Privacy policy

Last updated: 25 October 2026. Applies to the Castwide desktop app (version 2.3.5 and later) and this website.

1. Who we are

Castwide is a free Windows app made by an independent developer in the United Kingdom. In this policy, "we" and "us" means the Castwide developer, and "the app" means the Castwide desktop app. The app is published on GitHub.

2. What we collect

Nothing. We don't run servers that receive your data from the app, except the optional services listed below, which pass things straight on and keep nothing. Specifically, we never receive or store:

• your email address, name or any account details (there is no Castwide account);
• passwords, stream keys, API keys, sign-in tokens or webhook links;
• your chat, viewers, streams or recordings;
• usage statistics, analytics, telemetry or device identifiers.

The app has no analytics or tracking code. It also turns off Chromium's own background requests (such as component updates and crash uploads).

3. What Castwide saves on your PC

Everything is saved in %APPDATA%\Castwide on your PC (usually C:\Users\<you>\AppData\Roaming\Castwide). It is never uploaded.

Stream keys and tokens are also removed from the log, diagnostics and crash reports before they are shown or saved. To delete all of this, see Delete your data.

4. Who the app talks to, and why

The app only connects to the services below, and only to do what you asked. When it connects, that service sees your IP address, as with any internet connection. Each service's own privacy policy applies to what it receives.

5. Google and YouTube

Castwide uses YouTube API Services. By signing in to YouTube in Castwide, you agree to the YouTube Terms of Service. The Google Privacy Policy applies to what Google receives.

What Castwide accesses

When you sign in, Castwide asks for one permission: Manage your YouTube account (youtube.force-ssl). It uses it only for these features:

• Your channel: channel name, channel ID and handle, to show which account is signed in and link to your channel.
• Live streams and broadcasts: to find or create your stream key, create and start a live broadcast with the title, description, privacy and latency you choose, update your title and thumbnail, and check what resolution your key accepts.
• Live chat: to read your live chat (including Super Chats, Super Stickers and memberships) and show it in Castwide and your chat overlay, and to send chat messages you type.

How it's used, stored and shared

• All of this happens on your PC, directly between Castwide and Google. None of your Google or YouTube data is sent to us or anyone else.
• Your YouTube sign-in token is stored encrypted on your PC until you sign out or uninstall. Your channel name and ID are saved with it so Castwide can show your account.
• Chat messages are shown while you're live and are not saved, except event counts and alerts in your local stream history.
• Castwide doesn't use your data for advertising, doesn't sell it, and doesn't let people read it.

Limited Use

Castwide's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Removing access

• In Castwide, press Sign out for YouTube. This deletes the token from your PC.
• To also remove Castwide's access at Google, go to myaccount.google.com/permissions, choose Castwide and select Remove access.

6. Facebook (Meta)

If you sign in to Facebook, Castwide asks for permission to see the Pages you manage, create live videos, read and reply to comments on your live videos, and post to your Pages. It uses this only to start your Facebook live video, end it when you stop, set its title and show live comments in your chat. Your token is stored encrypted on your PC and is never sent to us. Castwide doesn't use Facebook data for anything else and doesn't share it. To remove access, sign out in Castwide and remove Castwide in Facebook under Settings & privacy > Settings > Apps and websites. See Delete your data.

7. Discord announcements

If you sign in to Discord, Castwide asks for two permissions: see your username (identify) and see the list of servers you're in (guilds). It uses them to show which of your servers have the Castwide bot, and to post your go-live message.

To use the Castwide bot without giving the bot's password to every app, posts go through a small Castwide bot service run on Cloudflare (castwide-bot.castwide.workers.dev). When you use it, the app sends it:

• your Discord sign-in token, so it can check with Discord that you own or manage the server;
• the server and channel you picked;
• your announcement (message, embed and thumbnail image), and the name and avatar you chose for the announcement;
• the ID and token of the Castwide announcements webhook, if you use a custom name and avatar.

The service passes these straight to Discord. It keeps nothing. It has no database, its logs are turned off, and it doesn't keep request contents. To limit requests to Discord, it remembers your server permission (server ID, owner and permission flags) for 60 seconds, filed under a one-way scrambled code (SHA-256 hash) of your token, and counts requests per minute under a hash of your IP address, in memory only.

If you paste your own Discord webhook link instead, Castwide posts straight to Discord and the bot service isn't used. To remove access, sign out of Discord in Castwide, remove Castwide in Discord under User Settings > Authorized Apps, and remove the bot from your server if you want.

8. Crash reports

When something goes wrong, Castwide saves a crash report on your PC only. It never uploads it. Before saving, it removes stream keys, tokens, passwords and your Windows user name. A report contains the error, your Castwide and Windows version, CPU and memory size, OBS input details, your destinations (platform names, server addresses, status, never the key), and the recent app log.

If you'd like help, you can choose to upload the file on our crash report page. If you do:

• we keep the file, its name, size and upload time, and the description you type, for 90 days, then they are deleted automatically;
• we don't keep your IP address, set cookies, or ask for your name or email;
• only the Castwide developer can read reports, and only to fix bugs;
• reports are stored with Cloudflare (Workers KV). Cloudflare processes connection data such as IP addresses to deliver and protect the service, under the Cloudflare Privacy Policy;
• to have a report deleted sooner, open a GitHub issue with its reference ID.

9. This website

This website is hosted on Cloudflare Pages. It has no cookies, no analytics, no trackers and no ads, and it doesn't load anything from other websites. Cloudflare handles connection data such as IP addresses to deliver and protect the site. The download buttons send you to the file on GitHub, where GitHub's privacy statement applies.

10. Your choices and rights

Because we don't hold personal data about you, there's normally nothing for us to give you, change or delete. Your data is on your own PC, where you control it. You can:

• sign out of any platform in Castwide, which deletes its token from your PC;
• remove Castwide's access on each platform (see how);
• delete everything Castwide saved (see how);
• ask us to delete a crash report you uploaded.

If you're in the UK or EU, you have rights under data protection law, including the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local authority.

11. Children

Castwide isn't made for children under 13 and doesn't knowingly collect data from anyone. Each streaming platform has its own minimum age.

12. Changes and contact

If this policy changes, we'll update it here and change the date at the top. If a change affects what the app connects to, it will also be in the release notes.

Questions? Open an issue on GitHub. Please don't post stream keys, tokens or other private details there, because GitHub issues are public.