Privacy policy

Last updated 12 October 2026

This policy covers the StageRoll app for iPhone, iPad and Android, and this website, stageroll.co. It says what we collect, why, who else handles it, how we protect it, how long we keep it, and what you can ask us to do.

Who we are

StageRoll Ltd, company number 17436723, registered office 124-128 City Road, London, EC1V 2NX, United Kingdom. We are the controller of your account details, the records we keep to run, secure and improve StageRoll, billing records, this website, and emails you send us. Write to hello@stageroll.co with any question.

Content a production puts in

A production’s team uses StageRoll to record its work, and that can include information about people who don’t use StageRoll: photos of cast in costume, hair and makeup, sizes and notes recorded against the characters they play, and the names of people items are lent to. The company or person running the production decides what is recorded and why, and is the controller of that content. The same goes for the access log on a production with enhanced security: the production chooses to keep a record of who opened what, and it is the production’s record. We store and handle all of it on the production’s behalf, to provide StageRoll. If you have a question about what a production holds about you, ask the production, or write to us and we’ll pass it on.

This website

This site sets no cookies and runs no analytics, and we collect no personal data through it. It is hosted on GitHub Pages, and GitHub records visitors’ IP addresses for security, under its own privacy statement. If you email us, your message is handled by our email provider, Microsoft 365.

What we collect in the app

Your account. Your email address, your name, your department, and a profile photo if you add one. You sign in with a one-time code sent to your email and a password you choose, or with Apple or Google. We keep your password only in a scrambled form that can’t be turned back into it, and check it against a public list of leaked passwords without the password itself leaving our servers. If you sign in with Apple or Google, they share your name and email address with us; Apple may give us a private relay address instead of your own. If your production signs in through its organisation’s own sign-in service, we receive your name and email address from it. You need to give your email address, name and department to use StageRoll; the photo is optional.

Your productions. The productions you belong to, your role in each, the invitations you send and receive, and which records and reports you added, and when.

Your devices. For each device you sign in on: its model, its platform, the IP address and app version it connects with, and when it signed in and was last active. You can see your devices in the app and sign any of them out.

What your team puts in. Scenes and characters; the schedule and its notes; changes, styles, looks and props; items and crates with their photos, notes, sizes, costs and supplier details; and research pictures, links and notes. From a script we keep its name, its file name, the scene headings and the characters, never its dialogue or action. From a report we keep a record of which report was made, by whom and when; the report itself is made on your device, and we don’t keep a copy.

On productions with enhanced security. An access log of who opened or exported scripts, reports and photos, and when. On iPhone, a screenshot of a protected screen is noted in the log. Reports exported from the production carry the name and email address of the person who exported them, so a leaked copy can be traced.

Diagnostics and usage. When something goes wrong, the app sends us an error report: what failed, the app version, the device model and your account, so we can fix it. We also collect information about how the app is used, such as which screens are opened and which features are used, so we can make StageRoll better. We don’t put the content of your productions in either. You can turn usage information off in the app’s settings.

Billing. For a production on a paid plan, the person paying gives us billing details: their name, billing email address, postal address, and VAT number if they have one. Card payments are taken by our payment provider, and we never see or store full card numbers.

On your device

The app asks for camera access to take photos and scan StageRoll codes, and adds photos from your library only when you choose them. Photos are resized on your device before they are uploaded, and their location and camera details are removed. We don’t collect your device’s location. Scripts are read on your device, and the script file is never uploaded.

Your PIN is stored and checked only on your device, and Face ID is handled by your phone; neither is sent to us. Your sign-in and an offline copy of your productions, including photos you’ve viewed, are kept encrypted on your device. All of it is cleared when you sign out, and a production’s copy is removed when you leave it or are removed from it.

When you add a research link, StageRoll fetches its title and picture once, through our servers, and keeps the picture with the production. The linked website sees a request from us, not from you or your team.

How we use it, and why

To provide StageRoll, under our terms with you: creating your account, signing you in, showing each production to its members, keeping the records your team creates, sending the emails the service needs, such as sign-in codes, and taking payment for paid plans.

To keep StageRoll secure and working, because we have a legitimate interest in protecting the service and your account: listing your signed-in devices, signing out devices left unused for 90 days, and using error reports to find and fix problems and look into misuse.

To improve StageRoll, because we have a legitimate interest in making it better: using information about how the app is used, which you can turn off.

To keep the access log, on behalf of productions that use enhanced security.

To meet our legal obligations, such as keeping tax records and answering lawful requests.

We don’t sell your data or show advertising, and we don’t use your work to train AI.

Who else sees it

The other members of your productions see your name, email address, photo and role, and which records and reports you added. On productions with enhanced security, the production’s owner and coordinators also see the access log. People running a production can find your account by your email address to invite you.

Our providers handle data on our instructions, to run StageRoll: Supabase, for our database, sign-in and file storage, running on Amazon Web Services with traffic passing through Cloudflare; our email delivery provider, for sign-in codes and account alerts; our payment provider, for card payments; our diagnostics and analytics providers, for error reports and usage information; and Microsoft, for our own email. Businesses can ask us for our data processing agreement and the full list of our providers.

We also share information when the law requires it, and with a buyer if the business is ever sold, who would have to keep to this policy.

Where it’s stored

Your productions are stored in the UK. Some of our providers, such as those for diagnostics and email, may store data in the European Economic Area, which UK law treats as protecting it adequately. Some are based in, or have staff in, other countries, including the United States, and may reach data from there. Where they do, we rely on the UK’s adequacy regulations, including the UK–US data bridge, or on the UK’s International Data Transfer Agreement or Addendum.

How we protect it

Data is encrypted when it travels and when it’s stored. A production’s content is available only to its members, and photos are served through links that expire within a day. Our own access to customer content is limited to keeping the service working, investigating a breach of our terms, helping when you ask us to, and what the law requires.

No system is perfectly secure. If a breach puts your data at risk, we’ll tell the Information Commissioner’s Office within 72 hours and the productions affected without delay, and we’ll tell you directly if the risk to you is high.

How long we keep it

• Your account details: until you delete your account.
• A production’s content: while the production exists. A deleted production stays in Recently deleted for 30 days, and is then erased with its photos.
• The report record, the access log and what’s kept from scripts: with the production they belong to, and deleted with it.
• Invitations: 30 days after they are answered or expire.
• A device’s record: until it signs out, or 90 days after it was last used.
• Error reports and usage information: up to 12 months.
• Billing records: six years, as UK tax law requires.
• Emails you send us: two years after our last exchange, or longer if they relate to a contract, a complaint or a legal claim.
• Copies in our backups and logs: deleted within 30 days.

Deleting your account

You can delete your account in the app’s settings, or ask us to do it for you. It takes effect straight away and can’t be undone. Your account, your profile photo and your personal notes are deleted, along with any production only you belong to and anything in your Recently deleted. If you own a production that other people are on, hand it over to one of them first, so no team is left without an owner. Work you added to other people’s productions stays with them, without your name.

Your rights

Under UK data protection law you can ask us for a copy of your personal data, ask us to correct or delete it, ask us to limit how we use it, or ask for the data you gave us in a format you can reuse. You can download a copy of your account data from the app’s settings at any time. For information a production holds about you, we’ll pass your request to the production.

You can object to us using your data where we rely on our legitimate interests, and we’ll stop unless we have compelling grounds to continue.

Write to hello@stageroll.co. We may ask you to confirm who you are. We’ll reply within one month, or tell you within that month if a complex request needs up to two more.

If you’re unhappy with how we’ve handled your data, tell us and we’ll look into it. You can also complain to the Information Commissioner’s Office at ico.org.uk.

Children

StageRoll is a tool for people working on productions and isn’t meant for children. You must be 16 or over to create an account.

Changes

If we change this policy in a way that matters, we’ll email account holders before the change takes effect. The date at the top shows when it last changed.