rosterRF — Privacy Policy

Last updated: 2026-10-14 · applies to rosterRF v0.9.27 and later (Windows and macOS)

Short version: rosterRF runs entirely on your own computer and your own local network. It has no accounts, no analytics, no telemetry, and no cloud. It does not sell or share your data, and it sends nothing to us unless you press Send on a report.

What the app stores, and where

Everything the app keeps stays on the computer running it ("the host"):

• Mic/card names, tape-color tags, groups, and photos you add
• Scenes (saved layouts) and the show chat (see below)
• Alert thresholds, the RF limit you set on the Live scan, and the venue ZIP you enter
• Backup frequencies you paste in
• A local history timeline of signal, audio, and battery levels (kept 24 hours)
• A cache of receivers last seen on your network, and the host name you choose

Locations:

• Windows: %APPDATA%\WWATU Monitorin
• macOS: ~/Library/Application Support/WWATU Monitorin
• Show files (.rrf) live wherever you save them (by default a rosterRF Shows folder in your Documents). A show file contains the items above, including photos and the chat.
• Exports you create (a timeline CSV, a printed channel sheet) are ordinary files you choose where to save.

You can delete all of it at any time: remove those folders and files, or use the Clear / Remove / New show controls in the app.

Your local network

• The app serves its dashboard to phones and tablets on your own Wi-Fi / LAN. Any device on that network that opens the address can view the dashboard, so only run it on a network you trust (your show or venue network), never on the open internet.
• Changing anything (names, tape colors, photos, groups, scenes) and the show chat require pairing a device by scanning the host's QR code. The QR carries a key that is unique to that host. Unpaired devices are view-only and cannot read the chat.
• The host advertises itself on the local network under the name rosterrf.local so computers and iPhones can find it by name. That name is only visible on your LAN.
• It listens on your local network for Shure and Sennheiser receivers to read their metering. It never changes your receivers' settings.
• Optional headphone monitoring streams audio locally (host → your device) over your network. Nothing is recorded or uploaded.
• A console or Stream Deck can recall scenes only if you turn on Enable remote scene recall.

The show chat

Messages typed in the chat are stored in the show on the host and shown to the host and to paired devices on your network. They are saved inside the show file when you save it, and cleared by New show. They are never transmitted anywhere else.

The internet

The app works fully offline. It makes only these outbound internet requests:

• Update check (Settings ▸ Check for updates on launch, on unless you turn it off): the host reads a small version file from muffstuff.net. It sends nothing about your show; phones never make this request.
• "Update from FCC" (in the Live RF panel), only when you press it, downloads current public TV-station data from the U.S. FCC's public website to refresh the local-TV overlay. This request contains no personal information: not your ZIP, not your location, not any identifier. Your ZIP is used only on the host to look up nearby channels from data already on the host.
• Send report (Settings ▸ Report a problem), only when you press Send. It emails MuffStuff what you wrote, the kind of report, the gear you name, your email if you give one, the rosterRF version and operating system, and, if you leave Attach diagnostics ticked, the diagnostics: the version, a summary of your gear by model, scene state and recent log lines. Diagnostics never include photos, card names, the pairing key or passwords; rosterRF removes keys and passwords from the log lines before sending. We use a report only to look into it, use your email only to reply to that report, and keep reports only as long as needed.

There is no other outbound connection, no usage tracking, and no "phone home."

Photos and camera

Photos you attach to cards are processed on the host and stored locally. They are shared only with paired devices viewing the same dashboard, and travel inside a show file if you save one. They are never uploaded to us or to any third party.

Children and sensitive data

The app is a professional A/V tool and is not directed at children. It does not intentionally collect any sensitive personal data.

Changes

If this policy changes, the updated version ships with the app and is published at the same address, with the date above revised.

Contact

Questions about this policy: MuffStuff — muffstuff.net

Shure, Axient, ULX-D and SLX-D are trademarks of Shure Incorporated. Sennheiser is a trademark of Sennheiser electronic. Dante is a trademark of Audinate. Stream Deck is a trademark of Corsair. rosterRF is an independent product and is not affiliated with or endorsed by any of them.