Trust & security

A fair vote

• One person, one vote

  Signed-up players get one vote per round, enforced by the database across all their devices. Retries never create duplicates.

• Results stay sealed

  Nobody in the audience, on the overlay or on the website sees totals while voting is open. Results are frozen the moment they're revealed and never edited after.

• Server clock, not your phone's

  Voting closes on the server's time, and no vote counts after the producer closes a round.

• Every action on the record

  Opening, closing and revealing each round, and every change in the control room, is written to an audit log with the published numbers.

Audience votes are for entertainment: they show how the room moved, not a scientific poll.

Privacy commitments

• We don't sell your personal information.
• Analytics and marketing cookies are off until you say yes, and “Reject all” is always one click.
• Leaderboards and TV graphics show a first name and initial or your screen name, never contact details.
• Marketing only with a ticked box, never for anyone under 18.
• You can see, download, correct or delete your data: your privacy rights.

Read the full Privacy Policy.

Security

• Encrypted in transit

  Every page and API is served over HTTPS with HSTS, and strict security headers (Content Security Policy, frame protection, no MIME sniffing).

• Strong sign-in

  Staff passwords are hashed with bcrypt and accounts lock after repeated failures. Players and partners sign in with one-time codes that are hashed, single-use and expire in 10 minutes.

• Abuse protection

  Rate limits on every form and vote, a bot check on sign-up and contact forms, and protection against forged requests on every staff action.

• Less data, better protected

  We never store raw IP addresses (only salted, one-way hashes). Private Partner Portal files are served only to signed-in partners and every download is logged. Role-based access keeps contact details away from staff who don't need them.

Accessibility

We design to WCAG 2.2 AA: every page is checked automatically for accessibility in light and dark, voting works with a keyboard and screen readers, and a Pause motion control stops every moving light. Found a barrier? Tell us below.

Service providers

These companies process personal information for us under data processing terms:

Report a problem

Found a security issue or an accessibility barrier? Please tell us privately through the support form, and give us a reasonable time to fix it before sharing it publicly. Please don't access other people's data or disrupt a live show while testing.