Privacy.

Who operates the service

The service is operated under the name Cast to Your TV. For privacy questions or requests, contact orders@casttoyourtv.com.

Your videos, images, PDFs and subtitles

The local player imports and prepares files on the computer running it. Your phone uploads to that computer; your TV fetches the prepared media over your local network. Our cloud account service does not receive the media or subtitle contents. The player sends a generated file identifier and its duration to authorise a screening; the filename is not included in that request.

Clearing or successfully replacing the current file removes the player’s imported and prepared copies. Your original file is untouched. Use a trusted private network: other people with access to the local player or a media link may be able to control or view the current file.

Account, payment and service information

• Sign-in: Google provides basic profile and email information to Firebase Authentication. The account service stores your Google/Firebase account identifier and email to connect players and show account status.
• Connected players: the service stores hashed pairing and device credentials, expiry times, and which account approved a connection.
• Screenings: generated session and file identifiers, duration, connection times, account association and plan-verification state. These records do not contain a viewing library or the media itself.
• Billing: Stripe customer and subscription references, verified invoice coverage and payment status. Stripe hosts payment entry and keeps payment records; our app does not collect your full card number.
• Operation and support: hosting providers handle request information such as IP addresses and browser details. We use security counters, error information and the messages you send us to protect and support the service.

We use account and plan information to provide the service you request (contract), operational information to maintain security and respond to support (legitimate interests), and billing records where needed to meet legal obligations. We do not sell personal information, run behavioural advertising profiles, or use automated credit scoring. Access checks apply the plan supported by verified billing records.

Service providers

Google/Firebase provide sign-in, hosting and the private account database. Stripe processes purchases and subscription management. They receive the information necessary for those functions and also have their own responsibilities for information they process. See Google’s privacy policy and Stripe’s privacy policy.

The account database is hosted in London. Provider services may process information outside the UK. Contact us for details of the locations and transfer safeguards relevant to your account.

Optional website analytics

Where enabled, we use Google Analytics 4 only after you choose Accept in the cookie preferences. Rejecting does not limit the service. Before acceptance, we do not load the Google analytics tag or send analytics requests. Analytics is limited to this hosted website; the local player and TV receiver are excluded.

We send a known page path and generic events for page visits, opening plans and downloading the companion. We remove URL queries and fragments and do not send your email, filename, account or device identifiers, sign-in credentials or Checkout identifiers. Google may process browser and device information, IP addresses, approximate location and analytics cookie identifiers to provide aggregate reports. We do not enable Google Signals, advertising personalization, automatic click or scroll tracking, or link analytics to your signed-in account.

Use Cookie preferences in the footer to change your choice at any time. Withdrawing disables collection, clears this website’s analytics cookies and reloads the page with your rejection saved. Withdrawal does not undo information previously processed. Analytics cookies are configured to expire after 180 days without automatic extension; the consent preference remains in local browser storage until you change it or clear site data. Google’s processing and international transfers are also described in its privacy policy.

Browser storage and retention

Firebase uses browser storage to maintain sign-in. The local player remembers appearance and network-address choices in your browser. These features support sign-in and your selected settings. Optional analytics uses consent as described above; Free intermissions promote our own plans and no third-party advertising network is connected. Google sign-in and Stripe-hosted pages operate under their own storage notices.

Sign out and use your browser’s site-data controls to remove saved browser information. The local computer separately holds its player connection credential until it expires or you disconnect the account.

Pairing codes expire after 10 minutes, player connections after 30 days and screening authorisations after 12 hours. Temporary cloud records become eligible for automatic deletion at expiry; deletion is asynchronous. Daily database backups are retained for seven days, and point-in-time recovery can preserve prior versions for up to seven days. Deleted information may therefore remain in these recovery copies until they expire; backups are restricted to recovery and are not used for routine account access. Security rate-limit and billing-lock records become eligible after an hour, and webhook delivery records after 90 days. Account and Stripe customer references are retained until deletion is requested and reviewed. Support, operational and billing records are kept only for the purposes described above, including retention where legally required or necessary to resolve a dispute.

Your choices and rights

You can ask for access, correction, deletion, restriction or a portable copy of your personal information, and object to processing based on legitimate interests. Which rights apply depends on the circumstances. Email orders@casttoyourtv.com, preferably from your account email. We may request proportionate information to confirm your identity; do not send passwords, payment-card details or private API keys.

Account deletion is handled by request, rather than an automatic button. Tell us if you also want to cancel a paid subscription: signing out or disconnecting a player does not cancel billing. We normally respond within one calendar month, explain any permitted extension or retained records, and preserve billing information where legally required. Deleting the cloud account does not delete files on your own computer.

If you are unhappy with our response, you can complain to the UK Information Commissioner’s Office. The ICO also explains your right to request deletion.