that sign-in ends.
• Crash reports: if a page breaks while you’re using it, the site records the error, the page it happened on (never what you searched for) and your browser type, so we can fix it. It isn’t tied to your account.

We don’t run advertising or cross-site trackers, and we don’t buy data about you from anyone. Page visits are counted anonymously, without cookies (see Statistics below).

• Only verified profiles can be listed. A listed profile is public: anyone, signed in or not, can see it on the Map, in the Directory and in search engines.
• A hidden profile is visible only to you, to people you’ve been in touch with or who share a conversation, post or roster link with you, and to site admins.
• Messages, hold requests and files are visible to the people in the conversation (in a group chat, everyone who has joined it), and to admins when handling a report. Someone added to a conversation later can see what was said and shared in it before they joined.
• A post on Open Work is public, but never who posted it: signed-out visitors don’t see your name, and an email or Instagram you add to a post is shown to verified members only. Applications are visible to you and the poster.
• Your Shortlist (people you’ve added and your notes on them) and your block list are visible only to you.
• Verification submissions and reports are visible only to admins. When checking who you are, admins also see the email address you signed up with. Nobody else ever does.

• To run your account and show your profile the way you’ve chosen.
• To make search work: matching people to a city, a role and a date.
• To carry requests and messages between you and the people you work with.
• To keep the site safe: verifying accounts, acting on reports, preventing abuse.
• To tell you about your account and, as you choose under Notifications, about requests, messages, agencies and new work that fits your roles and places: on your phone or browser as it happens, and by email right away or in a daily or weekly digest.

We use a small number of providers, who process data on our behalf:

• Supabase stores the database, handles sign-in and hosts uploaded photos.
• Vercel hosts the website and keeps the server logs.
• OpenStreetMap (Nominatim) turns a city name you type into map coordinates. Only the text of the search is sent, from our server, not your identity.
• NASA GIBS serves the night-lights map imagery straight to your browser, so NASA’s servers see your IP address the way any website you visit does.
• Resend delivers account and notification emails.
• Apple, Google and Mozilla’s push services deliver phone and browser notifications, if you turn them on. Each notification travels encrypted, so they can’t read it.
• Anthropic reads a tour poster you drop into the Tour Matcher, to pick out its dates and cities. Only the image is sent, and we don’t keep it.
• Cloudflare runs the “verify you are human” check on the sign-in and sign-up forms. Cloudflare sees your IP address and browser signals for that check, and nothing you type.
• Embedded players. When you play a Spotify, SoundCloud, YouTube or Vimeo link on someone’s profile, that provider’s player loads in your browser and sees your IP address, under its own privacy policy. YouTube is loaded in its no-cookie mode and Vimeo with do-not-track on. Nothing loads until you press play.
• frankfurter.app gives us exchange rates (for showing fees in your currency). No personal data is involved.

Where your data is. Our database, file storage and servers are in the United States, so your data is stored and processed there whatever country you’re in. Each provider that handles personal data for us does so under a written data-processing agreement: Supabase, Resend and Anthropic under the EU’s standard contractual clauses, Vercel and Cloudflare under the EU-US Data Privacy Framework. None of them may use your data for their own purposes.

For as long as you have an account, unless you remove something sooner. When you delete your account, your profile, photos, messages you sent, requests, posts, your Shortlist and notes, and verification details are deleted with it. Copies may persist in routine backups for a short period before they expire. Messages other people sent you stay in their account.

Conversations can be archived or deleted from your inbox. A deleted conversation sits in your Recently Deleted list for 30 days, where you can restore it; after that its messages are removed from your account for good. Everyone else in it keeps their own copy until they delete theirs. A message is erased from our systems once nobody who took part can see it anymore.

Time-limited things expire on their own. Open Work posts are removed six months after their last day, together with the applications to them. Agency requests and plans are removed six months after their event. Messages in agency rooms are removed a year after they were sent. Closed holds and past dates leave your inbox for its archive two weeks after the last message, where they stay until you delete them.

Files and calendars. Files you send in a conversation are stored privately; only the people in the conversation can open them, and they are removed with the conversation. If you turn on the calendar link, anyone who has that link can see your holds and trips; you can replace it at any time.

Statistics. We count page visits anonymously, without cookies (Vercel Web Analytics), with private links such as invites stripped out. When you sign up we note which site or campaign link brought you, and keep it with your account.

Profile views. When you look at someone’s profile, we count it for them: they see how many people looked this week and roughly how they found them (a search, the Directory, a festival page, a link), never who. Each look is kept for 90 days.

Contact form. What you send through the contact page is emailed to us and kept for twelve months, with a scrambled fingerprint of your connection (never your IP address itself) to stop spam.

Invites. When a member invites someone by email (to a hold, a post or a conversation), we keep that address, the name they gave and what it’s about for six months, and send one email in the member’s name. We don’t add the address to any list: it only hears from us again if a member invites it. The link in any invite email stops all future invites to that address; we keep that request so we can honor it.

Forwarding. When you forward a post or a hold request to someone, we keep a record of the forward (what, from whom, to whom and who first opened it) for six months, then remove it; a shared link stops working at the same time. A link shows the work to whoever opens it, but never the names of the people behind it until they sign in. If you forward a hold request, the person who asked is told who you forwarded it to.

Notification addresses for phones and browsers are removed when you turn notifications off, when the device stops accepting them, or with your account.

Our own records expire as well: crash reports 30 days after they were last seen, a rejected verification request a year after the decision, and a report about a profile a year after we resolved it.

• Hide or list your profile at any time from Your Profile.
• Edit or remove anything on your profile whenever you like.
• Delete your account yourself from Account. It takes effect immediately.
• Block anyone from contacting you, from their profile page.
• Download your data from Account: one file with everything we hold that you put in or that is about your account.
• If you’re in Hong Kong, the Personal Data (Privacy) Ordinance gives you the right to ask whether we hold personal data about you, to get a copy, and to have it corrected. We answer within 40 days. You can complain to the Privacy Commissioner for Personal Data (pcpd.org.hk).
• If you’re in the EU, the UK or another place with similar law, you have the right to access your data and get a copy you can take elsewhere, to have it corrected or erased, to restrict or object to how it’s used, and to complain to your data protection authority. We answer within a month, free of charge.
• If you’re in California, you can ask what we collect and why, and ask for it to be deleted. We don’t sell or share personal information for advertising.
• For any of these, write to contact@strobecall.com from the address on your account, so we know it’s you.

We set only the cookies needed to keep you signed in, and one that remembers your time zone so dates like “today” are right where you are. There are no advertising or tracking cookies, which is why there’s no cookie banner. The human check on the sign-in forms is Cloudflare’s and sets no tracking cookie of ours; your browser’s own storage holds a few preferences, listed above.

Strobecall is for working professionals aged 18 and over. We don’t knowingly collect data from anyone younger.

If this policy changes in a way that matters, we’ll update the date at the top and tell members before it takes effect.