தனியுரிமை

The short version: your material is read once to make your page and then discarded; the page lives for two hours at its link, or in your account until you delete it if you signed in; we keep no profile and never see your card.

Last updated 6 September 2026.

Who is responsible

The controller is Castomo prosta spółka akcyjna, ul. Powstańców Śląskich 5/212, 53-332 Wrocław, Poland (KRS 0001188843). Write to hello@castomo.com.

What we process, and why

• The text you paste and the files you drop. They are uploaded to our server, the readable text is extracted in memory, and that text (and any pictures) is sent to an AI model provider to write your page. We do this because it is the service. Your files are not written to disk and are discarded the moment the page exists.
• The finished page. Kept on our server for two hours so you can reload, download or open it in a new tab. Then it is deleted. A page contains whatever your material contained, so treat its link as you would the material.
• Your saved pages, if you signed in. A page made while you are signed in is also saved to your account — the page, its title, the model and the date — until you delete it, up to the newest 200. You can open, download and delete them from the site.
• Your account, if you signed in. Sign-in happens at accounts.castomo.com (our own service). From the token it gives your browser we take a random account id and your e-mail address; the id is stored beside your saved pages and your packs, the e-mail is shown to you and stored nowhere here.
• Your network address. Used for one hour, in memory, to count free pages per person. It is not written down and not linked to anything else.
• Your language, theme and consent choice. Stored in your own browser only.
• A PRO pack. If you buy one, our server keeps the payment id, the amount, the date, how many pages are left and — if you were signed in — your account id, for 90 days or until the pack is used up. Without an account your browser keeps a random pack code instead. That is the whole record of the purchase on our side; the card details live with Stripe.

Who else sees your material

The text of your material is sent to OpenRouter (OpenRouter, Inc., USA), which routes it to the model that writes your page — on the free tier one of several open models (NVIDIA Nemotron, MiniMax, Z.ai GLM), on PRO one of GPT‑5.6 Sol (OpenAI), Claude Fable 5.1 (Anthropic) or Grok 4.6 (xAI), with Gemini (Google) as the model of last resort when all three are busy. Those providers process the request under their own terms; we send them nothing that identifies you.

To pick photographs for your page we send a handful of keywords taken from your material — single words, never the text — to our own media library at media.castomapi.com. Every finished page is then opened once in a browser on our own server to check that it works; nothing leaves for that.

Payments are handled entirely by Stripe through our payment service; we never see your card number.

Nothing you give us is used to train a model by us. We cannot make that promise on behalf of a model provider; if that matters, use the free tier for material you would not want in a training set, and do not upload what you may not share.

Cookies

None on this site. Your theme, language, consent and pack code live in your browser's local storage. Signing in sets a session cookie on accounts.castomo.com, our sign-in service, not here. There is no analytics script and no tracking pixel.

Nothing is loaded from anyone else

These pages fetch nothing from a third party — no fonts, no scripts, no images, no embeds. The typeface is served from this domain along with everything else, so opening a page tells nobody but us that you did. Until 6 September 2026 the typeface came from Google's font service, which meant your browser contacted Google to fetch it; we now host the files ourselves and that request is gone.

The one server your browser talks to besides this one is our own API at api.boring2exciting.com, and only when you actually generate a page. What that receives is described above.

Your rights

Under the GDPR you may ask what we hold about you, ask for it to be corrected or deleted, object to processing, withdraw your consent at any time (untick the box in the studio, or write to us), and complain to a supervisory authority (in Poland, the President of the Personal Data Protection Office, UODO). Without an account the honest answer to most requests is that nothing is held — a page is deleted after two hours whether or not you ask. With an account, delete your pages from the site, and write to us to have the account record and any pack removed.

Legal basis

Your consent (Article 6(1)(a) GDPR), given by ticking the box in the studio, and performing the service you asked for (Article 6(1)(b)) for your material and your page; our legitimate interest in keeping the free tier available to everyone (Article 6(1)(f)) for the hourly count; and the contract of sale for a PRO pack.

Changes

If this page changes, the date at the top changes with it.