Privacy Policy
Public beta · Version 2026-07-15-beta-2 · Effective 15 July 2026
CAST uses anonymous avatar slots by default. Only the participant can add their own display name after accepting the current rules. Public-export permission is separate, optional and off by default. Individual votes are not shown to other group members. We do not sell personal data or use advertising trackers in the current beta.
1. Controller and contact
The controller is the individual operator of the CAST beta project, based in Luxembourg. Privacy questions, rights requests and deletion requests may be sent to castapp.team@gmail.com. Full legal operator and service-address information must be added before paid commercial service is activated.
2. Who this policy covers
This policy covers visitors and users of the CAST web beta, including hosts and invited group members. The beta is restricted to people aged 18 or older.
3. Data we process
- Account data: email address when email sign-in is used, authentication identifier, display name and account status. Anonymous access still receives a technical account identifier.
- Waitlist data: the email address and interface language you submit to the launch waitlist. Used only to send launch news, kept until launch communication ends or you ask for deletion at castapp.team@gmail.com, and never sold or shared for advertising.
- Group data: group name, theme, language, anonymous slot label, selected library avatar, a self-submitted display name after joining, host/member relationship, invite code, joined/voted state and timestamps. The current beta does not accept profile photos, face scans or voice uploads.
- Private participation data: each user’s vote selections. Other group members see participation state and collective results, not the individual ballot.
- Episode data: calculated cast, generated story, episode number, prior-story recap and continuity memory.
- Legal and participation records: the versions of the Terms, Privacy Policy and Content Notice accepted, age and beta/content confirmations, private-participation confirmation, optional public-export choice or withdrawal, chosen language and server time.
- Support and safety: messages, reports and information you choose to provide when contacting us.
- Technical and security data: records that hosting and authentication providers generate to deliver, diagnose and protect the Service, which may include IP address, device/browser details, request time and error information.
4. Purposes and legal bases
| Purpose | Data | Legal basis in the EEA |
|---|---|---|
| Create accounts; run invitations, voting, results and episode continuity | Account, group, votes and episode data | Performance of the service requested by you and steps taken at your request before using it |
| Show your self-submitted name and avatar inside the private invited group | Display name, avatar and private participation record | Performance of the private entertainment service you expressly request when joining |
| Include your chosen name and avatar in a downloadable or public-facing CAST export | Display name, avatar and public-export choice | Your separate consent, which is optional and may be withdrawn at any time |
| Protect accounts, investigate abuse, prevent fraud and maintain reliability | Account, group, technical, security and report data | Legitimate interests in securing CAST and protecting users; legal obligations where applicable |
| Answer support, privacy and safety requests | Contact and request data | Performance of the requested service, legal obligations and legitimate interests in support |
| Prove which legal version was accepted | Legal records | Legitimate interests in accountability and establishment, exercise or defence of legal claims |
| Process an optional purchase if paid features are enabled | Account, order and provider transaction references | Contract performance and legal accounting obligations; CAST should not receive full card details |
We do not rely on one bundled “privacy consent” for all processing. When consent is genuinely required for an optional feature, it will be requested separately and can be withdrawn without affecting earlier lawful processing.
5. Anonymous slots and self-submitted names
A host selects only the group size. CAST creates generic labels such as “Friend 2” with library avatars. A host cannot enter a friend’s name. After opening the invitation and completing the legal gate, each participant claims one slot and enters only their own chosen name or nickname. CAST records the participant’s private participation and optional public-export choice.
A participant can withdraw public-export permission in the Service. New exports then use the anonymous slot instead of that person’s chosen name and avatar. Removing participation anonymises a non-host’s active group records; if the requester is the host, the related series is deleted. Limited acceptance, report, security or transaction records may be retained where another legal basis requires it.
6. How information is visible
Authorised group members can see the group name, anonymous slots, self-submitted member display names after joining, avatars, whether a member has joined or voted, the collective result and the generated episode. Individual vote selections are not shown to group members. The host controls the invitation link; anyone who receives a valid link can attempt to join, so links must be shared carefully.
Nothing is posted publicly by CAST automatically. CAST downloads substitute anonymous slot labels for participants who have not granted public-export permission. A recipient can still capture or misuse private material outside CAST, so invitation access cannot guarantee that another user will behave lawfully.
7. Service providers and recipients
The current beta uses providers including:
- Supabase for database, authentication and related infrastructure;
- Netlify for web hosting and delivery;
- Gumroad, Inc. as merchant of record for the optional Party Kit purchase — payment and buyer data entered in the Gumroad checkout are processed by Gumroad under its own privacy policy;
- the email-delivery infrastructure configured through the authentication provider for secure sign-in messages.
These providers process data to deliver their service to CAST. We may also disclose limited information when required by law, to protect users or legal rights, or during a properly structured transfer of the project. CAST does not sell personal data.
If external generative-AI, voice, video, analytics or payment providers are activated, this policy and the in-product notice must be updated before relevant personal data is sent to them.
8. International transfers
CAST selects European hosting regions where available, but providers may process support, security or delivery data in other countries. Where EEA personal data is transferred outside the EEA, the responsible party must use an applicable transfer mechanism, such as an adequacy decision or standard contractual clauses, together with supplementary safeguards where required. Contact us to ask about safeguards relevant to your data.
9. Storage on your device, cookies and analytics
CAST uses browser storage and authentication technologies necessary to keep you signed in, remember language, preserve pending legal confirmation through an email sign-in redirect and operate security. The current beta does not use advertising cookies or optional analytics trackers. If optional analytics or marketing technologies are added, they will remain disabled until the required choice is offered.
10. Retention
Account, group and episode information is retained while needed to provide the beta and continuity requested by the group. Group invitations expire after the configured service period, currently 30 days, although related series memory may remain while the group continues using the beta. Inactive beta data may be deleted earlier during testing. Removal of participation or deletion of a host’s series removes or anonymises active records, subject to limited provider backup cycles, security needs and legal obligations.
Legal acceptance records and transaction records may be retained for the period reasonably needed to demonstrate compliance, handle disputes and meet legal obligations. Support and safety records are kept only as long as needed for the request, protection of users or legal claims. We will define and enforce more specific production retention periods before commercial launch.
11. Security
CAST uses access controls, private voting logic, restricted database permissions and secure sign-in links. No internet service is perfectly secure. Keep invitation links private, use a protected email account and report suspected unauthorised access promptly.
12. Automated generation
CAST uses automated rules and may use artificial intelligence to create fictional entertainment outputs from votes and group context. These outputs do not make legal or similarly significant decisions about users. Generated stories and exports are labelled as AI-generated fiction. See the Content Notice for limits and safety information.
13. Your data-protection rights
Depending on applicable law, you may request access, correction, deletion, restriction or portability of personal data, and may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time. You may also ask us to explain how your request was handled.
Send requests to castapp.team@gmail.com. We may need to verify that the request concerns your account or group identity. In Luxembourg, you may complain to the Commission nationale pour la protection des données (CNPD); you may also contact the competent authority where you live or work.
14. Changes
The version and date appear at the top. Material changes affecting how existing users’ data is processed will be explained in the Service. If new agreement is required, CAST will request it separately; a preselected box will not be used.