How Show-Spec handles your data

Your project content

Schedules, people, travel, hotels, budgets, receipts and documents are encrypted on your device with keys created on that device. Without team sync, project content never leaves your device unless you export or back it up yourself.

Team sync

When you share a project, your devices send encrypted changes to our relay at api.show-spec.com. The relay orders and stores this ciphertext so your teammates' devices can fetch it. We can't decrypt it: the keys are only on the devices you've granted them to.

To run sync, the relay stores account details (name, e-mail address, a password hash or passkey public key), your registered devices' public keys, project membership and roles, and technical metadata such as sizes and timestamps of encrypted changes.

This website

show-spec.com uses no cookies, no analytics and no advertising trackers, and loads nothing from third parties. Our hosting provider (Cloudflare) processes standard connection data, such as IP addresses, to deliver and protect the site.

Your choices

• Payments are handled by Stripe. We never see or store your card details; we keep only your subscription status and the e-mail addresses of team members you add.
• Export your data at any time as PDF or Excel, or as an encrypted backup.
• Your recovery kit is the only way to unlock your projects if you forget your passphrase. We can't reset it for you.