Privacy, without the fog.

The short version

RosterGuard is an independent roster tool for easyJet BALPA UK pilots. It needs a verified@easyjet.com work email because access is limited to eligible pilots. Your roster, logbook, profile and SNC history sync to your account so you can use another device. The database is encrypted at rest, but this is not end-to-end encryption. The calendar link itself stays on your device.

For UK data protection law, the independent maintainer of RosterGuard is the controller of the data described here. Contact is through the feedback form in the app.

This website does not use advertising cookies, sell data or run a cookie banner. If analytics are enabled, they are cookieless and aggregate. There are no newsletter forms, comment boxes or embedded social posts on this site.

Cookies on this website

get.rosterguard.co sets no cookies. It does not write to local storage, use fingerprinting, or load advertising or social-media pixels. That is why there is no cookie banner.

Analytics on this website

Two cookieless analytics tools are active. PostHog is loaded by the site when its build-time token is configured. Cloudflare Web Analytics is enabled on the Cloudflare zone and injects its own beacon. Neither uses cookies or stores a persistent identifier.

• PostHog. One anonymous pageview is sent per page load. The page generates a fresh random identifier for that request and does not store it, so it cannot recognise you on a later page or visit. There is no cookie and no persistent identifier, and IP-based location lookup is disabled. PostHog still receives the request itself, including the network address used to send it.
• Cloudflare Web Analytics. A cookieless beacon reports aggregate page views, referrers and performance. It does not identify individual visitors.

We use this only to count visits, see which pages are read and spot performance problems. It is not used for advertising, profiling or cross-site tracking, and the data is not sold.

Hosting and server logs

This site is served by Cloudflare Workers. Cloudflare processes standard request data — such as the requested URL, browser user agent, approximate location derived from the network address, and timestamps — to deliver the site and protect it from abuse. Cloudflare and the database provider process data on RosterGuard's behalf.

Your RosterGuard account

The app requires an account. Sign-in is restricted to verified @easyjet.com addresses and handled by Supabase Auth. RosterGuard does not receive or store your email password.

What syncs and what stays on your device

The app keeps a working copy on your device and syncs these records to your signed-in account so they survive a lost phone and appear on another device:

• Your roster and the revisions that make up the timeline.
• Your logbook flights and totals.
• Your pilot profile.
• Your SNC decisions and change history. Refusal history, change events, anchors, calendar overrides and related SNC records sync with your account too. This matters because a refusal cannot be rebuilt by re-uploading a roster.

Only your signed-in account can read its rows. The database provider encrypts stored data at rest, but this is not end-to-end encryption: the service can technically access the data to run and support the app. It is not used for advertising or sold.

The calendar link stays on your device. It is a bearer secret: anyone who has it may be able to read that calendar. It is not synced to your account. If your browser cannot fetch the link directly, RosterGuard's server fetches it and relays the data to your device; it keeps no extra copy beyond your normal sync.

Other data the app sends

• Product analytics. On the production app, RosterGuard uses PostHog to record which screens and features are used, error categories and performance samples. When you sign in, those events are linked to your account identifier and email so a fault can be traced. Search text and the content of your roster are not sent in analytics events.
• A daily usage count. The app may send a random, stable identifier once a day that is not tied to your name or email, so the maintainer can estimate how many devices use the app.
• Feedback and reports. The feedback form sends your message, the screen you were on and the app version. It includes an email address or attachment only when you provide one. Optional route or duty code reports contain public airport or duty-code information, never roster content.
• Weather, airports and account help. Lookups send the airport or route you asked about. Account-help requests send the message you write so the maintainer can respond.
• The optional Chatbot. If you use it, your question and relevant manual excerpts are sent to a third-party model provider to generate an answer. Do not paste roster, personal or confidential information into it.

What RosterGuard does not do

• It does not sell your data or share it with advertisers.
• It does not write to eCrew, contact crew control or change your company roster.
• It does not use advertising cookies or cross-site trackers on this site.
• It does not ask for your easyJet password.

Retention and deleting your account

Account data is kept while your account exists. Delete account in the app permanently removes the account and its synced data. A copy may remain in the database provider's normal backups for their backup cycle. Data on your own device is removed when you clear the app's site data or uninstall it.

Your rights

Under UK data protection law you can ask for a copy of your data, correct it, delete it, restrict or object to some processing, or ask for it in a portable format. Use the feedback form in the app to make a request. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this page

This page describes current behaviour. If the app starts doing something materially different with data, this page will be updated before or when that change ships. The date at the top shows the last revision.