Data & Security
ShowRevue is built local-first. Your recordings never leave your Mac unless you explicitly choose to share them. Only a small amount of account and show data is stored in the cloud, and only to power features you turn on (your account, licensing, and — if enabled — cloud Live Notes, run-time history, and team sharing).
What stays on your Mac
| Data | Where it lives |
|---|---|
Recordings (.mp4 / .mov video + audio) | Your chosen recording folder, on your Mac. Never uploaded. For .mp4, the cue list, timecode and notes are embedded inside the file itself. |
Sidecars (_cues.json, _psn.bin) | Only for ProRes .mov recordings, which can't embed metadata — written alongside the file on your Mac. |
Project files (.srshow), including the imported MVR rig | On your Mac, with the show. |
| Snapshots, reports (PDF) | Generated and saved on your Mac. (JPG snapshots only sync to the cloud if you enable cloud features — see below.) |
Recordings are not uploaded to ShowRevue's servers. The only time live video leaves your Mac is when you turn on a feature that sends it:
- RTMP streaming — if you start a stream, live video/audio is sent to the RTMP destination you configure (e.g. your own server, YouTube, etc.). That destination is yours, not ShowRevue's, and it governs how that stream is stored or distributed.
- Stage Display / Live Notes — serve video and notes to devices on your own LAN only.
- Session report PDF — only emailed if you choose Email the team.
Otherwise the recording file itself stays on your Mac, and a recording is only shared if you do so yourself.
Sharing recordings — on your terms
Because everything is just files on your Mac, you share them however your production already works — a shared drive, Google Drive, Dropbox, WeTransfer, a USB stick, your own server, anything. ShowRevue's cloud is never in the loop, and there's no upload limit, subscription seat, or per-viewer account standing between you and the people who need to watch.
The recording is a standard video file, so it plays in any video player on any platform. But the
real magic is that, for .mp4 recordings, the cue list, timecode and notes live inside the file
itself — there's nothing else to send.
Record to .mp4 (H.264 / H.265) for sharing. Send that one file and the whole run travels with
it — cues, timecode and notes embedded. No sidecars, no project, no cloud. (ProRes .mov can't embed
metadata, so it writes a _cues.json sidecar; keep the file and its sidecar together, or share the
whole .srshow project.)
Whoever you send it to has two ways to open it — no licence and no account needed either way:
- In the ShowRevue app — open it in the free Viewer tier. Download, open, scrub the cues. The metadata is right there.
- In a web browser — go to www.showrevue.com/viewer and open the file. It plays the recording with the embedded cues, timecode and notes alongside, on any platform — Mac, Windows, iPad, anything with a browser. Nothing is uploaded; the file is read locally and never leaves their device.
So a designer, director, or visiting SM with no licence can be sent a single .mp4 — via a shared
drive, Dropbox, WeTransfer, a link, whatever — and review the entire run, cues and all, in the app or
right in their browser, without touching any cloud service.
What's stored in the cloud
A managed database (hosted on Supabase) holds the minimum needed for accounts and the cloud features you opt into:
| Data | Purpose | Opt-in? |
|---|---|---|
| Account profile (name, email) | Sign-in, licensing | Required to use the app |
| License status | Entitlements / tier | Required |
| Show metadata + team membership | Sharing a show with co-owners and crew | Only when you create/join a cloud show |
| Cloud Live Notes | LAN/remote note-taking synced to your team | Per-project toggle, off by default |
| JPG stills (cue snapshots / note frames) | Shown beside cloud notes so your team sees the moment | Only when cloud is enabled — off by default |
| Run-time history | Account-portal show history & timing | Only for cloud-enabled shows |
When cloud is enabled, the small JPG still images captured with a cue or a note (a single frame, not the recording) are optionally uploaded to secure cloud object storage so your team can see them alongside the synced notes. They are served over HTTPS, encrypted at rest, and access is scoped to your show's team. The underlying video and audio recordings are never uploaded — only the still image. With cloud disabled, snapshots stay on your Mac and nothing is uploaded.
Identity, licensing, and payments are handled by dedicated providers so sensitive data never touches our own database:
- Auth0 — sign-in and identity.
- Keygen — license validation.
- Stripe — payments. Card details go directly to Stripe and are never stored by ShowRevue.
Encryption
- In transit: all communication with the website and cloud services uses HTTPS / TLS.
- At rest: the cloud database and its backups are encrypted at rest by the database provider.
- Local Live Notes runs on your own LAN; it stays on your network and is not exposed to the internet.
Backups
The cloud database is a managed PostgreSQL service on Supabase Pro, with automated daily backups retained for 7 days (a rolling week), so recent data can be restored after accidental loss. Backups are encrypted and managed by the database provider. (Finer-grained point-in-time recovery is available as a platform add-on if needed.)
Your recordings are not part of these cloud backups — they live on your Mac. We recommend you keep your own backup of your recording drive (Time Machine or a second disk), the same as any other media you can't afford to lose.
Access control
- Cloud show data (notes, run times, team, reports) is only visible to the show's owner, co-owners, and invited active team members.
- Server requests are authenticated per request; a user can only read or change data for shows they belong to.
Confidentiality — sensitive & pre-release productions
We understand a recording of an unopened show is commercially sensitive — unreleased staging, design, choreography and creative work. By design, almost nothing leaves your Mac: the video and audio never reach our servers (see What stays on your Mac), and the only cloud data is the minimum needed for the features you switch on, visible only to your show's team.
If your production or venue requires it, the ShowRevue team is happy to sign a non-disclosure agreement (NDA) covering any show information we could see in the course of support. Just email hello@showrevue.com and we'll arrange it.
Anonymous usage statistics
To understand which features matter and prioritise development, ShowRevue sends anonymous usage statistics (on by default). These are:
- Keyed to a random device id generated on your Mac — not your name, email, or licence — and can't be tied back to you.
- Feature usage only — which integrations you connect (e.g. grandMA3, QLab, NDI), how often you record and a coarse recording-length band, whether you use playback / Stage Display / Live Notes, and your app and macOS version.
- Never your show names, note text, video, cue data, or anything identifying.
Turn it off any time in Preferences → Diagnostics → "Share anonymous usage statistics." Local development builds never report. See the full privacy policy.
Your data, your control
- Delete a show's cloud data by removing the show, or ask us to remove it.
- Close your account to remove your profile and associated cloud records.
- Because recordings live on your Mac, deleting them is entirely in your hands — remove the files (or the whole recording folder) and they're gone.
Questions about data handling, a data export, or deletion? Email hello@showrevue.com and we'll help.