Pribatutasuna

The short version: your material is read once to make your page and then discarded; the page lives for two hours at its link, or in your account until you delete it if you signed in; we keep no profile and never see your card.

Last updated 20 September 2026.

Who is responsible

The controller is Castomo prosta spółka akcyjna, ul. Powstańców Śląskich 5/212, 53-332 Wrocław, Poland (KRS 0001188843). Write to hello@castomo.com.

What we process, and why

• The text you paste and the files you drop. They are uploaded to our server, the readable text is extracted in memory, and that text (and any pictures) is sent to an AI model provider to write your page. We do this because it is the service. Your files are not written to disk and are discarded the moment the page exists.
• The finished page. Kept on our server for two hours so you can reload, download or open it in a new tab. Then it is deleted. A page contains whatever your material contained, so treat its link as you would the material.
• Your saved pages, if you signed in. A page made while you are signed in is also saved to your account — the page, its title, the model and the date — until you delete it, up to the newest 200. You can open, download and delete them from the site.
• Your account, if you signed in. Sign-in happens at accounts.castomo.com (our own service). From the token it gives your browser we take a random account id and your e-mail address; the id is stored beside your saved pages and your packs, the e-mail is shown to you and stored nowhere here.
• Your network address. Used for one hour, in memory, to count free pages per person. It is not written down and not linked to anything else.
• Your language, theme and consent choice. Stored in your own browser only.
• A PRO pack. If you buy one, our server keeps the payment id, the amount, the date, how many pages are left and — if you were signed in — your account id, for 90 days or until the pack is used up. Without an account your browser keeps a random pack code instead. That is the whole record of the purchase on our side; the card details live with Stripe.

Who else sees your material

The text of your material is sent to OpenRouter (OpenRouter, Inc., USA), which routes it to the model that writes your page — on the free tier one of several open models (NVIDIA Nemotron, MiniMax, Z.ai GLM), on PRO one of GPT‑5.6 Sol (OpenAI), Claude Fable 5.1 (Anthropic) or Grok 4.6 (xAI), with Gemini (Google) as the model of last resort when all three are busy. Those providers process the request under their own terms; we send them nothing that identifies you.

To pick photographs for your page we send a handful of keywords taken from your material — single words, never the text — to our own media library at media.castomapi.com. Every finished page is then opened once in a browser on our own server to check that it works; nothing leaves for that.

Payments are handled entirely by Stripe through our payment service; we never see your card number.

Nothing you give us is used to train a model by us. We cannot make that promise on behalf of a model provider; if that matters, use the free tier for material you would not want in a training set, and do not upload what you may not share.

Cookies

None on this site. Your theme, language, consent and pack code live in your browser's local storage. Signing in sets a session cookie on accounts.castomo.com, our sign-in service, not here. Visits are counted by our own analytics, which stores nothing on your device (see "Analytics: Observer"); the chat assistant saves a visitor code and a few settings in your browser's local storage only after you open it (see "Chat assistant").

Scripts and other servers

Scripts only from this site and castomo's own servers. Visits are counted by our own analytics, which stores nothing on your device. The typeface is served from this domain along with everything else. Until 6 September 2026 the typeface came from Google's font service, which meant your browser contacted Google to fetch it; we now host the files ourselves and that request is gone.

Besides this one, your browser talks to these servers, all run by Castomo: our own API at api.boring2exciting.com (when you generate a page, and when the studio loads to ask which free pages and packs are available; what it receives is described above), accounts.castomo.com (to sign in), media.castomapi.com (the photographs in a generated page, when you view it), observer.castomo.com (our analytics, on every page) and chat.castomapi.com (the chat button, on every page).

Analytics: Observer

We count visits with Observer, our own analytics, run by Castomo on its own server in Frankfurt. It sets no cookies and stores nothing on your device. For each page you open it records: the page address (of any query only campaign tags such as utm_source) and title, the site you came from, your browser, device type and operating system, your browser language, a rough screen-size bracket, how long the page was actively open, how fast it loaded, any script error, and — as totals — where people click and how far they scroll. It takes no recording of your screen and reads no keystrokes.

Your IP address is used for a moment, together with your browser, to make a code that changes every day and is different on every site. The IP address itself is never stored, and the server that delivers Observer keeps no access log. The code lets us count one visitor once a day, and it cannot be used to link a visit to visits on other days or other sites. Raw records are deleted after 24 hours; only totals are kept, for 25 months. If your browser sends Do Not Track or Global Privacy Control, Observer sends no visit data.

We do this because we have a legitimate interest in knowing how our pages are used (Article 6(1)(f) GDPR). You can object at any time: hello@castomo.com.

Chat assistant

Every page has a chat button run by Castomo (chat.castomapi.com, servers in Amsterdam). Until you open the chat, the button stores nothing on your device and starts no conversation; loading the page only fetches the button's settings from our chat server, which, like any web server, records the request, including your IP address, in a rotating log that is overwritten as it fills.

When you open the chat, the chat window saves a visitor code and a few settings in your browser's local storage, and our server creates a visitor record: the code (kept only as a hash), a hash of your IP address, your browser type, language and time zone, the page you were on and where you came from, and everything you type — plus your name, e-mail or phone number only if you give them.

The assistant is an AI, and it says so. Its answers are written by AI models run by OpenRouter (Google Gemini) and OpenAI, which receive what you type in order to reply; after a conversation ends the same text is sent to a model again to write a short summary. A person on our team can read the conversation and take it over. These providers may process data outside the European Economic Area.

We keep a visitor's record and conversations until 180 days after their last visit, then delete them. You can ask us to delete them sooner: hello@castomo.com. Please do not type anything you do not want us to have.

Your rights

Under the GDPR you may ask what we hold about you, ask for it to be corrected or deleted, object to processing, withdraw your consent at any time (untick the box in the studio, or write to us), and complain to a supervisory authority (in Poland, the President of the Personal Data Protection Office, UODO). Without an account the honest answer to most requests is that nothing is held — a page is deleted after two hours whether or not you ask. With an account, delete your pages from the site, and write to us to have the account record and any pack removed.

Legal basis

Your consent (Article 6(1)(a) GDPR), given by ticking the box in the studio, and performing the service you asked for (Article 6(1)(b)) for your material and your page; our legitimate interest in keeping the free tier available to everyone (Article 6(1)(f)) for the hourly count; and the contract of sale for a PRO pack.

Changes

If this page changes, the date at the top changes with it.