PRIVACY
Privacy Policy
How CastKey handles account, device, diagnostic, and Local-First input data.
1. Data we collect
Account email, plan status, device identity, pairing records, security audit events, crash/diagnostic metadata, and website analytics needed to operate the service.
2. Local-First input data
Gameplay video, keystrokes, mouse events, and touch coordinates are routed locally between paired devices and are not uploaded as gameplay recordings.
3. Retention and deletion
Security logs and pairing records are retained only as long as needed for fraud prevention, support, and legal obligations. You may request account deletion through support.
4. Security controls
Sessions, CSRF tokens, device pairing, and server-side entitlements are verified server-side. Do not treat local storage or client UI state as proof of identity.
Questions about this document?
Open support
support@castkey.site