Privacy Policy

1. What we collect

• Account details: your name and email address.
• Authentication data: a hashed password and short-lived one-time sign-in codes.
• Production data: the tracker content you and your crew enter.
• Basic technical logs needed to run and secure the service.

2. How we use it

We use this data to provide the tracker, sign you in securely (password plus an emailed one-time code), show you the productions you belong to, and keep the service working. We do not sell your data or use it for advertising.

3. Authentication and security

Passwords are stored only as salted hashes, never in plain text. Every sign-in requires a one-time code emailed to you, so a password alone is not enough to access an account.

4. Where data is stored

Data is held in a PostgreSQL database. As the platform moves to production it will run on managed cloud infrastructure with backups and access controls.

5. Sharing

Production content is visible to the members of that production and to platform administrators who operate the service. We do not share your data with third parties except as needed to run the platform (for example, an email provider that delivers your sign-in codes).

6. Retention

We keep your data while your account is active. One-time codes expire within minutes. If your account is removed, its personal details are deleted from active systems.

7. Your choices

You can ask your administrator to update or remove your account details. Since sign-in codes go to your email, keeping that email secure is an important part of protecting your account.

8. Contact

Privacy questions can go to your production administrator.