Skip to content

Privacy

The short version

We store what an account needs to work: who you are, which organization you belong to, the shows you make, and which Macs are linked. Players are not accounts. Somebody who scans a code to join a game is not asked for a name we keep, an email, or anything else, and nothing about them is tracked between games.

What we hold about you

WhatWhyHow long
Name, email, password hashTo sign you inUntil you delete the account
Organization name, type, countryTo separate one church's work from another'sUntil the organization is deleted
Shows, themes, uploaded mediaIt is what you came here to makeUntil you delete it
Linked Macs: a name, a device fingerprint, a version, a last-seen timeSo you can see which rooms are online and revoke oneUntil the hub is revoked
Audit log of who did what in your organizationSo an owner can answer "who removed them?"Two years
AI generation jobs and their resultsTo bill a credit and let you retryNinety days
Billing recordsTo take payment and issue invoicesAs long as the law requires

What we do not hold

Who it is shared with

Stripe, for payment. Our own hosting and backup provider, which is CopperPress's server and object storage. Nobody else: no advertisers, no data brokers, no analytics vendor. AI generation, when you use it, sends the brief you typed to a model provider — not your account details, and not anything about a player.

Where it lives

On servers we operate, with nightly backups kept for thirty days. A deletion removes the live data at once and falls out of backups within thirty days.

What you can ask for

A copy of what we hold, a correction, or deletion. An owner can export the audit log themselves, and any show can be exported from the editor without asking us. Ask for the rest.