Privacy

SetShift (setshift.app) is a free shift calendar run by a sole trader based in Perth, Western Australia, trading as Clockout Studio. In this policy, "we" means Clockout Studio. We aim to handle personal information in line with the Australian Privacy Principles.

• Your roster. Your pattern, dates, swaps, shift hours and any names you type (for example in Two Rosters) are kept in the page link. Your browser sends that link to Cloudflare, our host, when the page loads, as it does with any web address. We do not store your roster on our servers.
• Your email address, only if you enter it in a sign-up form. It is held by Kit, our email service.
• Calendar link requests. If you add the live calendar link to a calendar app, the app requests a link that contains your pattern, dates, shift hours and calendar name. Cloudflare, which hosts the site, handles that request. Like any web host, it sees technical details such as the IP address of the device making the request.
• Visit counts. See section 9.
• Marketing tags. Links to SetShift from our own marketing may carry utm tags in the address, which show which link brought you here.

We do not ask for your name, payment details or a password. No payment is taken at present.

• Email address. We use it to open the four email-gated tools (Two Rosters, Leave Planner, Weekend and Holiday Shifts, School Terms) and to tell you when the tools change. Our legal basis is your consent. You can withdraw it at any time with the unsubscribe link in every email.
• Calendar link requests. They are used only to build the calendar your app asked for. Our legal basis is legitimate interest in running the feature you asked for.
• Basic visit counts and security. We use them to see whether the site is used and to keep it running. Our legal basis is legitimate interest.

• Kit sends our emails and holds the email addresses of people who sign up. Pages with the sign-up form load a script from Kit.
• Cloudflare hosts the site, runs the worker that builds the calendar link, and provides Cloudflare Web Analytics for visit counts. Cloudflare may keep a copy of a generated calendar for up to an hour so repeat requests are quick.

We do not give your information to anyone else. We may share it if the law requires it.

Kit and Cloudflare may hold data outside Australia, including in the United States. We use the settings and tools these providers offer to protect data, and we keep what we hold to a minimum. No online service is perfectly secure, so we cannot promise that nothing will ever go wrong.

Anyone who has your share link or calendar link can see the roster inside it. Send those links only to people you are happy to show your roster to.

We keep your email address until you unsubscribe or ask us to delete it. We do not keep rosters, because we do not store them. Visit counts are kept by Cloudflare under its own rules. Your browser keeps what is described in section 8 until you clear it.

You can ask us to give you the personal information we hold about you, correct it, delete it, or stop using it because you withdraw your consent. Email [email protected] from the address you signed up with. We may need to confirm it is you.

If you are in the UK or the EU, you also have rights under the GDPR, including to object to processing based on legitimate interest and to complain to your local regulator.

• clockout.rosters.v1 in local storage remembers your last roster so it is there when you return.
• clockout.unlocked.v1 in local storage records that you signed up, so the four tools stay open.
• clockout.nudge-dismissed.v1 in local storage records that you closed a prompt.
• clockout.unlock-return.v1 in session storage remembers which page to send you back to after sign-up.
• One cookie of our own, sidebar_state, remembers whether the side menu is open. It lasts seven days and holds no personal information.

The local and session storage items stay on your device. Your browser sends the cookie with each page request, but we do not read or keep it. Kit's script may set its own cookies or storage. We do not control those, and Kit's policy explains them. You can clear any of this in your browser settings.

We use Cloudflare Web Analytics to count visits. It gives us totals, such as which pages are viewed. We do not use it to build a profile of you, and we do not use advertising trackers.

We do not run ads and we do not sell personal information. The site does not track people across other sites, so it does not respond differently to a Do Not Track signal.

SetShift is not aimed at children under 16. If a child has given us an email address, write to [email protected] and we will delete it.

If we change how the site handles personal information, we will update this page and the date at the top.

Write to [email protected] first and we will try to sort it out. If you are in Australia and are not happy with the answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au. Elsewhere, contact your local regulator, such as the ICO in the UK.