TeamRally TeamRally
Start free

Privacy Policy

Last updated: June 2026

This Privacy Policy explains how TeamRally (“we”, “us”) collects, uses, and protects information when you use the TeamRally website and application (the “Service”). By using the Service you agree to the practices described here.

Information we collect

  • Account information — name, work email, password (stored hashed), and the organisation you belong to.
  • Profile & team data — information you or your administrators add to run events and celebrations, such as roles, groups, birthdays, work anniversaries, timezones, dietary preferences, and RSVP responses.
  • Usage data — basic, privacy-friendly analytics about how the Service is used. We do not sell this data. See “Cookies & analytics” below.

How we use information

  • To provide, operate, and improve the Service.
  • To send transactional messages (invitations, reminders, card delivery, surveys).
  • To respond to support requests and communicate about the Service.
  • To keep the Service secure and prevent abuse.

Sharing

We do not sell your personal information. We share data only with service providers that help us run the Service (for example, hosting, email delivery, and analytics), and only as needed for them to perform those functions. We may also disclose information where required by law.

Integrations

If your organisation connects Slack, Basecamp, or a calendar, we exchange only the data needed to deliver the messages and updates you ask us to send. You can disconnect an integration at any time from your workspace settings.

Cookies & analytics

There is no cookie consent banner on this site, because nothing we set requires consent. Our analytics is Umami, which we host ourselves on our own EU infrastructure: it counts page views and referrers in aggregate, sets no cookies, assigns no persistent visitor ID, does not fingerprint your browser, and sends nothing to any third party. The only cookies we set are strictly necessary ones — a short-lived token that protects the sign-in flow if you use Google or LinkedIn sign-in, and a session cookie for staff administration. Cookies this narrow are exempt from consent requirements under the ePrivacy Directive and the German TDDDG. Your signed-in session itself is kept in your browser's local storage, not a cookie.

Who else processes this data

A small number of providers help run the Service. Each sees only what it needs, and each is bound by a data processing agreement.

  • Hetzner (Germany) — hosting and the database.
  • Netlify — serving this marketing site.
  • Cloudflare (R2, EU) — file storage.
  • Resend and ZeptoMail — transactional email: invitations, event notices, celebration cards, pulse surveys.
  • Sentry — error reports.
  • Umami — cookie-free analytics, no cross-site tracking.
  • Google and LinkedIn — only if you choose to sign in with one of those accounts.
  • Slack, Basecamp and Google Calendar — only for workspaces that connect them, and only the data needed to post or create the item in question.

We do not sell personal data, and we do not use it to train anything.

Our own feedback tool

The feedback, roadmap and changelog pages — and the small launcher in the corner of the home page — are FeatureWish, which runs at app.featurewish.com. Despite the different domain it is not a third party: it is another service operated by the same person named in the Impressum, so nothing is handed to anyone else. Loading it sends the usual request data — your IP address and the page you are on. It stores nothing on your device: no cookie, no local storage, nothing to consent to under § 25 TDDDG.

Data retention & your rights

We retain information for as long as your account is active or as needed to provide the Service. You can request access to, correction of, or deletion of your personal data by emailing hello@teamrally.app. You can export your organisation's data as CSV at any time. Depending on your location, you may have additional rights under laws such as the GDPR or CCPA.

Security & where your data lives

TeamRally is hosted in the European Union and built to be GDPR-friendly. Your data is encrypted in transit (TLS), never sold, and processed only to provide the Service. No method of transmission or storage is completely secure, but we use industry-standard measures to protect your information and will notify you of material incidents as required by law. You can export your organisation's data as CSV or request deletion at any time.

Children

The Service is intended for workplaces and is not directed to children under 16.

Changes

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

Contact

Questions about this policy? Email hello@teamrally.app. The controller for this processing, with full contact details, is named in the Impressum. You also have the right to complain to a data protection supervisory authority — ours is Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI), and you may equally complain to the one where you live or work.