Privacy Policy

Last updated: June 20, 2026

This site ("ShiftRunner.io") is operated by Andrew Mallek. This policy explains what information we collect, how we use it, and your rights regarding your data.

Information We Collect

When you create an account, we collect:

• Name — to identify you on the schedule
• Email address — used for login and account identification
• Phone number — the last 4 digits are used as your login PIN

When you use the app, we also collect:

• Shift signups — which shifts you sign up for and your confirmation status
• Login activity — timestamps and IP addresses for rate limiting and security

How We Use Your Information

Your information is used solely for:

• Managing volunteer shift scheduling for the event
• Displaying your name on the schedule so organizers and fellow volunteers can coordinate
• Authenticating your account and preventing unauthorized access
• Anonymous analytics to understand site usage (via Vercel Analytics, which is cookieless and collects no personal data)

Data Sharing

We do not sell, rent, or share your personal information with third parties. Your data is stored using the following infrastructure providers, solely for the purpose of operating this site:

• Vercel — hosting and analytics
• Supabase — database storage

Cookies

This site uses a single session cookie to keep you logged in. It is essential for the site to function and contains no tracking information. We do not use advertising or third-party tracking cookies.

Data Retention

Your account and shift data are retained for the duration of the event and a reasonable period afterward for record-keeping. You may request deletion of your data at any time by contacting us.

Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data

Security

We take reasonable measures to protect your information, including encrypted connections (HTTPS), hashed passwords, HTTP-only session cookies, and rate limiting on authentication endpoints.

Contact

If you have questions about this privacy policy or want to exercise your data rights, contact Andrew Mallek at privacy@shiftrunner.io.

Back to sign in