How Haunted Hills handles your information
Haunted Hills uses Roll Call to take applications, hire, schedule and run the crew each season. This page explains what it keeps about you and how it’s looked after.
What we keep
- Your sign-in: email and a scrambled form of your password (never the password itself).
- Your application: name, phone, date of birth, an emergency contact, a parent or guardian’s contact if you’re under 18, the positions and days you picked, your answers, and the photo you upload.
- Once you’re on the crew: your nights off, where you’re scheduled, when you checked in and out, any call-ins (and the reason you gave), and gear issued to you.
- For security: when you signed in, and the internet address and device you signed in from.
Why
To review applications, hire, schedule and pay attention to who’s here each night, to reach you or your emergency contact, and to keep accounts safe. We don’t sell it, and we don’t use it for advertising.
Who can see it
Only the managers for the department you applied to or work in (Cast or Security), and Haunted Hills’ owners and administrators. Every time a manager opens an applicant’s details, it’s recorded. A few services handle it for us so the app can work: Cloudflare (keeps the site online and secure), Brevo (sends our emails) and Twilio (sends our texts). When you choose a password, we check it against a public list of leaked passwords using only a short scrambled fragment, never the password.
How it’s protected
The connection to Roll Call is always encrypted, and so is everything we store, backups included. Managers only see what their role needs, sessions lock when left idle, and you can turn on two-step sign-in under your account for extra protection.
How long we keep it, and deleting it
We keep your information while it’s needed to run the season and keep our records. You can ask us to delete your account and application at any time, and a parent or guardian can ask on behalf of an applicant under 18. Ask any Haunted Hills manager. Records of hours worked may need to be kept for payroll. Deleted information also drops out of our backups within two weeks.