Files
LlamaCasty/PRIVACY.md
T
gramps 0498f7e130 legal: proprietary EULA + privacy policy; GPL terms retired
Licensing posture changes to closed-source commercial software (creator ruling 2026-10-30): free
tier caps output at 720p30, a paid licence unlocks 1080p ($10/month or $400 lifetime).

- LICENSE is now an End User License Agreement: grant, what you may do with your own content,
  no redistribution/reverse engineering, third-party components prevail, updates at publisher
  discretion, warranty and liability limits, termination, governing law.
- ADDITIONAL-TERMS.md deleted — those were GPL §7 terms and have no meaning under the EULA.
- THIRD-PARTY-NOTICES.txt keeps every third-party obligation and drops the GPL header and §6
  source offer; it states plainly that LlamaCasty ships no source.
- PRIVACY.md is new: exactly what is written locally (layout DB, DPAPI token, capped log,
  recordings you choose), what leaves the machine (Google's APIs only, with your account), and the
  standing promises (chat rendered never stored, no telemetry, no ad SDKs).
- README, docs/ai/product.md, docs/ai/decisions.md and TASKS.md record the decision and the
  obligations that still bind (ffmpeg LGPL as a separate process, OFL fonts, CC0 icons, model
  provenance, notices in the About screen).

Deliberately NOT decided here: key issuance/verification and the resolution gate itself. Earlier
GPL builds remain GPL for the versions that shipped under it.
2026-10-30 16:10:38 -07:00

57 lines
2.3 KiB
Markdown

# Privacy Policy — LlamaCasty
Last updated: 30 October 2026
LlamaCasty is a desktop application for streaming to YouTube. It runs entirely
on your computer. This page states exactly what leaves your machine, what is
kept locally, and what is never collected.
## What is stored on your computer
| Data | Where | Why |
|---|---|---|
| Your layout: scenes, sources, assets, settings | `%APPDATA%\ytLlive\ytLlive.db` | So the app looks the same next time |
| YouTube sign-in token | `%APPDATA%\ytLlive\ytLlive.auth`, encrypted with Windows DPAPI (CurrentUser) | So you stay signed in; only your Windows account can decrypt it |
| Diagnostic log | `%APPDATA%\ytLlive\startup.log`, capped at 5 MB | To diagnose crashes you report |
| Recordings | the folder you choose | Your files; the app never uploads them unless you press Publish |
Nothing else is written to disk. There is no analytics service, no crash
reporter, no advertising SDK and no telemetry of any kind.
## What is sent, and to whom
**Google / YouTube** — only when you sign in and go live, using your own
account:
- your channel information, live broadcasts, streams and chat, to run the
stream and show the chat overlay;
- your watch-time and subscriber statistics, to draw the YPP progress and
scoreboard tiles;
- your recording, only if you press Publish.
**Nowhere else.** The app talks to `googleapis.com` and the YouTube ingest
servers. It does not contact the publisher's servers, and no content of yours
is stored on them.
## What is never done
- **Chat is rendered, never stored.** Live chat is drawn on your stream and
held in memory; it is not written to disk, not uploaded, and not analysed.
- No viewer, member or donor information is retained after the session ends.
- No microphone, camera or screen content is transmitted anywhere except the
YouTube stream you start yourself.
## Your controls
Deleting `%APPDATA%\ytLlive` removes every local trace: layout, assets, logs
and the saved sign-in. Signing out inside the app deletes the saved token.
## Children
The app requires a YouTube account, and YouTube requires users to be 13 or
older. The app is not directed at children and collects nothing from anyone.
## Changes and contact
Material changes will be dated in this file. Questions:
llamachile.shop@gmail.com · https://llamacasty.com