Restricted Band Portal

Blight HQ — Band & Crew Only

Authorized personnel only. Enter your Master Band PIN or 6-character Workspace Access Code to unlock.

SHA-256 Vault Protection
Back to Tools/Band Members, RBAC & GDPR Security

Band Members, RBAC & Privacy Hub

v1.1 Security & GDPR

Manage workspace roles, rotate invite codes, enforce financial privacy, and control UK GDPR compliance.

Active 6-Character Invite Code

New users joining with this code are strictly assigned the member role via scoped server-side RPC. Rotate immediately if shared publicly.

BLIGHT

Default HQ Lock Screen Gate (Active on hq.blightuk.com)

All internal routes are locked by default with SHA-256 verification. You can also set an additional custom Master PIN below (stored as a cryptographic SHA-256 hash).

Clean Slate Mode — Clear All Placeholder Demo Data

Ready to load Blight's real songs, gigs, gear, and contacts? Click Start Clean Slate to wipe all sample demo items across every module at once. Every item you add afterward is automatically saved and synced.

Workspace Members & Role Permissions

4 Active Accounts
Jamie(jamie@blightuk.com)GDPR Art. 9 Consent On File

Band Admin / Founder • Joined 2026-01-12

Liam O'Connor(liam@blightuk.com)GDPR Art. 9 Consent On File

Lead Guitar / Backing Vocals • Joined 2026-01-14

Sarah Jenkins(sarah@blightuk.com)GDPR Art. 9 Consent On File

Bass Guitar • Joined 2026-01-15

David Kim(david@blightuk.com)GDPR Art. 9 Consent On File

Drums & SPD-SX Sampler • Joined 2026-01-15

Admin & Band Members

Full access to Songwriting Splits, Performance Contracts, Tour Settlements (P&L), and CRM.

Touring Crew Role

Access to Run Sheets, Stage Plots, and Gear Packlists. Blocked from viewing Band Royalty Splits or OAuth tokens.

Session Guest Role

Read-only access to Rehearsal Lyrics and Live Stage Mode. Blocked from CRM, Contracts, and Financials.

UK GDPR, PECR & Legal Safeguards

GDPR Article 9 • Health & Dietary Data

Anonymized Hospitality Rider Aggregation

Medical allergies and celiac requirements are Special Category Data under UK GDPR. When enabled, exported PDF Hospitality Riders only display aggregated counts (e.g. "1x Celiac, 2x Vegan") without attaching medical notes to named individuals.

UK PECR & GDPR Art. 6(1)(f)

Transparent EPK Analytics & Opt-Out Footer

Automatically appends a B2B Legitimate Interest opt-out disclosure to outgoing pitch emails and respects do_not_contact suppression flags in the Industry CRM.

Shared or Borrowed Device Protection (IndexedDB Wipe)

Offline Basement Mode caches venue stage door codes, Wi-Fi passwords, and setlists locally on this device (0 setlists, 0 shows cached). Wipe local storage before handing a tablet to external crew.