Privacy

Who we are

We run Cast of Falcons at thecastoffalcons.com. We are the Australian trading entity behind the site. For a correction, a deletion, or any other privacy question, email hello@thecastoffalcons.com.

What we store

Sign-in is email and password. We never store the password itself. We use what we store to run accounts, profiles, roles, applications, and messages.

• Email.
• Your name, and the kind of work you do or hire for.
• Mobile number, if you give one. It's optional. We don't text it and don't show it to anyone.
• Home base (workers): a suburb, or a pin you drop near home. We round a pin to about 500 m before we save it. We never ask for a street address. Employers never see the pin — only your suburb and a distance band (under 5 km, 5–15 km, 15 km+).
• An optional photo — your face (workers) or your workplace (employers). Your browser shrinks it before upload and we keep only that small copy. Worker photos are shown to signed-in employers; workplace photos show on role cards.
• Role (worker or employer) and whether you're Available this week.
• What you asked for (workers): role types, days, and how far you'll travel — used to show roles that fit.
• Your last rate, if you add it. Private: only you see it, to compare roles of the same kind. Employers never see it.
• Your answer to "Was the pay what they posted?" after a meet or start. Your name is never shown. Two or more undisputed "no" answers from different workers show as a count on that employer's roles.
• Profile, workplaces, roles, applications, and messages.
• A session cookie so you stay signed in.

What we don't store

We don't take document uploads (other than the optional photo), ratings, or card numbers. Nothing is charged today. We do not sell personal information.

Where it lives

The data, including photos, lives in Neon Postgres in Sydney, via Vercel. When an employer messages you or replies to your application, or a Rockstar near you is posted while Rockstar is on,we send you an email through Resend, our email provider.

Cookies

One session cookie only: dop_session. It is httpOnly, so scripts on the page cannot read it.

Access, correction, and deletion

You can export your data from Settings. You, or an admin, can delete the account. Export and delete in Settings both need your current password. Delete removes your profile, photo, home base, and cascaded workplaces, roles, applications, and messages you are in.

There is no separate block or unpublish control yet. If you want a correction or a deletion, use Settings or email hello@thecastoffalcons.com.