Cuecard privacy
Short version: your scripts stay in your browser. If you sign in, they are scrambled with a password only you know before they are sent, so the server can never read them.
Without signing in
Everything lives in this browser, on this device: your script, your saved cues, your look, your Settings and your keyboard shortcuts. Nothing is sent anywhere.
Clearing your browser's data erases it, so use Menu, My cues, Save a backup file now and then.
If you sign in
- Your scripts, cue names, looks, Settings and shortcuts are scrambled in your browser before they leave it. The server stores one scrambled bundle per account and cannot open it.
- Your cue password never leaves your browser. It is only used there to unlock. Nobody, including the people who run Cuecard, can reset it or read your cues without it.
- Your recovery key is the only way back in if you forget the password. It is shown once. Keep it safe.
- Google sign-in: your account is filed under Google's anonymous ID. Your email address is never read or stored.
- Emailed code: your address is used for a few seconds to send the code. The account is filed under a one-way scrambled copy of the address. It can't be turned back into the address, but someone who already knows your address could check whether it has an account.
- What the server can see: that an account exists, roughly how big the scrambled bundle is, and when it last changed. Cloudflare, which runs the server, sees internet addresses in its normal logs, as every website host does.
- A shared or borrowed computer: tick the box when you sign in, and nothing is kept after the browser closes.
- Unused accounts delete themselves after 12 months with no saves. Menu, Sign in & sync, Delete my online copy removes it at any time.
Two things that are not Cuecard
- Voice tracking uses your browser's speech-to-text. In Chrome, that sends your voice to Google to turn it into words.
- Fonts for the script come from Google Fonts.
Sign-in is shared with AV Invoice Builder, which uses the same Google sign-in and email codes. The two apps keep their data apart.