Effective 2026-09-07
Privacy and deletion
Castlint fetches the public HTTPS feed URL you submit to produce a result, then discards the URL and response body. It does not store feed content or download audio.
Usage measurement
The service stores an event name, timestamp, a random browser identifier, HMACed feed and latest-episode identifiers, aggregate check counts, duration, and an operator-test marker. It does not persist the feed URL, feed content, IP address, user agent, or referrer. A transient HMAC of the connecting IP is held in memory for rate limiting and expires after ten minutes. The browser identifier and prior report remain in local storage on your device. Clearing site data deletes them.
Price interest
After a completed feed check, if you explicitly record paid-beta interest, the service stores only your email address, random browser identifier, acknowledgment of the stated $7/month price, and submission time. It does not subscribe you to marketing or take payment.
Retention
Raw validation records are retained for at most 35 days and deleted after the 2026-10-07 experiment review. Aggregate conclusions may be retained without identifiers.