Privacy at Cast House.

What you choose to send

A private inquiry may include your name, reply email, project category, reference type, materials or timing you already know, a short description, consent state, and optional private reference files. Cast House also keeps limited source or referrer information when it is available so Yao can understand how an inquiry found the site.

Private references

Uploaded reference files are stored in private storage for project review. They are not placed in a public gallery, and Cast House does not use a customer's reference or story as public proof without separate permission. Access may be provided to infrastructure providers needed to receive, store, or deliver the inquiry.

Site measurement

Cast House uses Google Analytics and PostHog for privacy-limited aggregate measurement of pages and approved interactions, such as page path, CTA location, service or category, media engagement, file count, and a coarse traffic-source class. Names, email addresses, phone numbers, project descriptions, filenames, file contents, private storage paths, signed file links, and Cast House visitor identifiers are not part of that vendor analytics contract.

PostHog session replay may reproduce how a visitor navigates, scrolls, and clicks through the site. Form entries and private reference previews are excluded from those recordings. These tools may use cookies or local browser storage when enabled. Browser privacy controls can limit that storage. Their processing is also governed by their own policies.

Information we collect automatically

When you visit Cast House, we and our service providers automatically collect certain information using cookies and similar technologies, such as pixels and local storage. This includes your IP address, browser type and settings, device type and operating system, unique device identifiers, referring pages, and information about how you use the site — the pages you view, links you click, and the time spent on each page.

We use this information to operate and secure the site, understand how visitors use it, remember your preferences, and — if you later contact us — to connect your inquiry to your earlier activity so we can serve you better. We may use unique device identifiers to recognize a returning browser as a probable match. This is an estimate for continuity and fraud prevention only and never a definitive identification of you.

Netlify handles the first-party browser routes, and Supabase stores the limited activity records. Your network address and user-agent string are handled briefly at the edge to derive a rotating one-way recurrence signal and coarse device fields; raw IP addresses and raw user agents are not stored in these activity records. Raw URLs, queries, referrers, names, email addresses, phone numbers, descriptions, files, lead IDs, and submission IDs are not activity-event fields.

If the same browser later saves an inquiry, only its verified signed cookie can connect the earlier activity to the separately stored inquiry inside the lead transaction. A probable device match alone never creates that connection. Deleting browser data removes the pseudonymous activity and its lead connection but does not silently delete an inquiry you chose to submit.

We do not sell your personal information. You can manage cookies and device recognition, or delete the information connected to this browser, at any time on our Privacy Settings page. We honor Global Privacy Control (GPC) browser signals.

Fiverr is a separate path

If you choose the Cast House Fiverr gig, Fiverr handles that visit, account, order, payment, and marketplace activity under Fiverr's own terms and privacy policy. Cast House does not control Fiverr's platform records.

Use, sharing, and sale

Cast House uses inquiry information to review and respond to the project, operate the site, protect the service, and maintain necessary business records. Information may be shared with service providers that perform those functions. Cast House does not sell or rent personal information.

Retention and requests

Inquiry information is kept only as long as reasonably needed to respond, handle the project, protect the service, keep necessary business records, or meet legal obligations. You may ask about, correct, or request deletion of the information you submitted. Some records may need to remain where an active project, transaction, security need, or legal duty requires it.

Rotating network recurrence signals are kept for 7 days; unique device identifier observations and probable-device relationships for 30 days; page and interest events for 90 days; and an unlinked device summary, consent choice, and exact cookie for up to 180 days. Activity linked after an inquiry may be kept for up to 24 months after its last activity, while the separate business inquiry follows the needs described above. Short-lived rate-limit records expire within 48 hours after their bucket closes.

Use Privacy Settings to change optional categories or delete data connected to this browser. Global Privacy Control keeps non-essential collection off. For broader access, correction, or deletion questions, email customs@casthouse.art.

Security and contact

Cast House uses access controls and private storage intended to protect inquiry material, but no online system can promise perfect security. For a privacy question or request, email customs@casthouse.art.