Trooper keeps a scout troop's roster and event calendar, and lets families reply to events. Each troop's information is visible only to that troop's members, and the site has no advertising. This policy covers what Trooper stores, why, who can see it, and how to have it removed.
Trooper ("we", "us") is run by volunteers for the scout troops and packs that use it, and for their members and families. You can reach us at privacy@trooper.fyi.
You sign in to Trooper with Google. We ask Google only for the
openid, email and profile scopes.
Trooper's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can revoke Trooper's access at any time on your Google account permissions page.
A troop administrator creates every account before anybody can sign in. They enter what the troop needs to run: name, email address, phone number, role (scout, parent or leader), patrol, and which adults are the parents or guardians of which scouts.
| Cookie | Purpose | Lifetime |
|---|---|---|
sess |
Keeps you signed in. It holds a signed token naming your account and nothing else. | 7 days |
oauth_state |
Protects the Google sign-in handshake against forgery. | The sign-in only |
You need both to sign in and stay signed in. Both are sent only over HTTPS, and JavaScript cannot read them. There are no advertising or analytics cookies.
Only to run each troop's roster and events:
We do not sell personal information, share it with advertisers, or use it to build profiles.
Other troops on the site cannot see a troop's information.
Each troop's published events also go onto a public Google Calendar, so families can subscribe in their own calendar apps. Each calendar entry has the event's name, times, location address and description. It never includes the roster, who has replied, or anybody's contact details.
We run Trooper on services that handle this information on our behalf. They may use it only to provide their service to us.
| Provider | Role | Where |
|---|---|---|
| Fly.io | Runs the application | United States |
| Neon | Hosts the database | United States |
| Amazon Web Services (SES) | Sends email | United States |
| Sign-in, the public troop calendars, and the typeface the site loads from Google Fonts | United States |
Otherwise we disclose information only when the law requires it, or to protect somebody's safety.
The roster includes young people, and we handle it with that in mind.
Trooper is not offered directly to children. A troop's adult leaders create youth accounts, using details from those leaders or from the child's parent or guardian. We do not ask children for information, show them advertising, or make their information public.
A parent or guardian can see everything we hold about their child, have it corrected, or have it deleted. Contact their troop administrator or privacy@trooper.fyi. If we find we hold a child's information without the right permission, we delete it.
Your account is kept while you belong to a troop. When a troop administrator removes you from your last troop, your account is deleted, along with your replies, your parent and patrol links, and your record of emails received. Two records refer to you by email address and are kept after that: the sign-in records and the change history. They are part of the troop's security and audit trail. We delete them too if you ask.
To see what we hold about you or your child, correct it, delete it, or get a copy, write to privacy@trooper.fyi. We will respond within 30 days.
No system is perfectly secure. If a breach affects your information, we will tell you, and any regulator the law requires us to tell.
If this policy changes, we will update the date at the top. For a significant change, we will also tell members directly.
Write to privacy@trooper.fyi with any question about this policy or your information.