Privacy Policy

Last updated: 11 November 2026

This policy explains what personal information Roll Up collects, why, who sees it and what your choices are. It applies to the Roll Up website and any app version of it. We try to collect as little as we can.

1. Who we are

Roll Up is run by ("we", "us"), of . You can contact us about anything in this policy at . We are the "controller" of your personal information under UK data protection law.

2. What we collect and why

Your account

Username, email address, country and password. Your password is stored only in scrambled (hashed) form, so we cannot read it. You can optionally add a display name, general location, short bio, profile photo, social media usernames and details of your vehicles. We use this to run your account and, for the optional parts, to show your public profile. Legal basis: providing the service you asked for (contract).

If you choose "Continue with Google", Google tells us your verified email address and a Google account ID. We do not receive your Google password, and we use your email and ID only to sign you in and create your account. Google handles that sign-in under its own privacy policy.

If you ask to reset your password, we email a one-time link to the address on your account. That email is sent through Google's Gmail service.

Meets you host

The details you enter (title, description, rules, date, address and map position, optional route, cover photo and updates). Public meets are visible to everyone. For private meets, only a blurred area is shown until you approve someone. Legal basis: contract.

Joining meets

Legal basis: contract.

Host notes about people

Hosts can keep private notes about people they would rather not have at their meets. Only the host who wrote a note can see it. If you think a note about you is inaccurate, contact us. Legal basis: our and hosts' legitimate interest in keeping meets safe and enjoyable.

Meet emails

If you have an account and you join or save a meet, we email you a reminder the day before, and any updates or cancellation from the host. You can switch these off in your profile at any time. We do not email anyone who tapped "I'm going" without an account, because we do not have their address. Legal basis: contract (telling you about meets you chose to attend).

Visit counts and sponsors

To see how many people use Roll Up, we count page views and unique visitors per day. This uses no cookies and no tracking service. Each visit is turned into a scrambled code from your IP address, browser details and the date, which is used only to count you once that day and is deleted within two days. We keep only the daily totals. Legal basis: legitimate interests (understanding how the site is used). Some pages may show a clearly marked "Sponsored" banner. If you tap one, we count the click and send you to the sponsor's own site, which has its own privacy policy.

Feedback and reports

If you send feedback we store your message and, if you give one, your email address. If you report a meet we store your reason. Legal basis: legitimate interests (improving the service and keeping it safe).

Location

If you tap "Use my location", your browser asks your permission, then shares your position with us for that search only. We use it to find nearby meets and do not store it. Place names or postcodes you type into search are sent to our map provider (Mapbox) through our server to find their position.

Technical information

Our hosting provider records technical information such as IP addresses and the pages requested, for security and to keep the service running. We also briefly keep IP addresses in memory to limit abuse (for example, too many sign-in attempts). Legal basis: legitimate interests (security).

Marketing emails

Only if you tick the box to receive news and updates. You can switch this off at any time on your Profile page. Legal basis: your consent.

3. Who we share it with

We do not sell your personal information. We use these service providers to run Roll Up:

Information you choose to make public (public meets, your public profile) can be seen by anyone, including search engines. We may also disclose information where the law requires it or to protect people from harm.

4. Transfers outside the UK

Some of these providers handle data outside the UK, including in the United States. Where that happens we rely on the safeguards the law allows, such as approved standard contractual clauses or an adequacy arrangement.

5. How long we keep it

We keep your account information until you delete your account. You can do that yourself on your Profile page: it permanently removes your account, vehicles, photos, saved meets, join requests, host notes and every meet you host. Anonymous "I'm going" counts on other people's meets stay, but are no longer linked to you. Feedback and reports are kept for as long as they are useful for running the service, and we will delete them on request.

6. Your rights

You can ask us to give you a copy of your information, correct it, delete it, restrict or stop certain uses of it, or give it to you in a portable format. You can withdraw consent (for example, for marketing) at any time. Most of this you can do yourself on your Profile page; for the rest, email and we will reply within one month. If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk. We would welcome the chance to fix the problem first.

7. Cookies

We only use cookies that are needed for the site to work. See our Cookie Policy.

8. Security

We use encrypted connections, store passwords only in hashed form and limit who can reach the data. No system is perfectly secure, so please use a strong, unique password.

9. Children

Roll Up is for people aged 16 and over. We do not knowingly collect information from anyone younger. If you think we have, contact us and we will remove it.

10. Changes

If we change this policy we will update the date above and, for important changes, tell you on the site.