Legal

Last updated June 2026. Plain-language summaries follow; this is a starting point, not legal advice — review it for your jurisdiction before relying on it commercially.

Terms of service

By creating an account or joining a room you agree to these terms.

The service. Castalong routes live audio/video between guests and a streamer's OBS over WebRTC, and provides a dashboard to manage rooms.
Your account. You're responsible for activity under your account and for keeping your password, API key, room links and Config URLs secret. Anyone with a room's link (or PIN) can join it.
Your content. You and your guests own the audio/video you send. You grant Castalong only the technical permission needed to route it in real time. We don't record or sell it.
Acceptable use. Don't use the service for anything unlawful, infringing, harassing, or that you don't have the rights/consent to broadcast. Get the consent of everyone you bring on camera.
Availability. The service is provided "as is", without warranties. We don't guarantee uninterrupted or error-free operation.
Liability. To the extent permitted by law, Castalong isn't liable for indirect or consequential damages, or for content transmitted by users.
Termination. We may suspend accounts that breach these terms. You can stop using the service and delete your rooms at any time.
Changes. We may update these terms; continued use means you accept the update.

Privacy

What we hold, and what we don't.

Data	Why	Kept
Account email	Sign-in, account identity	Until you delete the account
Password	Sign-in	Stored only as a salted bcrypt hash — never in plain text
Rooms, API key, installs	Run your shows	Until you delete them
Session cookie	Keep you signed in	HttpOnly, same-site; essential, not for tracking
Server logs	Operate & debug	Short-lived, operational

Your audio and video are not recorded or stored. They are routed live between participants through the WebRTC server and discarded — Castalong is a real-time pipe, not a recorder.

No ad/analytics trackers. The only cookie is your session cookie.
No selling data. We don't sell or share personal data with third parties for marketing.
Your rights. You can access, export or delete your account data — contact the operator of your Castalong instance. (For EU users, this covers your GDPR access/erasure rights.)
Where it runs. Castalong is self-hosted by the instance operator; your data lives on their server, not a third-party cloud.

Licensing

Castalong is licensed per seat — one seat per active OBS install (a machine syncing a Config URL). Your dashboard shows seats used against your limit. The Castalong software itself is proprietary; it is built on the open-source components below.

Open-source acknowledgements

Castalong is made possible by, and gratefully credits, these projects:

Project	Role	Licence
LiveKit	WebRTC SFU + Rust/JS SDKs	Apache-2.0
Caddy + caddy-dns/transip	TLS / reverse proxy	Apache-2.0 / MIT
Go, `golang.org/x/crypto`	Control service + bcrypt	BSD-3-Clause
modernc.org/sqlite	Embedded database	BSD-3-Clause
Rust + tokio, ureq, serde, futures	OBS plugin	MIT / Apache-2.0
OBS Studio (libobs)	Plugin host	GPL-2.0 (linked at runtime via published API)