Privacy

Draft for early access, last updated 3 November 2026.

What we store

When you sign in with a passkey we keep the name you gave us and a public key. A public key cannot be used to sign in on its own, and your fingerprint, face or PIN never leave your device. We do not know your email address. There is no email recovery, so add a second passkey in case you lose a device.

When you sign in with Google or Microsoft we keep an identifier from that provider, your name and your email address, and the shows and share links you create. We do not receive your provider password. Share link tokens are stored only as a one-way hash, so we cannot show you a link again after you create it.

Your rundowns

The titles, times, talent names and notes you type into a rundown are stored with your account, and you can see all of them. What other people see depends on the link you give them:

• Crew links show everything in the rundown, including notes and every script.
• Presenter links show the whole running order, but the notes and the script only of the items that carry that presenter's name.
• Monitor links show the running order, with no notes and no scripts.
• Autocue links show every script, but no notes.

The server leaves out what a link may not read before anything is sent, so it never reaches that person's browser. Messages you send to the people on a show are kept, the last 50 only, and each person sees only the ones addressed to them.

Cookies

One cookie keeps you signed in. It is set for this site only, cannot be read by scripts on the page, and expires after 30 days of not using it. A second, short-lived cookie is set while you sign in, to make sure the sign-in finishes in the same browser that started it. There are no advertising or analytics cookies, and no third-party scripts.

Abuse limits

To slow down automated abuse, the site counts requests per visitor. It does this with a one-way code made from your network address and a secret key that changes every day. The address itself is not stored. The code is kept for about a day, and the key is deleted after two days, after which nobody can match the code to an address.

Share links

Anyone with a share link can open that view of the show, without an account. The secret part of the link is after the # in its address, which a browser never sends in a page request. It is sent only on the live connection, where the server checks it. You can revoke a link at any time and it stops working straight away.

Your data

From the Account button you can download everything we hold about you as a file, or delete your account. Deleting removes your shows, links and sign-in sessions.

Who runs this

Eyset Rundown is built by Alex Willcox. It runs on Cloudflare, which processes requests for us. Eyset Check, the presenter readiness tool at eyset.com, is a separate product with its own privacy page.