Privacy Policy
Last updated: October 11, 2026
1. Introduction
Castream ('we', 'our', or 'us') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our live streaming platform, including our website at castream.io and the Castream mobile apps for iOS and Android.
2. Information We Collect
We collect information you provide directly to us, such as when you create an account, use our services, or contact us, as well as information collected automatically when you use them. This may include:
- Personal identifiers (name, email address, phone number)
- Account credentials and authentication information
- Stream content and metadata
- Device information (such as device model, operating system and app version) and IP addresses
- Usage data, such as the pages and screens you view and the features you use
- Acquisition data: how you found Castream, for example the website, search engine or campaign link that brought you, an install identifier in the mobile apps, and your answer if you tell us in the app
- Billing and subscription information from our payment providers (we do not store full card numbers)
- Social media account information when you connect platforms
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our streaming services
- Process transactions and manage your account
- Send you technical notices and support messages
- Communicate with you about products, services, and promotional offers, and measure whether our emails and notifications are opened or clicked
- Analyze usage patterns and measure which channels bring new users, so we can optimize our platform
- Ensure platform security and prevent fraud
4. Legal Bases (EEA, United Kingdom and Switzerland)
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases:
- Contract: to provide the services you request and to manage your account and subscription
- Consent: for analytics cookies and similar technologies on our website, and wherever else we ask for it. You can withdraw your consent at any time
- Legitimate interests: to secure our platform, prevent fraud, understand how signed-in users use our product, and send service updates, balanced against your rights and interests
- Legal obligation: where the law requires us to keep or disclose information
5. Information Sharing and Disclosure
We may share your information in the following circumstances:
- With connected social media platforms when you stream
- With service providers who assist in operating our platform, including providers located in other countries such as the United States, under appropriate safeguards
- When required by law or legal process
- To protect our rights, property, or safety
- In connection with a business transfer or acquisition
- With your consent or at your direction
6. Cookies, Analytics and Similar Technologies
We use cookies and similar technologies (such as local storage and mobile app identifiers) to keep you signed in, remember your choices, and understand how our website and apps are used. On our website, if you are in the European Economic Area, the United Kingdom or Switzerland, analytics cookies and similar storage are only used after you accept them in the cookie banner; elsewhere they are enabled by default. The main items are:
- castream_consent: remembers your cookie choice (180 days; necessary)
- castream_aid: a random anonymous identifier that links your visits and shows which sources bring users (1 year; analytics; needs your consent in the EEA, UK and Switzerland)
- castream_utm: stored in your browser to remember the campaign or website that referred you (up to 90 days; analytics; needs your consent in the EEA, UK and Switzerland)
- Google Analytics cookies (_ga and _ga_*): website traffic measurement by Google (up to 2 years; analytics; need your consent in the EEA, UK and Switzerland)
- Mixpanel browser storage: product analytics (analytics; needs your consent in the EEA, UK and Switzerland)
- Sign-in and security cookies and storage: keep you signed in and protect your account (necessary)
- castream-partner-referral: remembers a partner referral link for 90 days so the partner can be credited (only if you followed a partner link)
Your choice applies to this browser, and you can change it at any time with 'Cookie settings' in the website footer or in your browser settings. If you decline analytics, Google Analytics may still receive limited signals without cookies, such as the fact that a page was viewed, with no identifier stored on your device. Vercel Analytics, which we use for aggregate page-view counts, does not use cookies. The mobile apps use an install identifier and Google Firebase services (such as crash reporting) to keep the apps working and to measure installs; they do not use the website cookie banner.
7. Third-Party Services
Our platform integrates with various third-party services including:
- Social media and streaming platforms you connect (such as YouTube, Twitch and Facebook)
- Analytics and measurement: Google Analytics and Firebase (Google), Mixpanel, Vercel Analytics
- Payments and subscriptions: Stripe (website), Apple App Store and Google Play (apps), RevenueCat
- Email and notifications: ZeptoMail (Zoho) and Firebase Cloud Messaging
- Cloud storage, security and hosting providers (such as Vercel and Cloudflare)
8. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.
9. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information. To exercise them, contact us at the address below.
- Access and receive a copy of your personal data
- Rectify inaccurate or incomplete information
- Delete your personal data under certain circumstances
- Restrict or object to certain processing activities, including direct marketing
- Data portability rights
- Withdraw consent where processing is based on consent
- Lodge a complaint with your local data protection authority
10. Data Retention
We retain your personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. When we no longer need your information, we will securely delete or anonymize it. In particular, analytics events from visitors who are not signed in and cannot be linked to an account are deleted after 90 days, and Google Analytics keeps event data for 14 months.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the 'Last updated' date.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Email: privacy@castream.io
