Privacy Policy

Information You Provide

Account registration stores your name, email address and a securely hashed password. We never store the readable password. Room use can store room names, timer durations, rundowns, scheduled times, stage messages, display positions, viewer limits and room settings.

• Account name, email address and password hash
• Room names, timers, cues, notes, messages and settings
• Role-based access tokens used by Controller, Operator, Viewer and Moderator links
• Names or labels you assign to shared links and connected devices

Device and Security Information

When a room link is opened, the service can process a randomly generated device identifier, role, device label, browser user-agent, last-seen time and removal status. For sign-in protection, failed attempts store hashed versions of the email address and IP address. Web servers, Cloudflare and infrastructure providers may also process IP addresses, request times, requested URLs and technical logs.

How We Use Information

• Provide synchronized timers, room state, messages and role-based access
• Operate accounts and secure sign-in sessions
• Enforce viewer limits and show controllers which devices are connected
• Detect abuse, investigate failures and protect the service
• Measure aggregate website use and improve pages and product features
• Respond to support, privacy and security requests

Cookies and Browser Storage

Signed-in users receive a secure, HttpOnly, SameSite=Lax session cookie named showcountdown_session. Its configured maximum lifetime is 30 days, although it may end earlier when you sign out or the session is removed. The browser also uses localStorage or sessionStorage for room access details, timer state, link preferences, device identifiers and temporary password-unlock status. Clearing site data removes these browser-held values.

• Google Analytics may use cookies or similar identifiers, subject to browser and regional controls
• Cloudflare may set security cookies needed to protect traffic and distinguish legitimate requests
• Essential room and account storage is used to deliver features you request

Analytics and Service Providers

ShowCountdown uses Google Analytics 4 through the Google tag to understand visits and page use. Google may process device, browser, approximate location and interaction information under its own privacy terms. Cloudflare provides proxy, delivery and security services and may process network and security data. Hosting, database and infrastructure providers process data only as needed to operate the service.

Google Privacy Policy Cloudflare Privacy Policy

Sharing and Sale of Data

We do not sell personal information. Information is shared with service providers only where needed to host, secure, analyse or support ShowCountdown, or when required by law, necessary to protect users and the service, or involved in a legitimate business transfer.

Retention

Failed sign-in hashes are automatically deleted after approximately 24 hours. The account session cookie is configured for up to 30 days. Account and room records are currently retained while they are needed to provide the service or until a valid deletion request is completed. Device records and operational logs may be retained for security, troubleshooting and access management. Providers such as Cloudflare and Google apply their own retention schedules. Backups, where used, may persist for a limited period before being overwritten.

Security and Private Links

Passwords are hashed and account cookies are configured with Secure and HttpOnly protections. Room access tokens are designed to be difficult to guess, but anyone who receives a role link may have the permissions attached to that link. Treat Controller and Operator URLs as credentials, avoid posting them publicly and remove unfamiliar devices from the room overview.

Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete or restrict use of personal information, or object to certain processing. You can block or clear browser storage, use browser privacy controls for analytics, and contact us to request account or room-data deletion. We may ask for information needed to verify control of an account or room before acting.

International Processing

ShowCountdown and its providers may process data in countries other than your own. Privacy protections and lawful transfer mechanisms depend on the provider and applicable law.

Changes and Contact

We may update this policy when the product or its providers change. The effective date above will be updated when material revisions are published. Send privacy questions or requests to [email protected].