Your account settings

The screen where you change everything that belongs to you rather than to a festival: your name and photo, the address you sign in with, the browsers you are signed in on, the AI apps you have connected, and which emails reach you.

It is the personal counterpart to Organization settings, which is where roles and festival access are handed out. Nothing on this screen changes what you are allowed to do — your role and your reach are shown here read-only, and an owner or org admin gets a button out to Organization settings.

The screen is headed Your account, with one sentence under it: "Settings for you, not for a festival. They follow you to every festival in your organization. What you're allowed to do on each festival is set in Organization settings." Under that sit the four tabs.

Every setting is a row. On the left, its name and a sentence or two on what it does; on the right, the control, or the value when it is one you cannot change here.

Finding the screen

Open the menu behind your name in the top-right corner. Two rows in it are now live:

Or type the address:

/org/<organization>/account

There is no row for it in the left navigation, and nothing in the navigation lights up while you are here — the account menu is the way in.

The tab is part of the address

Four tabs, and the one you are on is written into the address:

Reload, or come back to a bookmark, and you land on the same tab. An address naming a tab that does not exist opens Profile rather than failing, so an old link to ?tab=payments still works — it just does not show you a payments tab, because there is not one.

Moving between tabs replaces the address rather than stacking it, so Back takes you off the account screen rather than walking you through the tabs.

What the sidebar shows

The left-hand navigation is your organization's, not a festival's — All festivals, Judges directory, Library, Organization settings — with nothing highlighted, because this screen belongs to none of them. Under it sits a Personal scope block:

These settings belong to your account and follow you across all 2 festivals you can access. Roles and access live in Organization settings.

The number is what you can reach, not what your organization owns. An owner and a coordinator standing on the same screen see different numbers, and somebody who reaches none of them yet gets the sentence with no number in it at all. On a narrow window the block is hidden along with the rest of the sidebar.

Who can open it

Anybody who is an active member of the organization, whatever their role — Owner, Org admin, Finance and Member all have an account, so they can all open this screen. It is the same screen for every one of them; the only things that differ are what the Your access card says and what the Connections tab says a connected AI app would reach for you.

Everybody else gets an ordinary "page not found":

• Somebody whose access has been suspended, whatever their role.
• Anybody outside your organization. They get exactly the same answer as a mistyped address — your organization's existence is never revealed.
• A logged-out visitor is sent to the log-in screen instead.

How saving works

Your name saves on a button; everything else acts the moment you use it.

For your name:

• Change either box and a bar appears at the foot of the screen: an amber dot, Unsaved changes on Profile, Discard and Save changes. It stays in reach while you scroll. The Profile tab wears the same amber dot.
• Discard puts back the saved name, with no question asked.
• Save changes reads Saving… while it works. Then the bar goes, and the foot of the tab reads "All changes saved." with when it was last saved, for example "Last saved Aug 25, 2026, 10:04 AM".
• A problem you can see first greys Save changes. An empty First name turns the line under the boxes amber, and the bar reads "Fix the highlighted setting before saving."
• A refusal is shown under the boxes in amber, and the bar reads "Some changes weren't saved. The card above says why." Nothing you typed is cleared by a refusal. Fix it and press Save changes again.

Two things to know before you start typing:

• Moving to another tab keeps an unsaved name. It is still in the boxes when you come back to Profile, with the bar waiting.
• Leaving the screen by a left-navigation link asks first — "You have unsaved changes on this page. Leave without saving them?" Closing or reloading the browser tab gets your browser's own version of the same question. The same goes for a new address typed into Change email and not yet sent.

Profile

Three cards: Profile, your photo and your name; Email, the address you sign in with; and Your access, what your role reaches.

Your photo

The Photo row, first on the Profile card: your photo or your initials, then Upload photo — or Replace photo and a quiet Remove photo once you have one. The row says "Shown next to your name across FilmScorecard. Without a photo, your initials are shown instead."

• PNG, JPG and WebP, up to 5 MB. The line under the button names PNG and JPG; WebP works too. It also suggests a square image 512 px or larger, which is good advice rather than a rule — nothing checks the shape or the size in pixels, only the file type and the 5 MB ceiling.
• The photo is not part of Save changes. It commits on its own, and the new image appears immediately while it is still going up.
• Remove photo puts you back to initials, straight away. The image itself stays in storage; nothing points at it any more, and the next photo you upload replaces it.
• A failed upload leaves your previous photo alone and says so under the row: "Choose a PNG, JPG or WebP image.", "Choose an image under 5 MB.", or "The photo could not be uploaded. Nothing else has changed."

Where your photo appears: on this card, and in the circle beside your name in the top bar and at the head of the account menu — on every screen of your organization. Nowhere else, and nobody else sees it yet. No people list, no festival screen and no judge-facing screen draws another person's photo today.

With no photo you get your initials on an indigo circle: the first letter of your first name and the first letter of your last name.

If you also judge, you have two photos. The one on your judge profile is what festivals see beside your judging work; this one is what your colleagues in this organization see. They are separate, and changing one does not change the other.

Your name

The Name row says "Everyone in your organization sees it. It's also on review decisions you make, emails sent on your behalf, and the organization's activity log." Under the two boxes, one line shows the result as you type — "Shown as Maya Chen. Your initials, MC, come from it." — and the initials in the photo circle follow along.

An empty First name is caught as you type: the line reads "Add your first name." in amber, and Save changes is greyed. An empty Last name is caught only when you save, with "Last name is required." in the same place. A name over 40 characters is refused the same way when you save.

They are stored separately, and the name everyone sees is the two joined with a space. Save, and the top bar, the account menu, audit entries and email sent on your behalf all read the new name.

An account that has never saved here is shown a guess. FilmScorecard splits the name already on your account at the first space — first word into First name, everything else into Last name — and puts the two halves in the fields. That guess is not stored. Reload without saving and it is guessed again; the database still holds nothing. It becomes real only when you press Save changes.

Two consequences of that:

• A one-word name puts everything in First name and leaves Last name empty, and Save changes then refuses with "Last name is required." That is not a bug to work around — you are being asked for the half the account never had. Put something in both boxes.
• A wrong guess costs one edit and nothing else. Fix it before you save.

If you also judge, the display name on your judge profile still wins. The name in the top bar, in the account menu and on your scorecards comes from your judge display name when you have set one, so saving First and Last name here will not change it. Change that one on your judge account screen instead.

Email

The Email card's Email address row shows the address you sign in with, in monospace, with a green Verified pill. This is the only place that address changes, which is why the Sign-in and security tab links back here.

It is also where every notification goes. There is no separate "contact" address in FilmScorecard.

Changing it

1. In the Change email row, type the new address in the box (it reads "New email address" until you do) and press Send link. The button is greyed while the box is empty.
2. One email goes out, to the new address only. It carries a link — not a code — under the subject "Confirm your new email address". Nothing is sent to your old address.
3. The box is replaced by a block reading Link sent to the new address, which says to open it from that inbox, that the link expires after 10 minutes, and that until then you still sign in with your current address.
4. Open the link from the new address. The change takes effect then, and the Email address row shows the new address.

Until you open that link, nothing has changed. The old address still signs you in, and it still receives every notification email. An email change you never confirm simply lapses.

The block carries two actions:

• Send it again — sends the same link again to the same address. Ask twice in quick succession and you get "A link was sent very recently. Wait a minute and try again."; the block stays exactly as it was.
• Cancel the change — withdraws the request. The block goes and the box comes back.

Three things worth knowing:

• Opening a cancelled link changes nothing. You land on an error page and your sign-in address is untouched.
• A second request replaces the first. Ask for [email protected] and then [email protected], and the block names [email protected]; the first link is dead.
• An expired link changes nothing either. Press Send it again and use the new one, or cancel and start again.

If the address is refused

The message appears in amber under the box.

One oddity after a change confirms: the "Last saved" time at the foot of the Profile tab may move for a name you never edited. Your account record genuinely was touched at that moment, to keep your address in step. Nothing else happened.

Your access

Read-only, and the one card on this tab that differs from person to person. It answers three questions.

Who can change it, in the sentence at the head of the card:

• Owners and org admins read "What you can open and do. You can't change this here. Access for everyone, you included, is managed in Organization settings.", and an Open Organization settings button sits in the card's corner.
• Everybody else reads "What you can open and do. Only an owner or org admin can change your access, so ask one of them if something's missing." They get no button, because the screen behind it is not theirs to open.

Who you are here, in the Your role row: your organization role, behind a padlock, and one sentence beside it on what that role means:

Which festivals you can open, in the Festivals you can open row, one line each:

• An owner or org admin sees every festival in the organization, each marked Full access.
• Anyone else sees the festivals they have been given, each with their festival role at the right — Festival admin, Coordinator, Programmer or Viewer — and a line on what that role does there, such as "Submissions, judges and scorecards. Not judge pay or settings." for a Coordinator. With none yet, the row reads None yet.
• Access limited to some seasons says so beside the festival's name, for example "· Spring 2026 only".
• An amber Adjusted pill means an admin has changed some of that role's permissions for you, and the line under the name says so.

Nothing on this card writes anything. To change what somebody reaches, see Festival access.

Sign-in and security

There are no passwords

Not on this screen and not anywhere in FilmScorecard. The Signing in card says so, in its one row, Sign-in method:

FilmScorecard doesn't use passwords. Each time you sign in, we email you a 6-digit code, and entering it signs you in. There's no password to remember or change.

So there is nothing here to change, no strength meter, and no password to leak.

Beside it, Code sent to your address, then the line "A code works once and expires after 10 minutes. Asking for a new code cancels the last one.", and a quiet Change your email address link that takes you to the Profile tab, where the Email card is.

There is no Google row during the private beta

Google sign-in is switched off for the beta, so the Signing in card has no Google row at all — nothing to connect, nothing to disconnect, and no connection date to read.

Three things follow from that, and the third is the one people worry about:

• Nothing was taken off your account. If you connected Google before the beta, that connection is still there and still yours. What you have lost for now is the ability to see it or undo it from this screen — not the connection itself.
• You sign in with an emailed code in the meantime, at the same address, and land in the same account with everything in it.
• The row comes back when the beta ends, along with Connect Google and Disconnect.

If you ever land on this tab and find the line "Google could not be connected. Nothing has changed." in amber at the top of the Signing in card, read it literally: nothing changed. There is no Google control on the screen to try again with during the beta — carry on with the emailed code.

See Logging in for what the sign-in screens look like, and Log-in problems for what each of their messages means.

Where you're signed in

Every browser signed in to your account, most recently used first. The card says "If you don't recognise one, sign it out."

Under the table, a count: "3 browsers, most recently used first."

"This browser" is the one you are reading this in — the session your page loaded under. That row never has a Sign out button, and FilmScorecard refuses to end it even if something asks. To end this one, use Sign out in the account menu; that clears the browser as well, which is the difference.

The list is drawn when the page loads. Reload it to see a browser that has signed in since.

An AI app you have connected is signed in as you, so it can appear in this list as a row of its own, under whatever browser name its sign-in reported. To disconnect an app, use Disconnect on the Connections tab rather than signing its row out.

Signing a browser out

• Sign out on a row ends that one. The dialog is headed with the browser's name — "Sign out Chrome?" — says "It's signed out, and anything unsaved in it is lost. The browser you're using now stays signed in.", and its button reads Sign out.
• Sign out everywhere else, the amber button in the card's head, ends every one but yours. The dialog is headed "Sign out everywhere else?" and its button counts them: Sign out 2 browsers. The head button is not shown at all when yours is the only browser.
• Both dialogs close on Cancel or Escape, and both buttons grey out while the action is running.

Signing a browser out does not switch it off there and then. What it does is revoke its session: the browser finds out on its next request, and a page it is loading at that moment may finish loading. Someone typing in that browser sees no interruption until they do something that reaches FilmScorecard. This is worth knowing when the reason you are signing it out is that a laptop went missing — treat it as "that browser loses access shortly", not "that screen goes blank now".

Anything unsaved in those browsers is lost, exactly as the dialog says.

A browser you haven't used for 14 days is signed out automatically, with nothing to press.

If a sign-out is refused, the dialog stays open and one sentence appears in amber at the top of the card behind it. Cancel closes the dialog and clears the sentence.

The table scrolls sideways rather than restacking. On a narrow window the rows stay rows: the Browser column stays pinned to the left and the rest slides under it, so you can still read down the Last used column to decide which browser to sign out. It takes keyboard focus, so you can scroll it with the arrow keys without pressing anything in it.

Notifications

One card, headed Email notifications. The line at the top reads "Choose which events send you an email. Each one covers every festival you can open. Emails go to your address." Under it, seven events, each with one switch — every one of them an email FilmScorecard really sends today — in two groups: About judges, with six, and FilmFreeway, with one. Each group's head counts how many of its own are on: "6 of 6 on", "1 of 1 on".

The FilmFreeway row is there whether or not your organization uses FilmFreeway. It only ever sends for a season connected to FilmFreeway.

Each row carries its name, a short line under it saying when it fires, and at the right the word On or Off beside its switch.

Everything is on until you say otherwise. An account that has never touched this tab has every switch on. FilmFreeway needs attention arrived switched on for everybody, including people who had already turned other rows off.

Changing a switch

There is no Save button and no Save bar. Flip a switch and it is written there and then: the line under the card reads Saving… while it goes, then "All changes saved." with when it was last saved. If the save fails, the switch goes back to where it was, with the reason in amber at the top of the card — flip it again.

Switch one off and that email stops arriving for you. Your colleagues are unaffected — the choice is checked per person, as each message goes out, so everybody else on the same notice still gets theirs. A report or a skip still reaches the Review Queue's Issue tab and every count whoever has the email turned off, and what a FilmFreeway sync found still waits under Needs attention on the FilmFreeway tab of the season's Settings.

What is no longer on the tab

The tab shows only what is real. It used to show fourteen events in three groups, an In-app column beside Email, and a Daily summary email select — and most of that sent nothing. Eight of the events had no email behind them, the In-app column fed nothing, and no summary was ever sent. They are no longer drawn, so the Imports and Revenue groups are gone with them.

Nothing you set there was thrown away. Whatever you had chosen for those rows, the In-app column and the summary is still stored against your account, untouched by any change you make here now. A row comes back on this tab when FilmScorecard starts sending the email it controls.

These settings are yours, not your organization's

One set per person, across everything. If you belong to two organizations, both account screens show and change the same preferences — switch off "Judge sends you a message" in one and it is off in the other. There is no way to be noisy for one organization and quiet for another. See Working in two organizations.

The same is true of your name, your photo and your sign-in address: one of each, carried everywhere you work.

Connections

Two cards, one under the other: AI apps, one row per app you can connect, saying whether it is connected and how to connect it; and What a connected app can do, written for your own access. The first card opens with "Connect an AI app, such as Claude or ChatGPT, to ask questions about your festivals from inside that app. It signs in as you, so it sees only what you can see. You can disconnect it here at any time, and it loses access straight away." Everything a connected app can do, tool by tool, is in Connecting an AI app.

The apps

Five rows, in this order, each with the app's name and where it runs:

At the right of each row:

• A connected app reads Connected with the date you allowed it, beside an amber Disconnect. See Connected apps.
• Any other app reads Not connected, beside a How to connect button. Another app never reads Not connected: it is there for any app without a row of its own, so the words would say nothing.

An app is matched to its row by the name it gave when it connected. One whose name FilmScorecard does not recognise is shown on Another app, so every connection is on the tab somewhere.

How to connect

Press How to connect and the row opens downward to that app's steps; the button becomes Hide steps. One app is open at a time: opening another closes the first. When you have nothing connected yet, Claude's row is already open when you arrive.

An open row holds:

• You'll need: what to have first — for Claude, "a Claude plan that allows custom connectors" — ending "There is no key or password: the address is all the app needs."
• The numbered steps: the app's own, then the two every app shares — signing in to FilmScorecard if it asks, and checking the request and pressing Allow on the connection page. The address, Claude Code's command and Cursor's mcp.json snippet each sit in the step that uses them, with a Copy button. It reads Copied once your clipboard has it, or Copy failed if your browser would not allow it.
• At the foot, "Once you've signed in, this row says Connected." and a link to that app's own Help guide, in a new tab: Claude setup guide, ChatGPT setup guide, Claude Code setup guide, Cursor setup guide, or Full setup guide on Another app.

A connected app's row does not open. To see its steps again — to connect it on another device, say — use its Help guide: Connecting Claude, Connecting ChatGPT, Connecting Claude Code, Connecting Cursor or Connecting another AI app.

When AI access is off

The five rows still name the apps, but none of them opens, and none reads Connected or Not connected. The head of the AI apps card asks for access instead. It is headed "AI access isn't on for your organization yet", says FilmScorecard switches it on one organization at a time, and offers Request AI access, which opens our contact form with the topic and the message already written, naming your organization. Read it, change it if you like, and press Send. We reply by email.

To see what is involved first, each app's Help guide is listed under How to connect. The What a connected app can do card is still there. Every organization starts with AI access off.

Connected apps

A connected app's row lists every connection of that app you have allowed to act as you: Connected and the date you allowed it — "Connected Sep 30, 2026" — with an amber Disconnect beside it. When one row holds more than one connection, two apps on Another app, say, each line starts with the name the app gave when you connected it.

If the list cannot be read at that moment, the head of the AI apps card reads "Connected apps could not be loaded. Refresh to try again." No row reads Connected or Not connected, and every row's steps still open.

A connection belongs to you, not to the organization. If you belong to two organizations that both have AI access, both account screens show the same connections, and disconnecting an app in one disconnects it in both. In an organization without AI access you do not see them, but your apps are still connected, and still work in the organizations that have it.

Disconnecting an app

1. Press the amber Disconnect on the app's row, beside the connection.
2. The dialog is headed "Disconnect the app?" and says "Its next request is refused. To use it again you connect it again from the app."
3. Press the amber Disconnect. The connection goes, and when it was the row's only one, the row goes back to Not connected and How to connect.

The app is refused from its next call, whichever organization it names. To use it again, connect it again from the app, and you will be asked on the connection page once more.

Both buttons grey out while it works. If it fails, the dialog stays open and the AI apps card behind it reads, in amber at its top, "That app could not be disconnected. The list has been refreshed.", so the list already shows whether the app is still there. Press Disconnect again, or Cancel, which closes the dialog and clears the sentence.

What a connected app can do

The second card, headed What a connected app can do — "The same for every app you connect." It is written for you: it describes what a connected app would reach with your own access, in one organization.

When you have AI access in two or more organizations, the card's head reads "Showing what it reaches in", with a button per organization. It opens on the organization whose account screen you are on.

In each season lists submissions (each one in full), the season overview, judges on the roster, filed scorecards and reported problems, awards and imports, then, as far as your access gives them, judge invitations, requests and announcements; judge pay and scorecard sales; and season settings. Across your organization lists the judges directory, your own inbox, and your library and its scorecards — plus, for an owner or org admin, orders and promo codes, and Organization settings and the activity log. "(in some of your festivals)" after a line marks something only some of your festivals give you.

The card follows your access:

• Someone who cannot see judge pay is not offered a question about it.
• With view-only access, What it can change is "Only this one thing." — your own flag — and the card adds "Your access is view-only, so it can't move submissions or mark Priority."
• With no festival yet, the reach sentence says it reaches only your organization-wide screens, In each season is left out, What it can change is "Nothing, for now." with "It changes nothing until you're given a festival.", and the example questions are about the judges directory and your library.

It describes your access; it does not decide it. The app is checked on every call, so if your access changed a moment ago, the app's answers follow the change even before this card does. When none of your organizations has AI access, or your access could not be read, the card describes what a connected app does for someone with full access, and leaves What it can't open out. If this organization has AI access off but another of yours has it on, the card describes that one.

What this screen does not do yet

Stated plainly so you are not left waiting:

• No notice inside FilmScorecard. The Notifications tab is email only, and only for the seven events FilmScorecard sends today; there is no bell, no feed and no daily summary for staff. The amber counts in the left navigation — Review Queue's issues among them — are where in-app attention lives. See Notifications.
• No time zone. Nothing on this screen asks for one, and no time on any FilmScorecard screen is shown in a zone of your choosing.
• No billing, payouts or fee record, even for the Finance role. There is no billing screen anywhere yet.
• No passwords, no two-factor, no authenticator app and no recovery codes — and that is by design, not a gap. Sign-in is the emailed code.
• No sign-in connections at all during the private beta. Google is switched off for the duration and no other provider has ever been offered.
• No record of what a connected AI app has done. FilmScorecard records every call an app makes as you, and no screen shows that record yet.
• No place names for your browsers. The IP address column is an address, not a city, and the Browser column is a best guess from what each browser reports about itself.
• Nobody else can see your photo. It is stored and shown to you, in the top bar and the account menu, and no other screen draws it yet.
• There is no per-organization muting and no way to have two names or two photos in two organizations.
• You cannot see another person's account, and nobody can edit yours — including an owner. What an owner can change is your role and your festival access, on Organization settings.

Related guides

• Your account menu — the block behind your name in the top bar, the two rows that open this screen, switching organizations, and signing out.
• Organization settings — the other side of the line: your People list, the organization roles, suspending somebody, and the record of every access change.
• Festival access — how the reach named on your Your access card is granted, festival by festival.
• Working in two organizations — what is shared between them and what is kept apart.
• Logging in — the 6-digit code and logging out.
• Connecting an AI app — connecting an app such as Claude, the 34 tools it can use (reading your seasons and your organization, and three changes to a season's submissions), and what it is told when it is refused.
• Judge requests — where the counter a judge answers is sent from, and what their answer changes on the request.
• Issues your judges raise — what a judge's report or skip looks like on the Review Queue, and the emails they send.
• Connecting FilmFreeway — the sync behind the FilmFreeway needs attention email, and the tab its button opens.
• Your account — the separate account screen you use as a judge, if you both run festivals and judge for them.