Privacy Policy
This policy explains what information Root Access collects through rootaccess.org and the sites we run, what we do with it, and what choices you have. The short version: we collect what we need to run the space, we don’t sell it, and we keep as little as we can.
This policy took effect on 13 January 2022 and was last updated on 2 November 2026.
What we collect
When you browse our website
Like nearly every website, our servers keep basic logs of each request: your IP address, browser, the page you asked for, and the time. We use these to keep the site running and to deal with abuse.
Analytics
We use self-hosted web analytics tools to understand how our website is used. They run on servers we control and do not use cookies. The data they collect stays under our control and is not sent to any third party.
When you visit rootaccess.org, our analytics record:
the pages you visit, the page you came from, and the time of your visit
your browser, operating system, device type, screen size, and language
your approximate location (country, region, and city), looked up from your IP address. Your IP address itself is not stored by our analytics.
page performance measurements, such as how long a page took to load
For a sample of visits, our analytics also record how you interact with the page (clicks, scrolling, and mouse movement) so that we can produce heatmaps of what people use on each page. Anything typed into a form field is masked and never recorded. This applies to all visitors, including members who are signed in.
Visits to short links at go.rootaccess.org are also counted, using the same information listed above.
You can block these tools with a content blocker or by disabling JavaScript; the website will continue to work.
Error reporting
We use Sentry to find out when something breaks on our website. When an error happens, details about it are sent to Sentry. These may include your IP address, browser details, the page you were on, and, if you’re signed in, your account information.
When you create an account or become a member
We ask for:
your full name (used for signing membership documents) and, optionally, a preferred name
your email address
optionally, your phone number and social media profiles
an emergency contact: their name, relationship to you, email, and phone
Your profile also has an optional demographics section (pronouns, gender identity, LGBTQIA2S+ identity, and race/ethnicity). This helps us see whether we’re building a diverse and inclusive community, and some grants and partnerships ask for it. We never share it attached to your name. We may share it only as totals, such as percentages in a report or grant application. You can leave it blank or clear it at any time.
When you visit the space
Each member gets an access code. When you use it, we record that it was used and when.
When you pay or donate
Payments are handled by Stripe (memberships and classes) and Givebutter (donations). Your card details go directly to them; we never see or store your full card number. We keep a reference to your Stripe customer record so we can manage your membership, and we keep your name, email, and phone in sync with it.
When you sign documents
Membership agreements and waivers are signed electronically through RabbitSign. We send them your name and email so they can prepare the document for you to sign.
How we use your information
We use your information to:
run your membership, classes, and access to the space
contact you about your account, classes, or the space
reach your emergency contact if something happens to you at the space
send you our newsletter, if you signed up for it
understand how the website is used and make it better
keep the website and the space secure
meet our legal and accounting obligations
How long we keep it
We keep your account information while you have an account with us. If you ask us to delete your account, we’ll delete or anonymize your information, except for anything we have to keep for legal, tax, or accounting reasons.
Keeping it safe
We take reasonable steps to protect your information. No system is perfectly secure, though, so we can’t guarantee it. If a data breach affects you, we’ll follow the law about notifying you. Please pick a strong password and keep it to yourself.
Your choices
See or fix your information. Most of it is on your profile page, where you can edit it at any time.
Ask for a copy, or ask us to delete it. Email us and we’ll take care of it. We may need to confirm it’s really you first.
Unsubscribe from our newsletter at any time using the link in any email.
Leave optional fields blank, including demographics, phone, and social media.
Block analytics with an ad/content blocker; the site will still work.
Children
Our website isn’t meant for children under 13, and we don’t knowingly collect personal information from them. If you believe a child has given us their information, contact us and we’ll delete it.
Links to other sites
Our website links to sites we don’t run. Their privacy practices are their own, so check their policies.
Changes to this policy
When we change this policy, we’ll post the new version here and update the date at the top.
Contact us
Questions about your privacy, or requests about your information, can go to info@rootaccess.org.