1. Scope and Company
This policy applies only to the CastBrowser Chrome extension ("Extension"), operated by ROTUNDA TECH LTD ("we", "our", or "us"). The CastBrowser mobile application has a separate mobile App Privacy Policy.
ROTUNDA TECH LTD
2nd Floor College House, 17 King Edwards Road
Ruislip, London, United Kingdom, HA4 7AE
Support: https://castbrowser.tv/support
2. What the Extension Does
The Extension has one purpose: detect compatible, non-DRM video on HTTPS webpages and let you preview it, download a supported direct MP4 or WebM file, or cast compatible media to a Google Cast receiver. It does not host or provide media.
3. Data Processed Locally
Automatic detection runs locally while compatible HTTPS tabs are open so the toolbar badge can show detected items. Depending on the page, the Extension may process:
- the page URL, hostname, title, video elements, poster URLs, and limited media display details;
- media and playlist URLs found in the page, browser resource timing entries, or network responses;
- non-sensitive response metadata used to identify media, including content type, content length, and content range;
- format, resolution, duration, bitrate, frame rate, and file size when available; and
- the item you select and temporary preview or casting-controller state.
The Extension does not read request bodies, cookies, passwords, authentication headers, or payment details. Its network observer does not block, redirect, or modify requests.
4. Instagram Detection
On Instagram, video URLs are not always exposed in normal page elements. A packaged Extension script therefore locally inspects Instagram API responses on eligible Instagram pages and extracts only validated video fields needed for detection: a preferred HTTPS video URL, an optional poster, title, media identifier, duration, dimensions, and playback status. The response inspection occurs in your browser; complete response bodies are not retained or sent to us.
The Extension does not perform this response inspection on direct-message, account, challenge, or OAuth routes. Extracted video and poster URLs must use validated Instagram or Facebook CDN hosts. Instagram detection is subject to the same temporary storage and no-sale rules described below.
5. Chrome Permissions
- HTTPS website access: detects compatible media across HTTPS pages and supports user-requested preview, playlist inspection, and metadata checks. Chrome internal pages and named protected services are excluded.
- webRequest: observes media response URLs and limited response headers used for detection.
- downloads: starts a download only after you click Download for a supported direct file; Chrome displays the Save As prompt.
- storage: keeps detected items and current controller state temporarily in Chrome session storage.
6. Storage and Retention
Detected-media records are stored in chrome.storage.session, separated by tab. They are removed when a tab navigates or closes and do not survive the browser session. Temporary popup controller state is also session-only. Clearing Extension data or uninstalling the Extension removes Extension-held local data.
We do not transmit detected browsing or media records to a CastBrowser database, and we do not retain those records on our servers.
7. Preview, Download, and Google Cast
Preview loads the selected media from its original host in the Extension interface. Download sends the selected direct media URL to Chrome's download manager only after your click. Those requests are visible to the source website or media host and are governed by its terms and privacy policy.
The hosted Cast sender at https://castbrowser.tv/cast-extension is loaded only after you choose Cast. The selected media URL and optional title or poster are passed from the Extension to that sender and your selected receiver so Google Cast can perform your request. They are not submitted to or stored in our application database. Loading the sender page may create ordinary security and access logs, such as IP address, request time, and browser information. The sender also loads the Google Cast SDK, and Google and the selected receiver may process casting data under their own policies.
8. Analytics, Advertising, and Sale of Data
The Extension does not include advertising, analytics, tracking pixels, or an Extension account system. We do not sell Extension data, use it for personalized advertising, transfer it to data brokers, or use it for lending or credit decisions. Mobile-app analytics and advertising services are not used by the Extension.
9. Limited Use
Our use and transfer of information received from Chrome APIs complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use this information only to provide or improve the Extension's disclosed video detection, preview, direct-file download, and casting features, to comply with law, or to protect against security threats.
10. Data Sharing
We do not share detected browsing or media data with the mobile App's analytics, diagnostics, or advertising providers. Data is disclosed only as necessary for an action you request—such as to the source media host, Chrome's download manager, Google Cast, and your selected receiver—or when required by law, to address fraud or security, or in connection with a business transfer subject to this policy.
11. Your Controls and Rights
You can stop automatic page processing by disabling or uninstalling the Extension, restrict its website access in Chrome settings, close or navigate a tab to clear that tab's detections, and clear Extension data in Chrome. You may also contact us to exercise any data-protection rights that apply in your jurisdiction. Because detected-media records are not stored on our servers, we generally cannot identify or retrieve them from a support request.
12. Security and Children
The Extension accepts HTTPS media URLs, validates messages and casting origins, and limits retained information and storage duration. No system is completely secure. The Extension is not directed to children under 13 (or the higher minimum age required locally), and we do not knowingly collect personal information from children through it.
13. Changes and Contact
We may update this policy when the Extension or applicable requirements change. We will post the revised policy here and update the date above. We will provide additional notice when required by law.
Questions or privacy requests can be submitted through our support form.