Listener Accounts

Listener accounts are optional. Turn on Listener accounts in the Site Builder, under Features, and publish. A sign-in button then appears in your website's header.

Listener accounts are completely separate from your team's, so a listener can never reach your dashboard.

What listeners get

• Favorites: a button on each show and presenter, and every track they like, all in one place
• The same identity on every device: votes and likes follow the account rather than the browser
• Show reminders: once email is set up, Remind me by email on a show's page sends them an email 15 minutes before it starts
• Their name filled in on shoutouts, comments and the live chat
• Control of their data: they can change their details, download what you hold about them, and delete their account

Confirming addresses

Once email is set up, a new listener must confirm their address before they can sign in, and Forgot your password? appears on the sign-in page.

Without email, accounts work straight away, but nobody can reset a forgotten password, so only do this for a small trusted audience. If you turn email off later, unconfirmed accounts can sign in again.

The sign-up form never reveals whether an address already has an account while email is set up. The address's owner gets an email instead.

Managing accounts

Listeners lists everyone with an account. Editors and above can:

• Close an account, which signs it out at once and stops it signing in. Reopen reverses this.
• Delete an account and all of its favorites. This cannot be undone.

Keeping accounts safe

• Passwords are hashed with Argon2id, the same as your team's
• Sign-ins last 30 days, and are stored only as hashes
• Links in emails work once. A password reset link lasts an hour, and a confirmation link lasts seven days
• Resetting a password signs out every device
• Sign-up and sign-in are rate limited. Behind a reverse proxy, enable TRUST_PROXY so the limit applies per visitor

These accounts hold personal data, so mention them in your privacy policy.