Privacy
Built for honest team conversations.
RetroRally collects only the information needed to run and retain a team retrospective.
What is stored
Host account details, securely hashed host passwords, team names, participant nicknames, room activity, mood scores, identity-hidden issues and solutions, votes, missions, retrospective summaries, optional post-retro ratings or comments, and contact-form names, email addresses, subjects, and messages.
Identity-hidden contributions
Issue and solution authors are not exposed to hosts or participants. The database retains an internal player link for game integrity and recovery, so these contributions are anonymous to the room rather than to the service operator. Internal identifiers are never included in public room or history responses.
Retro feedback
The RetroRally platform administrator can see ratings and optional comments across customer teams, grouped with the retro and team. Customer hosts do not receive this platform-wide feedback view. Participant nicknames and player identifiers are not included in administrator feedback results. The database keeps an internal player link to enforce one response per participant, so this feedback is identity-hidden in the interface rather than anonymous to the service operator.
Website contact
The public contact form stores the name, email address, topic, subject, and message supplied by the visitor. These messages are visible only in the protected platform administrator inbox and are used to investigate and respond to the request. Do not include passwords, room passes, or other secrets.
Account email
Customer host email addresses are used for account verification and password recovery. Transactional messages are delivered through Resend, which processes the recipient address and message delivery data for that purpose. Verification and reset links are time-limited, stored as hashes, and can only be used once. These automated messages come from a no-reply address; help requests should use the contact form.
Device storage
The browser stores room-scoped access passes so a host or participant can reconnect after refreshing. Clearing browser storage removes those local passes.
Operation and deletion
The operator controls the deployment database, provider backups, retention schedule, and deletion requests. Use the contact form for access or deletion requests. Before public launch, publish the applicable retention periods and the operator's legal identity.