Cookie and Browser Storage Notice

Version 2026-10-16.1. Applies from publication. Read with our Privacy Policy.

Your choices

Cookiebot manages optional consent. Use Cookie settings in the footer or account panels to change or withdraw a saved choice. We do not automatically reset or reopen your choice on navigation. Rejecting optional statistics does not block necessary sign-in, account security or workspace features. There is no floating consent widget in Castframe.

Necessary and requested storage

Supabase authentication stores session information in browser storage for sign-in and refresh. Castframe stores requested preferences, settings and creative caches in localStorage and IndexedDB. Cookiebot stores consent choices and related consent evidence. These records serve different purposes; a creative cache is not an analytics cookie. Clearing necessary site data can sign you out or remove unsynced local work/preferences.

The optional OpenAI key you enter is held as text inside the browser-wide smac.settings.v1 localStorage record. It is not isolated between Castframe accounts in that browser. Remove it in Settings on every device and revoke it at OpenAI when appropriate. Never share browser-storage exports containing session tokens or keys.

Optional statistics

With saved statistics consent, Google Analytics G-X14TQ77QPZ measures the public home and support pages on https://castframe.app. The integration excludes sign-in/signup, the workspace, creative content, account and billing pages. It sends fixed canonical page URLs/titles without query strings or referrers. Automatic Enhanced Measurement is off. Google signals and advertising/personalization features are disabled in our integration.

Google Analytics may use _ga and a stream-specific _ga_ cookie to distinguish browser activity. Cookiebot's current Details view supplies detected names, providers and durations; scans may lag a changed release. Analytics identifiers and network/device information are not anonymous. The property has two-month event-data retention and fourteen-month user-data retention with reset on new activity; these do not determine cookie expiry or most aggregate reporting. Withdrawing statistics consent stops further permitted collection; previously collected data follows Google's applicable processing/retention and your rights. We do not activate advertising or social-media tracking.

Other requests and retention

Google-hosted font requests support typography and disclose network information to Google; these are separate from Analytics. Our hosting, authentication, payment and security providers also receive necessary requests when you use their features. A cookie rejection does not prevent those requested or necessary operations.

Authentication lasts according to the session/provider configuration and your sign-out. Local preferences, keys and creative caches remain until replaced or cleared by the feature or browser. Cookiebot remembers choices under its configured consent lifetime. Its published policy states that end-user data is erased on an ongoing basis twelve months after registration, or on termination of the Cookiebot account; individual rights requests remain available. The live Details view is the current detected cookie inventory, not proof of every localStorage/IndexedDB entry or an all-provider erasure deadline. Cookiebot privacy information.

For access, deletion or an incorrect classification, contact privacy@castframe.app. Account deletion cannot clear all your other devices or recall downloaded files.