Privacy Policy

Last updated April 2026

This page tells you plainly what information we collect, why we collect it, who can see it, and what rights you have over it.

Who we are

Sandbox Member Portal (powered by ScoreOrder) is a membership management portal used by bands, orchestras, choral groups, and other performing organizations. Your data is stored on behalf of your organization (Sandbox) and is not shared with other organizations or sold to anyone.

What we collect and why

We only collect what your organization needs to operate:

Your name and preferred name

Your legal name is used for organizational records. Your preferred name — if you set one — is what appears in the portal and in communications. We encourage you to set a preferred name if it differs from your legal name.

Pronouns

Entirely optional. Visible to other members if you choose to share them. You can add, change, or remove your pronouns at any time in your profile.

Email address

Used to send you announcements, rehearsal reminders, and account-related emails (like password resets). We do not send marketing email.

Phone number

Optional. Visible only to organization administrators. Not used for automated messaging.

Emergency contact

Optional. Visible only to organization administrators and never shared externally. Used only in genuine emergencies at in-person events.

Attendance records

Whether you attended each rehearsal. Visible to section leaders and administrators. Used for roster management — not shared outside your organization.

Section and role

Which instrument section you belong to and your role in the organization (e.g., member, section leader). Visible to other authenticated members.

Who can see your information

Access is limited by role. Here is exactly who can see what:

Your dataYouOther membersSection leadersOrg admins
Preferred name, pronouns, section✓✓✓✓
Email address✓——✓
Phone number✓——✓
Emergency contact✓——✓
Attendance records✓—✓✓
Login / account status✓——✓

“Org admins” are designated members of your specific organization. ScoreOrder platform staff can access data only when explicitly required to resolve a technical issue, and access is logged.

A note on member privacy

Membership in a performing organization can be sensitive — particularly for LGBTQ+ members, trans and non-binary members, and others for whom visibility is a personal choice. We have designed access controls with that in mind:

  • Your membership is visible only to authenticated members of your organization — not to the public.
  • We do not publish member rosters or directories anywhere.
  • Your preferred name is what appears throughout the app. You are not required to use your legal name in any member-facing context.
  • We do not share your data with advertisers, data brokers, or other organizations.
  • If you believe your safety is at risk due to how your information is displayed, contact your organization’s admin or reach us at privacy@scoreorder.app and we will act quickly.

Third-party services we use

SupabaseOur database and authentication provider. Your data is stored in their infrastructure in the United States. Supabase Privacy Policy
PostmarkUsed to send transactional emails (invites, password resets, announcements). Your email address is passed to Postmark for delivery only. Postmark Privacy Policy
VercelHosts the application. Processes request metadata (IP address, user agent) in accordance with their privacy policy. Data is not retained beyond standard server logs. Vercel Privacy Policy

We do not use analytics services, advertising networks, or tracking pixels.

Your rights

You can:

  • View and update your name, preferred name, pronouns, phone, and emergency contact in your profile at any time.
  • Request a copy of all data we hold about you by emailing privacy@scoreorder.app.
  • Request deletion of your account and personal data. Contact your organization admin or email us. Attendance history may be retained in anonymized form for organizational reporting.
  • Withdraw consent at any time by requesting account deletion.

We will respond to requests within 30 days.

How long we keep your data

Your profile and attendance records are retained for as long as your organization uses the platform or until you request deletion. If your organization stops using ScoreOrder, we will contact your administrator to arrange data export or deletion within 90 days.

Questions or concerns

Email us at privacy@scoreorder.app. We are a small team and will respond personally.

← Back to sign in