Privacy notice

Who we are

Roundwatch is run by Shubho Chowdhury, a sole trader in Australia. For anything about your information, write to hello@roundwatch.com.au. We answer within 30 days.

What we collect, and why

The weekly summary. If you sign up, we keep your email address, when you agreed and the wording you agreed to, the page or post you signed up from, when you confirmed and, if you leave, when you unsubscribed. We use these to send the summary and to show that you asked for it. Nothing is sent until you confirm by the link we email you.

Reports you send. If you report an invitation or share a visa timeline, we keep the facts you enter (the visa subclass, dates, points, occupation and state) and the date you sent them. We do not ask for your name. A person checks each report before it can appear on the site as community data, labelled with how sure we are and without anything that identifies you. If you give an email address to confirm a report, we use it once, to send one link, and do not keep it.

Keeping the forms safe. To stop floods of automated sign-ups and reports, we count how many come from each internet address and each email address in a day. We count a scrambled code (a one-way hash with a key made fresh each day and deleted when the day ends), never the address itself, so the counts cannot be traced back to anyone.

Your privacy choice. A small cookie in your browser, rw_consent, remembers whether you allowed usage counts, for 12 months, so we do not ask on every visit.

Usage counts, only if you allow them. To decide what to improve, we count which pages are opened and a few named actions (an occupation viewed, a report sent, a timeline shared, a subscription confirmed), using PostHog’s EU Cloud, hosted in the European Union. Each count carries the page’s address without anything after the “?”, so never what you searched for or filtered; the name of the website you came from; the kind of device and browser; and, on your first page, the name of the post that linked you here, if the link carried one. It never carries what you type or choose, your screen size or time zone, and nothing records your screen. The counts pass through our own server first, so PostHog never receives your internet address, and they make no profile of you: the only identifier is a random code in your browser’s session storage, forgotten when you close the tab. Say no, or change your answer under Privacy choices, and nothing is counted and the code is deleted. Browsers that send “Do Not Track” are never counted.

Editors. The people who edit Roundwatch sign in with an emailed link. We keep their email address and a record of their sessions.

Server logs. Our hosting keeps standard technical logs (internet address, browser type, the page asked for and the time) to keep the site running and secure, for no longer than 30 days.

What we never collect

• Passport, visa grant, TRN or other identity numbers.
• Your nationality.
• Names or usernames from the community posts we read: we record the facts and a link to the post, not the person.

Who sees it

Only Roundwatch’s operator, and these services, each limited to what it needs for its job:

• Resend (Resend, Inc., United States) delivers our emails, so it handles your email address and what we send you.
• Amazon Web Services hosts the site and its database in Sydney, Australia.
• PostHog (PostHog Inc., EU Cloud, the European Union) keeps the usage counts described above, only for visitors who allowed them, and without their internet address.

We do not sell, rent or trade information, and we do not pass it to colleges, migration agents or advertisers. We would disclose information only if the law required us to.

Overseas. Because Resend is in the United States, your email address and the emails we send you are handled there. The usage counts, for visitors who allow them, are kept by PostHog in the European Union; they hold nothing that identifies you. Everything else stays in Australia.

How long we keep it

• Weekly summary: while you are subscribed. If you unsubscribe, we keep your address marked as unsubscribed for 12 months, as the record that we stopped, then delete it. A sign-up that is never confirmed is deleted after 30 days.
• Reports: kept as community data while they help show what is happening; they hold no name. You can ask us to delete one: tell us its details so we can find it.
• Daily counts: deleted at the end of each day.
• Editors’ sessions: end after 30 days.
• Server logs: up to 30 days.
• Backups: copies of the database are kept for up to 35 days, so anything we delete is gone from them within that time.
• Usage counts: kept by PostHog as totals; the code that ties a tab’s counts together is forgotten when the tab closes, so they cannot be traced to you.

Keeping it safe

The site and our emails’ links use encrypted connections (HTTPS). The codes in our confirmation and sign-in links are stored only in scrambled form, and the links expire. Only Roundwatch’s operator can reach the database.

Your choices and rights

• Leave the weekly summary with the link at the bottom of any summary. It takes effect at once.
• Change your usage-count choice any time with “Privacy choices” at the bottom of every page.
• Ask to see, correct or delete the information we hold about you by writing to hello@roundwatch.com.au. We answer within 30 days and may ask you to show that the address is yours.

Complaints

Write to us first at hello@roundwatch.com.au; we reply within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner (opens in a new tab).

Changes to this notice

When we change how we handle information, we update this notice and the date at the top. If a change affects the weekly summary, the summary will say so. The terms of use cover everything else about using the site.