Gradetonic protects every room, but a few habits keep unreleased work private.
Access
- Use a strong, separate viewer password per project, and send it through another channel than the link.
- Prefer personal invitation links and Ask viewers for their name, so every viewer is identifiable in your viewer list.
- Check the viewer list at the start of each session. Remove anyone you don’t recognise and change the password.
- When a project ends, change the password or reset invitation links.
During sensitive moments
Click Stop before showing material that not every viewer may see. Nobody sees the picture until you click Continue.
Your encoder
- The stream key and server details on your encoder page give access to stream into your rooms. Don’t share them outside your team.
- If they may have leaked, rotate the stream key in your admin. All encoders of your account then need the new details.
What we do
- All connections are encrypted with TLS: RTMPS from your encoder, a secure WebSocket connection to viewers, HTTPS for every page. Use the plain RTMP fallback only when your network blocks RTMPS, because it is not encrypted.
- Every viewer gets a personal access token that is valid for 20 minutes and tied to their own connection.
- Passwords are stored only as scrypt hashes, and backups are encrypted.
- We never record or store your streams.
- Customer data is separated per account, servers are in the EU, and viewer data is removed on a fixed schedule. See the privacy policy.