PRIVACY POLICY
Last Updated: November 19, 2025

Photo Caster - Privacy Policy

OVERVIEW
Photo Caster is a client-side Progressive Web App (PWA) that allows you to cast your Google Photos to Chromecast devices at full resolution. We are committed to protecting your privacy.

DATA COLLECTION BY PHOTO CASTER
Photo Caster does NOT collect, store, or transmit any of your personal data to any external servers. Specifically:

- NO user tracking or analytics
- NO cookies (except for essential OAuth tokens stored locally)
- NO server-side data storage
- NO third-party tracking scripts

HOW THE APP WORKS
Photo Caster runs entirely in your web browser (client-side):

1. Authentication: You authenticate directly with Google using OAuth 2.0. Your access token is stored locally in your browser's localStorage and is never sent to our servers (because we don't have any servers).

2. Photo Access: When you select photos using Google's Photos Picker, the app requests read-only access to only the photos you explicitly select. These photos are accessed directly from Google's servers.

3. Casting: When you cast photos to your Chromecast, the image URLs are sent directly from your browser to your Chromecast device on your local network. We never see or handle your photos.

4. Local Storage: The only data stored locally in your browser is:
   - Your OAuth access token (expires after 1 hour)
   - Token expiry timestamp
   - No photos or personal information is stored

THIRD-PARTY DATA COLLECTION
While Photo Caster itself does not collect your data, you should be aware that:

GOOGLE SERVICES:
- When you authenticate with Google, Google may collect information according to their privacy policy: https://policies.google.com/privacy
- When you use Google Photos Picker API, Google processes your photo selection requests
- Your OAuth access tokens are issued and managed by Google

GOOGLE CAST:
- When you cast to a Chromecast device, Google Cast SDK is used
- Google may collect usage data through the Cast SDK
- Review Google's Cast privacy policy for more information

YOUR RIGHTS
Since we don't collect any data:
- There is no data to access, modify, or delete from our end
- All data is stored locally in your browser
- You can clear all app data by clearing your browser's localStorage
- You can revoke Photo Caster's access to your Google account at any time: https://myaccount.google.com/permissions

SECURITY
- OAuth tokens are stored in your browser's localStorage (client-side only)
- All communication with Google APIs uses HTTPS encryption
- We use OAuth 2.0 with PKCE (Proof Key for Code Exchange) for secure authentication without requiring client secrets
- No passwords are ever handled by Photo Caster

CHILDREN'S PRIVACY
Photo Caster does not knowingly collect any information from children under 13. Since we don't collect any data at all, this app is safe for all ages (with parental supervision for content access).

CHANGES TO THIS POLICY
We may update this privacy policy from time to time. The "Last Updated" date at the top will reflect when changes were made.

CONTACT
If you have questions about this privacy policy or Photo Caster's privacy practices, please open an issue on our GitHub repository.

CONSENT
By using Photo Caster, you acknowledge that:
- You have read and understood this privacy policy
- You understand that we do not collect your data
- You understand that Google may collect data when you use their services
- You consent to Google's data collection as outlined in their privacy policies