ShowScout Admin

• Last Login — The last time this user successfully signed in. "Never" means they registered but have never logged in (or the login pre-dates this feature).
• Last Activity — Most recent meaningful app action (Ticketmaster proxy usage or watchlist updates), shown with simple recency labels.
• Watchlist — How many events they've bookmarked, and the total storage those event snapshots use.
• Digest — Whether daily email is turned on, how many digests have been sent to them all-time, and when the last one was sent.
• Alerts — Whether watchlist sale alert emails are enabled for this user (opt-in per user in their Settings).
• Status — Approved = can log in and use the app; Pending = registered but not yet approved; Admin = has admin panel access.

• Approve — Grants the user login access and sends them an approval email.
• Revoke — Sets the user back to pending. Their account is locked — they cannot log in — but all their data (watchlist, API key, prefs) is preserved. You can re-approve them at any time. A denial email is sent after revoke.
• Delete — Permanently removes the user row and all associated data (watchlist events, saved preferences, encrypted API key). This cannot be undone. Their email address is freed, meaning they could re-register. If you want to block re-registration, Revoke instead of Delete.
• Export — Downloads a sanitized JSON user snapshot (profile metadata, safe preferences, watchlist summary, session metadata, and digest/alert counters) without secrets.
• Audit log — Approve, revoke, delete, and export actions appear in the Admin Audit Log panel (90-day retention).

Tip: When in doubt, Revoke first. You can always Delete later.

This admin panel only manages users. Your personal app settings (API key, email digest, theme) are separate:

• Go to the main app and open the Settings tab to add your Ticketmaster API key.
• Without an API key you won't be able to search for events in the app.
• You can also set up your daily email digest and watchlist sale alerts from that Settings tab.

• Use Last Login to identify inactive accounts — if someone hasn't logged in for months and has the digest running, consider revoking to save email quota.
• The Watchlist KB figure helps spot accounts storing an unusually large number of events.
• You cannot delete your own admin account from this panel (the Delete button is hidden for your row).
• Changes take effect immediately. Approval and revoke actions now send follow-up emails to the user; delete does not.