Privacy Policy

Last updated 7 October 2026

StageGlass makes the screens you see in films and television shows. This policy covers StageGlass PropPlayer for iPhone and iPad, PropController for Mac, and the stageglass.app website.

Website analytics

This website uses Vercel Web Analytics to count visits and page views. It records aggregated details such as the page, referrer, approximate location, browser, operating system, and device type. Vercel Web Analytics does not use cookies or associate this data with a person or IP address. Its daily visitor identifier expires after 24 hours.

We use this information only to improve the website. We do not use it for advertising, visitor profiles, or cross-site tracking, and the website never sends show files, scene files, photos, or production media to Vercel Web Analytics. See Vercel's Web Analytics privacy documentation.

What stays under your control

Shows, scenes, characters, conversations, photos, and other prop-device details are stored on the device where you author them. Scene and show packages you export are files you choose where to save or share. When iCloud sync is unavailable, authored scenes remain on the device. StageGlass servers do not receive your scene files or media.

PropPlayer syncs authored scenes between your own devices through your private iCloud database. Apple operates iCloud; StageGlass servers do not receive that library. Audio recorded in PropPlayer stays on the device. A Voice Memos recording may enter your own iCloud only if you choose to sync it there.

When devices talk to each other

An operator can cue a prop phone from PropPlayer's built-in Remote Mode on another phone or from PropController on a Mac. Local control uses the same Wi-Fi network. The optional Internet Relay provides a path for commands and player state when direct local connections are unavailable.

On the same network

PropPlayer phones appear in PropController and in another phone's Remote Mode on the same Wi-Fi. Local connections need no pairing, code, or approval. The apps talk directly. Remote commands, player state, and live monitor video on this path stay between your devices. iOS asks for Local Network permission before PropPlayer can use it.

The internet Relay

When direct local control is unavailable, PropController can create a relay room. Only Relay rooms use a 12-character code: a phone joins with the code, and the operator approves the join. The relay carries commands and player state. It does not carry live monitor video, takes, scene files, or media.

The relay forwards approved frames in real time and does not queue or store their payloads. Its room storage temporarily holds the room code, random peer IDs and access tokens, connection state, timestamps, and per-peer rate limit counters. Rooms expire after 16 hours without control activity or 24 hours after creation, whichever comes first. A pending join expires after 30 seconds. Ending a room deletes its stored state.

To limit abuse, the relay keeps short-lived request counters under a hash derived from the connecting IP address. Those counters expire after about a minute. Rejected frames log a rejection reason, not the frame payload. The relay does not create a StageGlass account or profile.

Relay service traffic occurs only when someone creates or joins a relay room. Local control does not contact the relay.

Permissions the apps may ask for

• Local network — to discover and control nearby PropPlayer devices and to monitor live screens.
• Microphone — for on-device Voice Memos recording and live voice-message waveforms.
• Photos — to save output to your photo library. The system picker gives PropPlayer only images you choose to use in a scene.
• Files — to let you choose show, scene, or image files to import and locations for exports. The system picker grants access only to the files and locations you choose.

iOS presents permission requests during PropPlayer's first-run setup. System pickers keep file and photo choices under your control.

Children

StageGlass is a professional tool for film and television production. It is not directed at children, and nothing in it is designed to gather information about the people who use it.

Payments

PropPlayer's free tier lets you author, play, record, and export. Live playback, takes, and rendered exports carry the “STAGEGLASS · FREE PLAYBACK” watermark; VFX plates stay clean. StageGlass Unlock offers weekly and monthly auto-renewing subscriptions through Apple's App Store to remove the watermark. Manage or cancel a subscription in Apple ID settings. We do not receive your payment details. See Terms of Use and Support for details.

Your rights

We hold no StageGlass account or profile about you. Apple controls data in your own iCloud account and your App Store subscription. Vercel handles the website measurements described above.

If you use the relay, you can end its room to delete its room state. The forwarded command and state payloads are not stored. Short-lived rate limit counters expire automatically.

PropPlayer does not read your real messages or contacts. Neither app uses your work or remote activity for tracking or advertising.

Your authored scenes sync through your own private iCloud account only.

Deleting a scene queues its deletion locally and in your private iCloud library. Deleting the app removes its local data but does not necessarily remove copies in iCloud or files you exported. Manage iCloud data in Apple's iCloud settings.

Changes

If we change how the apps or website handle data, we will update this page and change the date at the top before the change ships. We will describe any new collection here before we enable it.

Contact

Questions about privacy, or anything else: support@stageglass.app.