Local-first by default.

Recast is an offline-first desktop screen recorder and editor. Recordings live on your machine. We collect the minimum needed to run the website, your account, and — when you opt in — the upcoming Cloud sharing service.

This policy explains what we collect, why we collect it, how long we keep it, and the choices you have.

Recast (“Recast,” “we,” “our”) is an independent product built by Kanak Kholwal. The desktop application is open-source and runs entirely on your device. The website at this domain (the “Site”) and any Recast Cloud service (the “Service”) are operated by us.

For privacy questions or requests, write to try-recast@gmail.com.

The Recast desktop app is local-first. Screen, camera, microphone, and system audio captured during recording stay on your device as .recast project files and exported videos in folders you choose.

The app does not transmit recordings, telemetry, or analytics to us. It only contacts our servers when you explicitly sign in, check for updates, or fetch the public changelog from GitHub.

When you opt in to a third-party storage integration (for example, Google Drive — see below), the app uploads the specific export you choose directly to your account at that provider. The file does not pass through Recast servers.

The desktop app can upload finished exports to your own Google Drive. This is strictly opt-in: you connect your Google account once via Google's OAuth 2.0 Device Authorization flow, and from then on the export dialog can ship the file directly to your Drive.

We request a scoped OAuth permission limited to files Recast itself creates in your Drive (Google's drive.file scope). We can read, update, or delete only the files Recast uploads — never your wider Drive. You can revoke this access at any time from your Google Account's connected apps page.

Upload progress, success state, and the resulting Drive link are processed locally in the app. Recast servers do not see the video, the file bytes, or the Drive link unless you separately choose to share it through Recast Cloud once that service is generally available.

We do not retain a copy of any file you upload to Drive. Per-upload history shown inside the app (file name, status, timestamps) lives in your local Recast app state and is cleared when you remove it or uninstall the app.

Recast Cloud is the optional, hosted sharing layer for recordings. It is not included in the free desktop app, and is currently in development.

Cloud is storage-agnostic by design: the recording's video file lives in whichever storage you point Cloud at. On the free Cloud tier you bring your own — for example Google Drive (shipping in the desktop app today), and Cloudinary or autorender.io in the future. On paid plans you can either use Recast-managed storage or point uploads at your own object-storage bucket (Amazon S3, Cloudflare R2, Azure Blob Storage, Google Cloud Storage).

Regardless of where the video bytes live, Recast Cloud stores the share-link metadata (slug, visibility settings, expiry, password salt where applicable), generated thumbnails and captions, and viewer analytics (anonymous view counts, country-level region, duration watched) tied to that recording. When you bring your own storage, we store only a reference to the file in your storage account — we do not copy or rehost the video bytes.

You can delete a Cloud recording at any time. Deletion removes the share-link, analytics, and any Recast-side caches within 30 days. When the video is stored in your own bucket, deletion at our end does not delete the file from your storage — you remain in control there.

We use a small number of first-party cookies: a session cookie to keep you signed in, a CSRF token, and a theme preference. We do not use third-party advertising or cross-site tracking cookies.

If we add a privacy-respecting product analytics tool in the future (for example, to count page views on the marketing site), we will update this policy and, where required, ask for your consent.

We process personal data under one of: performance of a contract (running your account and the Service), our legitimate interests (security, fraud prevention, product improvement), your consent (marketing emails, optional analytics), and legal obligations (tax, accounting, law enforcement requests).

We rely on a small set of vetted infrastructure providers to run the Site, account system, and (when generally available) Recast Cloud. Separately, you may choose to connect third-party storage providers under your own account — when you do, that provider becomes a recipient of your content under their own terms, not a subprocessor of ours.

We do not sell personal information and we do not share it for cross-context behavioral advertising. We disclose data only to: (a) the subprocessors above, under contract and only to provide the Service; (b) law enforcement when we receive a valid legal request; and (c) a successor entity in the event of a merger, acquisition, or asset sale, in which case we will notify you and you can delete your account before any transfer.

Passwords are stored as salted hashes. Connections to the Site and Cloud are encrypted in transit (TLS). Cloud recordings are encrypted at rest. We limit access to production data to maintainers who need it. No system is perfect; if we ever experience a security incident affecting your data, we will notify you without undue delay.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can exercise most of these rights yourself from your account settings, or by emailing try-recast@gmail.com. We respond within 30 days.

California residents have rights under the CCPA/CPRA, including the right to know, delete, correct, and limit. We do not sell or share personal information as defined under those laws.

Recast is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us data, email us and we will delete it.

We may process and store data in countries other than your own, including the United States. Where required, we use appropriate safeguards — such as Standard Contractual Clauses — for these transfers.

We will update this policy when our practices change. The “Last updated” date at the top will reflect the latest revision. For material changes, we will give you reasonable notice by email or an in-app notice before the change takes effect.

Questions, requests, or concerns: try-recast@gmail.com.