We take the privacy of theatre educators and their programs seriously. Here's exactly what we collect and why.
Theatre4u™ (theatre4u.org) is a product of Artstracker LLC, a California limited liability company. We are committed to protecting the privacy and security of all users, with special attention to the requirements applicable to educational institutions and school districts.
This Privacy Policy is designed to address the requirements that may apply to us and to our educational customers, including the California Consumer Privacy Act (CCPA), CalOPPA, the Family Educational Rights and Privacy Act (FERPA), and the Children's Online Privacy Protection Act (COPPA).
Theatre4u is designed for use by theatre educators, school drama departments, community theatre organizations, and district administrators. Accounts are created by adults (18 or older) or by authorized school employees, not by students directly.
| Type | What We Collect |
|---|---|
| Account Info | Organization name, email address, password (encrypted — we never see plaintext passwords), and optional profile details including phone, city, and bio. |
| Inventory Data | Item names, descriptions, photos, locations, and condition notes you add to your account. This data belongs entirely to your organization. |
| Communication Data | Messages sent between organizations on the Backstage Exchange platform. |
| Usage Data | Pages visited and features used, which we use to operate and improve the platform. |
| Cookies & Tracking | Across our websites and web app, we and our providers use cookies and similar technologies, including Google Analytics and the Meta (Facebook) Pixel, to understand how visitors and users interact with the Service, measure our advertising, and record when a visit leads to a signup (page views, referring source, and signup events). These tools may collect device and usage identifiers and IP address through cookies; they do not receive your account credentials, inventory, messages, or organizational content. You can control cookies in your browser, opt out of Google Analytics at tools.google.com/dlpage/gaoptout, and manage interest based ads at aboutads.info/choices. |
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase supabase.com | Database and authentication | All organizational data. Hosted in AWS us-east-1. SOC 2 Type II certified. Encrypted at rest and in transit. |
| Resend resend.com | Transactional email | Email addresses only, for delivery of notifications and confirmations. |
| Vercel vercel.com | Web hosting and content delivery | Processes web requests to serve the Service and keeps standard server and CDN logs (such as IP address and request metadata). Does not store your account or inventory content. |
| Stripe stripe.com | Payment processing | Billing information only. Stripe does not receive inventory or student data. |
| Google Analytics & Meta Pixel google.com · facebook.com | Analytics and advertising measurement | Activity across our websites and web app (page views, referral source, signup events, and device or usage identifiers collected through cookies). These tools do not receive your inventory, messages, or organizational content. |
| Other Theatre Programs | Backstage Exchange listings | When you post items, your organization name, location, and listed items are visible to other logged-in Theatre4u members. |
No other sharing occurs without your explicit written consent.
Depending on how your organization uses the Service, limited student information may be processed on your behalf, such as a name or school email for a student team member, or a photo or record that your staff uploads. We use student information only to provide the Service to your organization. We do not sell student information, do not use it for targeted advertising, and do not build student profiles for purposes unrelated to the school.
School administrators retain full control over their organization's data and may request export or complete deletion at any time. Theatre4u will not disclose organizational data to third parties without the written consent of the institution's authorized representative, except as required by law.
Theatre4u is not directed to children and does not offer public signup to students. Student access, where a program chooses to enable it, is provisioned and supervised by the school under the school's authority. For students under 13, a school's authorization under COPPA covers school authorized educational use only and does not replace parental consent for any commercial use; Theatre4u does not use student information for commercial purposes.
Your data is retained as long as your account is active. You may request complete deletion of your account and all associated data at any time by emailing hello@theatre4u.org. We will complete deletion within 30 days.
Deleted data is not recoverable. Anonymized aggregate statistics (total item counts, etc.) may be retained. Backup snapshots are retained for 7 days before permanent deletion.
California residents have the right to:
For school district subscribers (District plan), Artstracker LLC will execute a Data Processing Agreement (DPA) upon request. Contact hello@theatre4u.org.
We will cooperate with district IT security reviews and questionnaires. Theatre4u's infrastructure (Supabase/Vercel) can provide SOC 2 and ISO 27001 documentation upon request for your district's vendor review process.
We will notify users of material changes to this policy with at least 14 days notice via email.