Kawalies is a backstage app for university theater troupes and student filmmakers, made by Belal. You can read the scripts and play the games without an account. This page says what it keeps once you sign in, and who can see it.
WHAT WE KEEP
- Your account: your email address, your name, how you sign in and when. A password is stored scrambled, so nobody can read it, us included. If you use Google, it also sends the address of your profile picture. We don't show that picture anywhere.
- Your actor card: whatever you type into it, your photo if you add one, and links to recordings.
- Friends and shows: who you're friends with, open friend requests, the shows you said you're going to, and the seats and audition slots you reserve.
- Notifications: the answers to your reservations and, if a show is yours, who reserved or cancelled. Each account keeps its newest 200.
- Card views: when your card was opened, and a random number kept in the visitor's browser so a repeat visit counts once. Not their name or address.
- Your internet address: the one you're on when you sign in or save your card. We keep it for 30 days, only to stop abuse.
WHAT WE DO WITH IT
- We use it to run the site: to sign you in, save your card, show it to people, and show your friends which shows you're going to.
- We don't sell it, we don't show ads, and we only use your Google account to sign you in.
- If an account breaks the rules, an admin can remove things from its card, block or delete it, or block the internet address it uses. Blocking an address affects everyone on it.
WHO CAN SEE IT
- Anyone signed in: your card and its photo, at its link and in search. Nobody can open it without an account. Turn off "Let people find my card" on your card page and only you and the site's admins can open it.
- Your friends: your name, campus, troupe and the shows you're going to. Anyone you send a friend request to sees your name, campus and troupe, even if your card is hidden.
- A show's owner: when you reserve or cancel a seat or an audition, the account that owns that show or casting call sees your name and what you reserved, with a link to your card. If your card is hidden, they see your name and no link.
- The site's admins: every account's email and card, hidden cards included, how many people opened each card, and each account's recent internet addresses.
WHERE IT'S KEPT
- Supabase keeps the database and card photos and handles sign-in, on servers in Ireland. Vercel hosts the site. Google handles Google sign-in and sends the site's emails, such as confirming an account or resetting a password. These services keep short technical logs, such as internet addresses, to run and protect what they do.
IN YOUR BROWSER
- We store your sign-in, your card if you haven't signed in, and small things like whether you've seen the tour. There are no advertising or tracking cookies.
YOUR CHOICES
- You can change your card or photo, or hide your card, at any time from your card page.
- To delete your account, use "Delete my account" at the bottom of your card page. That removes your card, your photo, your friends and your list of shows right away, and it can't be undone.
A question about your data? Contact Belal