Privacy
Last updated 17 September 2026
The short version: rostra keeps your roster so it can show it to you and put it in your calendar. It does not sell it, share it for advertising or track you with analytics. You can delete it whenever you like.
Who we are
rostra is an independent service operated from Sydney, Australia. It is not affiliated with, endorsed by or connected to Qantas or any other airline. Questions about this policy go to hello@rostra.havl.dev.
What we store
- Your email address, which is how you sign in.
- What your roster says about you: your name, staff number, base, rank and the rest of the roster header.
- Your roster contents: trips, flights, report and duty times, days off, reserve, leave and sick days, for every roster you upload or forward, including the original file and, for forwarded rosters, the email it arrived in.
- Hotels you save: the hotel and transfer time you enter for a port. They show on your trip pages, and on a share link's only if you switch that on for the link.
- Sign-in records: passkey public keys (never the private key, which stays on your device), active sessions with the browser they came from, and short-lived sign-in codes with the IP address that requested them, kept to stop abuse.
- Links you create, such as calendar feeds and family share links, stored as one-way hashes so that even we cannot read them back.
Why
Only to run the service you signed up for: to show you your roster, work out what changed between versions, publish the calendar feeds and links you ask for, email you sign-in codes and the notifications you choose, and keep the service secure. We do not use your roster for advertising, profiling or anything unrelated to showing it back to you.
How long we keep it
Your rosters are kept until you delete them or close your account. Sign-in codes expire after 10 minutes and sessions after 30 days.
Who processes it for us
- Cloudflare hosts rostra and stores its database and files, receives rosters you forward by email, and keeps short-lived request logs for security and debugging.
- Resend delivers the emails rostra sends you.
Both may process data outside Australia. Weather forecasts on trip pages come from MET Norway: rostra's server asks for the forecast at an airport's coordinates, and nothing about you or your roster is sent. We use no other third parties, no advertising networks, and no analytics or tracking scripts on any page that shows roster data.
Cookies
Two, both essential: one keeps you signed in, and one ties a sign-in code to the browser that asked for it. There are no tracking cookies.
Your choices
- Delete any roster, at any time, from History. It is gone immediately, original file included.
- Download a copy of everything we hold about you, or delete your whole account, from Settings. Deleting your account takes every roster, original file, saved hotel, calendar feed and share link with it. You can also ask by emailing hello@rostra.havl.dev.
- Correct your details, or ask what we hold, in the same way.
Your roster, your responsibility
rostra only ever sees rosters you choose to send it. You forward or upload your own roster; we never ask for your airline or crew portal credentials. If your employer has rules about where roster information may go, following them is up to you.
Security
Connections are encrypted, secrets such as session and link tokens are stored only as hashes, and access to production data is limited to the operator. If we ever learn of a breach affecting your data, we will tell you.
Complaints and changes
We aim to handle personal information in line with the Australian Privacy Principles. If you are unhappy with how we have handled yours, email us first; you can also contact the Office of the Australian Information Commissioner at oaic.gov.au. If this policy changes in a way that matters, we will email you before it takes effect.