What Crosses knows about you, and who can see it.
Crosses exists to show a room whether a machine is free. That needs an account and a record of who is on which machine — and nothing else. There are no analytics, no ad networks, and no third-party trackers anywhere in the app or on this site.
Last updated · 28 July 2026
The whole thing in five lines.
- Crosses collects your email address, a display name, an optional profile photo, and a log of your machine sessions.
- Other members of your room can see your display name and your sessions. That visibility is the product.
- No analytics, no advertising, no trackers, no data sold or shared for marketing.
- Email support@crossesapp.com to get your account and its data deleted.
- Crosses is in beta. This page will change as the app does, and the date above moves when it does.
Account, and what you did on the machines.
Your account
When you sign in, Crosses stores your email address and a display name (defaulting to something generic until you change it). If you add a profile photo, that image is stored too. Signing in happens one of two ways: a magic link sent to your email, or Sign in with Apple — in which case Apple passes Crosses an account identifier and the email you chose to share, including a private relay address if you hid your real one.
Crosses never sees or stores a password, because it never asks for one.
Your sessions
Every time you use a machine, Crosses records which machine, when you started, how long it ran, and how many racquets you were doing. If you fill in job details — racquet, string, tension — those are stored on the session too. Bookings you hold are recorded the same way. This log is what makes the room's live status work, and what your own usage history is built from.
Settings
Preferences like your default session length and whether notifications are on are stored with your profile.
The waitlist on this site
If you enter your email in the early-access form on the home page, that address is sent to an Airtable base used only for the waitlist. It is not connected to an app account and is not used for anything but telling you when Crosses opens up.
Your room, and no one beyond it.
Crosses is organised into rooms — a team, a shop, a club. Other members of a room you belong to can see your display name, your profile photo, whether you are on a machine right now, and the history of sessions you have logged on that room's machines. A shared machine only stops being a guessing game if the people sharing it can see who has it.
Your email address is not shown to other members. Crosses does not publish any of this outside your room, and does not sell it, rent it, or hand it to advertisers.
Crosses will disclose data if the law actually requires it — a valid legal order — and will tell you unless prohibited from doing so.
Three services, each doing one job.
- Supabase — hosts the database, the sign-in system, and profile photo storage. This is where your account and session records physically live.
- Vercel — serves this website. Standard web server logs (IP address, browser, page requested) are produced as a by-product of serving any page, as they are on every website.
- Airtable — holds the early-access waitlist emails from this site, and nothing else.
Traffic between the app and its server is encrypted in transit over HTTPS. Crosses uses no other third-party services, and ships no advertising or analytics SDKs.
While Crosses is in TestFlight beta: Apple runs the distribution, so Apple receives the information it needs to do that — which testers installed which build, and crash reports. If you send feedback through TestFlight, Apple passes along whatever you write and any screenshot you attach. That is Apple's process, governed by Apple's privacy policy, not something Crosses controls.
The list worth being explicit about.
- No analytics or product-telemetry SDK. No Google Analytics, no Firebase, no Segment, no session recording.
- No advertising, no ad identifiers, no cross-app tracking, and so nothing that would trigger App Tracking Transparency.
- No cookies set by this site for tracking purposes.
- No location collection. Crosses never asks for your location.
- No contacts, no photo library access beyond the single image you deliberately pick as a profile photo.
- No push notification server. The "machine is free" alerts are scheduled locally on your own device, so no notification token leaves it.
Two iOS permissions are requested in context, and only when you use the feature that needs them: NFC, to read a machine's tag when you tap it, and calendar access, if you ask Crosses to put a booking in your calendar. The calendar event is written on your device; Crosses does not read your calendar.
Ask, and it goes.
Your account and session history are kept while your account exists. Email support@crossesapp.com from the address on the account and Crosses will delete the account, its profile, its photo, and its session records. Expect it done within 30 days.
One caveat worth stating plainly: a room's machine history is shared. Deleting your account removes your name from those records, but a room may retain the anonymised fact that a machine was in use during a period, because that history belongs to the room as much as to you.
You can change your display name, your photo, and your settings yourself, in the app under Profile.
Children, changes, and how to reach a human.
Children
Crosses is built for people running stringing machines in team rooms and shops, and is not directed at children under 13. Crosses does not knowingly collect data from them. If you believe a child has an account, email the address below and it will be removed.
Changes to this page
Crosses is early, and the app is still moving. When what it collects changes, this page changes with it and the date at the top moves. Material changes will be announced in the app rather than quietly edited in.
Contact
Questions, deletion requests, or anything on this page that does not match what you see in the app: support@crossesapp.com.