What SnackRoster collects, and what it never does

Who is responsible for your data

The controller of the personal data described here is MLJ, SASU, the company that publishes SnackRoster and operates snackroster.com. The publication director, Jimenez Julien, is the person who reads what the contact form sends and who answers privacy requests. You can reach him at jimenezjulien42@gmail.com. Company identification details are listed on the legal notice page.

The exact information the contact form collects

The form in the contact section of the home page is the only place on this website where you can send us personal information. It collects the following named fields, and nothing more:

• name, your full name, so a reply can be addressed to a person.
• email, the email address we reply to.
• company, the name of your team, club or league.
• role, your role in that organization, chosen from a short list such as team manager, head coach or league board member.
• request, what you want from us: a demo, early access or a quote.
• size, roughly how many teams you run, chosen from a range.
• message, whatever you choose to write about how duty week works on your team.
• consent, a record that you ticked the box agreeing to be contacted about your request.

Three hidden fields travel with the submission for routing purposes: form-name, which tells the form service which form was used, subject, a fixed label identifying the site, and recipient, the mailbox the message is delivered to. A fourth hidden field, bot-field, is a spam trap that stays empty when a human fills the form. We do not ask for a postal address, a phone number, a payment card or any information about a child, and you should not put children's names in the message box.

Why we may use it, and on what legal basis

We use the fields above for one purpose: answering your request and, where you asked for it, arranging and running a demo of SnackRoster. For visitors in the European Union and the United Kingdom, the legal basis is your consent, given by ticking the consent box, together with our legitimate interest in responding to a business enquiry and taking steps at your request before a possible contract. For visitors in the United States, we process this information because you sent it to us for that purpose. We never sell it, we never share it with data brokers, and we do not use it to build advertising profiles or to run automated decision making of any kind.

Who processes submissions

Form submissions are received and stored by Netlify Forms, operated by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which also hosts this website. Netlify acts as our processor: it holds the submission so that we can read it, and forwards a notification to the mailbox listed in the recipient field. Beyond Netlify and the email provider that delivers that notification, no third party receives your submission. We do not pass enquiries to advertising networks, resellers or affiliates.

Cookies and measurement

This website sets no cookie of its own and loads no third party analytics tag, no advertising pixel and no social media tracker. Web fonts are requested from Google Fonts, which receives the network request needed to deliver the font files. Netlify keeps standard server logs, including IP addresses, for security and abuse prevention for a short period defined by the host. There is nothing on this site to opt out of, because there is nothing following you around it.

How long we keep things

A contact form submission is kept for 24 months from the date you send it, so that we can find the history of a conversation with a club that returns a season later. After that it is deleted from the Netlify Forms store and from the mailbox. If you ask us to delete it sooner, we do so within 30 days and confirm by email. Product data belonging to paying customers, such as rosters and rotations, is covered by the customer agreement in the terms of service and is deleted within 30 days of an account being closed.

Your rights in the United States

If you live in California, Colorado, Connecticut, Utah or Virginia, state privacy law gives you the right to know what personal information we hold about you, to obtain a copy of it, to correct it, to have it deleted, and to be free from discrimination for exercising those rights. California residents may also ask about any disclosure of personal information for a business purpose. We do not sell personal information and we do not share it for cross context behavioral advertising, so there is no opt out to submit, but you are welcome to confirm that in writing. Send your request to jimenezjulien42@gmail.com from the address you used on the form, and we will respond within 45 days. You may appeal a refusal by replying to our answer with the word appeal in the subject line.

Your rights in the European Union and the United Kingdom

Under the General Data Protection Regulation you have the right of access, rectification, erasure, restriction of processing, objection to processing and data portability, and the right to withdraw consent at any time without affecting processing already carried out. Requests go to the same address, jimenezjulien42@gmail.com, and are answered within one month. If you believe we have handled your data badly, you may lodge a complaint with your national supervisory authority. In France that authority is the CNIL.

International transfers

MLJ, SASU is established in France and our host is established in the United States, so a submission sent from Europe is transferred to the United States. That transfer relies on the standard contractual clauses adopted by the European Commission, which are part of our agreement with Netlify. A submission sent from within the United States stays with a United States processor.

Children's privacy

SnackRoster is bought and operated by adults: team managers, coaches, club administrators and league volunteers. This website is not directed to children, we do not knowingly collect personal information from anyone under 13, and the contact form should never be used to send a child's details. Inside the product, a coach may record a player's first name and an allergy note for the duty card, which is customer data governed by the customer agreement rather than by this website policy. If you believe a child's information reached us through this site, write to us and we will delete it promptly.

Security and changes to this policy

Pages and form submissions travel over HTTPS. Access to the form store is limited to the publication director. If this policy changes we update the date at the top of this page and, where the change is significant, we say so in the release notes we send to account owners. The previous version is available on request.