Privacy

Your media never reaches us. Curacast runs on your hardware and talks to your media server on your network. Your library, what you watch, when you watch it, your channels and your schedules stay on your machine. We have no way to see any of it, because none of it is ever sent anywhere.

The only thing we run is a small licensing service, and this is everything it holds.

What we store

When you buy a licence

• Your email address — to send your licence key and to reach you about the subscription.
• A one-way hash of your licence key. Not the key itself. We genuinely cannot look yours up, which is why the email says to keep it.
• Your plan and status — monthly or yearly, active or lapsed, and dates.
• Stripe customer and subscription identifiers, so a payment can be matched to a licence.

When you activate an installation

• An installation identifier generated by your own copy of Curacast, plus when it was first and last seen. This keeps your licence with the installation you activated.
• A one-way code for your media server. Your copy of Curacast turns your Plex, Jellyfin or Emby server’s own identifier into a code before sending it, so the identifier itself never reaches us. This keeps your licence with the setup you activated.
• Which version of Curacast it runs, so we know when everyone has an update.
• A one-way code for the network address each time an installation is activated or moved to another machine, made with a secret key only our service holds. It lets us notice one licence being moved between many places. The address itself is never stored.

When you start a free trial

• The same installation identifier and media server code as above, and when the trial started and ends, so a free trial is given once per setup.
• A one-way code for the network address the trial was requested from, made the same way, to limit how many trials one place can start.

When your installation checks for updates

• A daily count of installations. Every copy of Curacast, free or paid, regularly asks our licensing service whether a newer version exists. We count how many different installations asked each day. The address a request came from is turned into a one-way code using a random key that we delete at the end of each day. The address itself is never stored, and once that key is gone not even we can tell installations apart or link one day’s count to the next. We also note whether a request came from Curacast or from a web browser.

That is the complete list. No names, no postal addresses, never a network address itself, no record of what you watch.

What we never see

• Your card details. Payment is handled by Link, a Stripe company, acting as merchant of record. Card numbers never touch our systems.
• Your media, library or viewing. As above — it never leaves your network.
• Your media server credentials. Those are stored encrypted on your own machine and are never transmitted to us.

Who else is involved

• Link / Stripe — takes payment, sends receipts, and is the seller of record. They hold the payment details.
• Resend — delivers your licence key email.
• Neon — hosts the licensing database.
• Fly.io — runs the licensing service.
• Cloudflare — serves this website.

This site carries no analytics, no tracking and no advertising cookies. The website does not count its visitors.

We do not sell your information or use it for advertising.

Where it is stored

The licensing service and its database run in the United States, so if you buy from outside it, your information is held there.

Why we are allowed to hold it

• Your email, licence and subscription details — because we need them to provide the licence you bought.
• The installation, media server and network-address codes, and the daily count — because we have a legitimate interest in keeping licences and free trials to their intended use and in knowing how many installations need an update.

How long we keep it

For as long as the licence exists, because a licence that cannot be looked up cannot be supported or moved to new hardware. Ask us to delete your record and we will — note that doing so ends the licence. Daily update-check counts are deleted after 90 days.

Your rights

Wherever you live, you can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. Email [email protected] from the address you bought with and we will action it. There is no form and no wait queue.

If you live in the UK, the EU or anywhere else with a data protection regulator, you can also complain to that regulator.

Changes

If this changes materially we will say so on this page and date it.

Inertia Tech Group LLC · [email protected]