Privacy Policy
Last updated: 23 October 2026
This policy covers this website (casthru.apps.vensas.de), the update service the Casthru app uses, and the Casthru app itself.
Controller
The controller responsible for processing personal data is
vensas GmbHBahnhofstraße 31
66111 Saarbrücken, Germany
kontakt@vensas.de
Domain
This website runs under the domain vensas.de, which is registered in Germany. The provider is united-domains AG, Gautinger Straße 10, 82319 Starnberg, Germany (privacy policy).
Hosting and server logs
The website, the downloads and the update service are hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (privacy policy).
When you open a page or download a file, your browser sends technical data that the server records in its access log:
- IP address
- Date and time of the request
- The page or file requested, and whether the request succeeded
- Browser and operating system (user agent)
We use this data only to deliver the website and to keep it secure, for example to detect attacks. It is not combined with other data and is deleted regularly. The legal basis is Art. 6 para. 1 lit. f) GDPR, our legitimate interest in operating the website securely.
No cookies, no analytics
This website sets no cookies, uses no analytics or tracking, and loads no content from third parties.
Update checks
The Casthru app checks this website for new versions, once a day unless you turn it off in Settings → General, and whenever you choose Check for Updates. Each check is a request for the update feed (/appcast.xml), and downloading an update is a request for the new version's file. These requests reach the server like any other page request and are recorded in the access log described above. The user agent shows the app and its version. Casthru does not send any other information about you, your Mac or your projects. The legal basis is Art. 6 para. 1 lit. f) GDPR, our legitimate interest in providing security fixes and new versions.
The Casthru app
Casthru records your screen and your clicks on your Mac. Recordings, scripts, voiceovers and exports are stored only on your Mac, in the folders you choose. vensas receives none of this data. The app contains no analytics or tracking.
Some features connect to services you choose to use:
- On-device models. When you download a local model in Settings, Casthru loads it from Hugging Face (privacy policy). Hugging Face receives your IP address and which model files are requested. After the download, scripts and voiceovers are generated on your Mac and nothing leaves it.
- OpenAI. If you choose OpenAI for the script or the voice, Casthru sends what's needed to OpenAI with your own API key. For the script, that's the product name and a description of each step: when it happened, what you clicked, focused or typed into (the element's name and type, which can include text shown on screen, such as a page title, a list entry, or the content of a field you clicked), and any note an AI agent added. Casthru lists every step, and you can delete any of them before generating. For the voice, it's the narration text. Your API key is stored in your Mac's keychain. OpenAI processes this data under your own agreement with OpenAI (privacy policy); vensas has no access to it.
- AI agents. If you allow AI agents in Settings, they connect to Casthru on your Mac. Casthru shares data only with the agents you approve; what an agent does with it is governed by that agent's provider.
If you email us, your message is processed on servers in Germany provided by Microsoft (privacy statement) and used only to answer your request. The legal basis is Art. 6 para. 1 lit. b) or f) GDPR.
Your rights
You have the right to access the personal data we hold about you (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or its processing restricted (Art. 18), to receive it in a portable format (Art. 20), and to object to processing based on our legitimate interests (Art. 21). To exercise these rights, contact kontakt@vensas.de.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for vensas is the Unabhängiges Datenschutzzentrum Saarland (datenschutz.saarland.de).