Privacy policy
What Wavecast holds, why it holds it, who can see it, and how to get rid of it. The short version: as little as it can, for no longer than you keep it — and possibly less.
Last updated 27 September 2026
A session from the front page keeps nothing
A room started from the front page has no account behind it and is written to no database. It is an unguessable link and a six-digit PIN, it lives in memory, and it is wiped once everybody has left. Nothing about it is retained afterwards. The network address a request comes from is used, in memory, to limit how often rooms are made and PINs are tried.
What an account holds
If you make an account, Wavecast stores your name and email address, the version of the terms you agreed to, your preferences, and either a hashed password or the identifier your Google account is known by — never a password in readable form, and never anything from Google beyond what identifies the account. It also keeps the private notes you write on an episode’s topics and points: those are yours alone, never shown to the show’s other members or sent to anybody else in the room, and they go when you delete the account or the episode is deleted. If an account is banned, its row and its address are kept so that the ban holds.
What a show keeps
A show keeps what its members write into it: its name, description, links, time zone and prompt for suggested topics; its members and the invitations that added them; its saved running orders and default template; and its episodes, with their titles, numbers, dates, briefs, running orders, notes and details. Once an episode is Archived, the running order as it was run, the log and the list of who was in the recording — both of which name the people who were in the room — are kept as its record. Hosts can write down a guest’s name, public information meant for the show notes, and private information meant for the co-hosts on the Planning screen; that is information about somebody who may never have an account, so write only what the show needs. Everything a show keeps is visible to every member of it, except each member’s own private notes (see above).
Pictures you upload
A show’s artwork and background and your own picture are the only files uploaded to Wavecast. Your browser crops and resizes them before they are sent, and they are stored as files on the server along with who uploaded them. A show’s pictures are shown to its members; a picture of a person is readable by anybody who has its address, because everybody in a room with them — guests included — is shown it. Every uploaded picture is visible to the site’s administrators, with who uploaded it, and may be deleted by them at any time without notice.
Recording consents
When an invited guest signs the recording consent, Wavecast appends one line recording their name and email, what they agreed to, when, from what address and browser, and a hash of the exact wording shown to them. Any host of the show whose room it was signed in can read it and download it. That line is evidence rather than a record anybody owns, and no deletion in the app reaches it.
Suggested topics
Pressing Suggest on the Planning screen sends the episode’s title, any steer you typed, and the prompt the show’s owner set for suggested topics in its settings, from our server to OpenAI to generate topics. Nothing else from a room is ever sent to an AI provider, and nothing is sent unless somebody signed in presses the button. Each request is logged and kept by account, show, time, outcome and the tokens it used, so the site’s administrators can see what each show has spent — never its words. OpenAI handles what it receives under its own terms.
Calendar subscriptions
If you publish a calendar subscription, its address lets whoever holds it — and the calendar service you give it to, such as Google Calendar, Apple Calendar or Outlook — read the titles, shows, dates and room links of the episodes it carries, but never a PIN. Stopping a subscription deletes it, and the address stops working.
Who can see what
Members of a show see what the show keeps, and people in a room see what the room shows. The site’s administrators can see every account — name, email address, and whether it is an administrator or banned — every show and episode, and every uploaded picture, and can change or delete any of them. Nobody can see a password, because none is stored in readable form.
Why any of it is held
To run the thing you asked it to run, and for no other purpose. There is no advertising, no profiling, no tracking across other sites, and nothing is sold or handed to anybody for their own purposes. Three services see something on the way: mail — a password reset, a sign-in link, a deletion link — is sent through a transactional provider, which sees the address it is sent to; Google, if you sign in with Google; and OpenAI, if you ask for suggested topics.
How long it is kept
Until you delete it, or until it is deleted for you. Wavecast is an alpha, and any account or data it holds may be deleted at any time without notice. Nothing is guaranteed to be kept, and nothing deleted is guaranteed to be recoverable.
Getting rid of it
Deleting an episode takes its record. Deleting a show takes its episodes. Deleting your account takes your picture and everything you are the last owner of, and hands over anything somebody else still owns. All three are in the app and none needs asking for; for anything else, write to william@wo.dev.
Questions about any of this, a request about your data, or a notice about something somebody uploaded can go to william@wo.dev.