This privacy policy explains how CastCharm handles data when you use the CastCharm server software, the CastCharm Android app, and this website. CastCharm is designed for self-hosting: you run the server yourself, and the Android app connects to the server address that you provide.
CastCharm is self-hosted software. The CastCharm project does not host your podcast library, manage your account, or operate the server that your Android app connects to. The person or organization running a CastCharm server controls the data stored on that server. If you connect the Android app to someone else's CastCharm server, that server operator may be able to access server-side data and logs.
A CastCharm server stores the information needed to manage and play podcasts. Depending on how the server is configured and used, this can include:
This data is stored on the machine, storage volume, or hosting provider chosen by the server operator. It is not transmitted to servers operated by the CastCharm project.
The CastCharm Android app stores information on your device so it can connect to your server, display your library, play episodes, and support offline listening. This can include:
The Android app sends requests to your configured CastCharm server to load podcast data, stream or download episodes, check login status, and sync playback changes. The CastCharm project does not receive this data unless you choose to connect the app to a server operated by the project, which CastCharm does not provide as part of the public app.
CastCharm makes network requests needed for podcast management and playback. Depending on what you do, requests may be made to:
itunes.apple.com, when an Apple Podcasts URL is used to find the underlying RSS feedThese third-party services may receive normal technical information associated with web requests, such as IP address, request time, requested URL, and user-agent information. Their handling of that information is governed by their own privacy policies, not by CastCharm.
The CastCharm project does not:
CastCharm servers may be configured with optional username/password protection. When this is enabled, authentication is handled by the server you connect to. Server-side credential data is stored on that server, not by the CastCharm project. The Android app stores the information it needs to keep the app connected to the configured server.
If you use CastCharm over an unencrypted HTTP connection, information sent between the app and server may be visible to parties on the network path. For privacy and security, use HTTPS for any CastCharm server that is accessible over a network you do not fully control.
The Android app may request or use permissions needed for its podcast features, including:
CastCharm does not request location, contacts, calendar, camera, microphone, SMS, phone, or advertising ID access for its podcast functionality.
Because CastCharm is self-hosted, server-side retention is controlled by the person or organization running the server. To delete server-side data, remove the relevant podcasts, episodes, downloaded files, database records, or CastCharm installation from that server.
On Android, you can clear downloaded episodes in the app settings. You can also remove local app data by using Android's system settings to clear storage for the CastCharm app or by uninstalling the app. Clearing local Android data does not automatically delete data stored on your CastCharm server.
If you run CastCharm on a hosted server, NAS, cloud VM, backup service, reverse proxy, or other infrastructure, those providers may process logs, files, backups, IP addresses, or other technical data according to their own policies. CastCharm does not control those services.
CastCharm is a general-purpose podcast client and server. The CastCharm project does not knowingly collect personal information from children. Because CastCharm is self-hosted, the server operator is responsible for choosing what podcast feeds are added and who is allowed to access the server.
This informational website is a static site. It does not set cookies, run tracking scripts, collect analytics, or identify visitors. If this changes, this policy should be updated before the change is deployed.
If you open an issue, discussion, pull request, or other message on GitHub, the information you provide is handled by GitHub and may be public depending on where you post it. Do not post private server URLs, passwords, tokens, logs containing secrets, or other sensitive information in public issues.
The current version of this policy will be posted on this page. Material changes should be reflected by updating the "Last updated" date above and, where appropriate, by noting the change in the CastCharm repository or release notes.
For privacy questions or corrections to this policy, please open an issue on the GitHub repository.