Last updated: 3 November 2026
Enter the Blackbox collects only what it needs to run a live performance: no accounts, no ads, no analytics and no tracking.
This policy covers the Enter the Blackbox app for Android and iOS (package space.enabler.blackbox.app). The app lets audience members take part in a live theater performance from their phone.
The data controller is Manus Nijhoff, Veembroederhof 188, Amsterdam. Contact us about privacy at contact@manusnijhoff.nl.
We process the data below only while you take part in a performance. Our legal basis is performing the service you ask for (GDPR Art. 6(1)(b)), unless a row says otherwise.
| Data | Where it goes | Why | How long |
|---|---|---|---|
| The name or label you type when joining (max 40 characters) | Venue show server | Shows you on the shared screen and groups you during the show | Held in memory for the performance |
| Your choices: votes, group picks, reactions, cursor movements | Venue show server | Drives the shared performance in real time | Held in memory for the performance |
| A random installation ID and session key | Your device (secure storage) and the show server | Lets you reconnect to the same seat if your connection drops | On your device until you uninstall the app |
| Playback timing: clock offset, network round trip, audio drift | Venue show server | Keeps audio in sync across phones and helps us fix sync problems | Held for the performance |
| IP address | Venue show server | Limits join attempts to prevent abuse | In memory, not stored |
| Show audio files and the current show version | Your device only | Plays the show offline-tolerant and without buffering | Until you uninstall the app |
We do not collect your location, contacts, photos, microphone audio, advertising ID, or payment details. We do not create user accounts.
The server keeps an operator log of technical errors and admin actions. It is used to keep the show running and is not used to profile audience members.
The app explicitly blocks microphone and storage permissions on Android.
We do not sell your data or share it with advertisers or data brokers. Other people at the performance see your name and choices on the shared screen.
We use these service providers, who process data only on our behalf:
All data is encrypted in transit (HTTPS/WSS). Session keys on your device are kept in the system’s secure storage (Android Keystore / iOS Keychain).
Under the GDPR you can ask us to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent at any time. Email contact@manusnijhoff.nl and we will reply within 30 days. You can also complain to your national data protection authority.
Delete your data: uninstall the app to remove everything stored on your device. Performance data on the server is not kept after the show. To request deletion of anything else, email contact@manusnijhoff.nl.
The app is not directed at children under 13. Children who attend a performance should take part with a parent or guardian.
We will post any changes to this policy on this page and update the date at the top.