Privacy policy — Jurek Barth

How this website and my apps handle your information, with the details for each app in one place.

1. Scope and contact

This policy covers jurekbarth.de and the apps listed in the contents above, including their current prerelease versions. The app sections explain which information stays on your devices and which information is sent to a service when you choose to use it. An app-specific explanation takes precedence over a general statement below.

The person responsible for this website, Castly, Advanced Screen Share, weissraum, Pudding Pod, and Stay Up Stats is Jurek Barth, Pelkovenstr. 70, 80992 München, Germany. For privacy questions or requests, email post@jurekbarth.de. Further contact information is in the Impressum.

2. Website and hosting

This website is hosted and delivered through Cloudflare. When you visit, Cloudflare processes the technical information needed to deliver and protect the site, such as your IP address, the requested address, request time, browser information, and response status. This processing supports reliable delivery, troubleshooting, and protection against abuse. See Cloudflare’s privacy policy for its handling of network and security information.

The website does not offer accounts or registration and does not include advertising or third-party analytics scripts. Fonts and app artwork are served with the site. Your light or dark appearance choice is saved in your browser’s local storage; you can remove it by clearing site data. Cloudflare may use necessary security cookies when its protection features require them; its cookie documentation explains these features.

Technical information is processed for as long as needed to deliver the website, investigate faults, and address security incidents, subject to the hosting provider’s retention arrangements. It is not used by this website to build an advertising profile.

3. Support, purchases, and diagnostics

Getting in touch

The support form creates an email draft on your device. It does not send the form to a website backend. If you send the draft, the recipient receives your email address, message, app selection, any app/referrer information included in the support link, and the optional device and version details you entered. The same applies to information and attachments you send directly by email.

We use support correspondence to answer your question, resolve problems, and handle your requests. It is retained for as long as needed for that conversation and any related claims or legal obligations, and is then deleted. You can request deletion by contacting the responsible person above. Please avoid sending passwords, access tokens, private podcast feed URLs, or unrelated information about other people.

App Store purchases and Apple services

Apple processes App Store payments and subscriptions. Apps use Apple’s purchase information to unlock or restore the features you bought. We do not receive your payment card details. Apple may make purchase records, aggregate usage information, or diagnostic reports available to developers under its services and your privacy settings. See App Store & Privacy for Apple’s processing and your controls.

System permissions, iCloud, device backups, and diagnostics shared through Apple are also controlled through your Apple account and device settings. Data you choose to share in a support email is covered by the support explanation above, even for an app that otherwise collects no data.

4. Information for each app

Castly — Screen Recorder

Castly does not collect or upload your recordings or personal data. Screen recordings are saved on your Mac as .mov files in the folder you choose. Castly uses Apple’s ScreenCaptureKit to capture the display, window, or region you select. Optional camera, microphone, and system audio are processed on your device and written into your recording. We have no access to that media.

The app contains no analytics or tracking SDKs and its macOS sandbox does not permit network client or server connections. Its one-time watermark-removal purchase is processed by Apple through StoreKit.

Recordings remain until you delete them from their saved location; removing the app does not remove exported recordings. You can revoke screen recording, camera, and microphone permissions in macOS System Settings. Files you choose to send or store in a synced folder are subject to the service you choose.

Advanced Screen Share does not collect data from the app. It processes the screen region you select on your Mac and displays it in a window you can share through your conferencing software. Screen content is not sent to the developer.

If you share that window in a meeting, the conferencing app and the people in the meeting receive the content you choose to show. Their handling of it is governed by that service and your meeting settings. Stop sharing or revoke the app’s screen recording permission in macOS System Settings to end access. Purchases and subscriptions are processed by Apple as described above.

weissraum

weissraum does not collect or upload your photos or personal data. The app and its share extension process the images you choose on your device to add a white frame. Framing presets and app preferences are stored locally, including shared app storage used by the share extension.

Exported photos remain in the photo library or destination you select until you remove them. Apple may download or sync photo-library images according to your iCloud Photos settings. When you choose to share an image with another app or person, that recipient receives the image. You can remove presets and app data, revoke photo permissions in device settings where applicable, and manage exported photos in Photos or the destination app.

Pudding Pod

Playback, downloads, and search

Podcast subscriptions, downloads, playback state, playlists, settings, and device logs are stored on your devices. The app does not include advertising, tracking, analytics, or third-party crash-reporting SDKs. It does not automatically upload device logs or crash reports to us.

Fetching podcasts, artwork, chapters, or transcripts sends requests to the relevant podcast hosts. Directory searches use Podcast Index and Apple’s iTunes Search service. Those services receive the requests and ordinary connection information such as your IP address, and handle them under their own policies. These requests still happen when sync is off.

Optional sync

Sync is optional on each device. With sync off, Pudding does not send library or account data to our sync service. When you enable it, the service stores a random account identifier, a hash of the account secret, random device identifiers and platform information, subscriptions and feed URLs, playlists and their rules, app settings, and each episode’s current playback position and played/starred/deleted state with the time of its last change. The service keeps the current state rather than a complete listening history. The account secret is stored using Apple’s Keychain, including iCloud Keychain when available; a recovery code can restore access.

Private feed URLs may contain access tokens or credentials. If you sync private feeds, those URLs and credentials are readable by the service operator, its database, and its backups. Sync data is encrypted in transit and at rest, but is not end-to-end encrypted against the service operator. The service fetches a private feed using its credentials only at that feed’s host. Each device can turn private-feed sync off; doing so does not erase information already synced. Delete the sync account to remove existing server data.

The sync service uses Fly.io for hosting and Cloudflare for DNS and encrypted backup storage. Backups uploaded to Cloudflare R2 are encrypted before upload. See the Fly.io privacy statement and Cloudflare privacy policy for these providers’ practices.

Optional notifications

If you enable server push notifications, the sync service stores the Apple-issued push token for your device and uses Apple Push Notification service to deliver new-episode notices. Apple receives the push token and notification content, including podcast and episode titles for private feeds as well as public feeds. The private feed URL and its credentials are not included in the notification. You can turn this feature off in the app and manage notification permission in device settings.

Optional AI and MCP access on Mac

“Allow AI Apps to Use Pudding” is off by default. When you enable it, a compatible app you connect through the included MCP helper can read permitted podcast-library and playback information and perform supported actions. The connection to Pudding is local. Information returned to the connected app may then be sent to that app’s AI provider under your settings and its privacy policy. Private feed credentials are redacted, and the integration cannot access account secrets, sync settings, or account deletion. Turn the option off in Pudding to revoke further access; information already received by another app is subject to that provider’s retention and deletion controls.

Retention, export, and deletion

Settings provides “Export My Data” and “Delete Account and Data” for the sync service. Account deletion removes the account’s data from the live database immediately. Encrypted backup copies expire after 14 days and host volume snapshots within 60 days, so deletion is complete in retained backups within 60 days. Accounts with no device contact for 12 months are deleted. Security access logs, where retained, use truncated addresses and are deleted within seven days.

Turning sync off stops further sync on that device; it does not delete the account or remove copies on your other devices. Local downloads, exports, recovery codes, and device or iCloud backups remain under your control and must be removed separately if you no longer want them.

Stay Up Stats

Stay Up Stats does not send your Mac’s information to a developer-operated server. The Mac app reads CPU, memory, network throughput, disk space, battery, thermal state, uptime, and your Mac’s name and model to display them. There is no developer account, analytics, advertising, or tracking service.

If you pair an iPhone, it requests this information directly from your Mac over your own Tailscale network. Tailscale encrypts the connection; you install and control Tailscale separately. Its handling of account and connection information is described in the Tailscale privacy policy.

Pairing details, including Mac names, Tailscale addresses, access tokens, and keep-awake settings, are stored on your devices; access tokens use Keychain storage. You can remove pairings and app data on your devices. “Reset token…” on the Mac revokes existing paired access. Uninstalling an app may leave Keychain entries, exports, or system backups, which you can manage through the relevant app or device controls.

5. Purposes, legal bases, and your choices

Where we process personal data, we use it to provide the functionality you request and deal with related support or contractual matters (Article 6(1)(b) GDPR), keep services secure and reliable and respond to general enquiries (Article 6(1)(f) GDPR), meet applicable legal obligations (Article 6(1)(c) GDPR), or carry out optional processing for which consent is requested (Article 6(1)(a) GDPR). Granting a device permission lets the relevant feature access that resource; it does not by itself mean that its content is sent to us.

We do not sell personal data or use app content for advertising. Service providers processing data on our behalf are required to protect it under appropriate data-protection and confidentiality terms and use it for the contracted service. Recipients you independently choose, such as a conferencing service, email provider, or connected AI app, handle information under their own terms and your settings.

Providers may process information outside your country, including outside the European Economic Area. Where required, transfers use an applicable adequacy decision or contractual safeguards such as the European Commission’s standard contractual clauses. You can ask the responsible contact above for information about the applicable safeguards.

You can disable optional features, revoke device permissions, clear browser storage, and use the app-specific deletion controls described above. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. Removing an app does not necessarily delete saved files, data on other devices, cloud accounts, Keychain entries, or backups.

Subject to the applicable conditions, you can request access, correction, deletion, restriction, or a portable copy of personal data we hold, and object to processing based on legitimate interests. Contact the person responsible for the relevant app above. We may need information sufficient to locate your account or verify a request; we do not need your passwords or private feed credentials. If no data is held by us, we cannot retrieve or erase content stored only on your devices or with an independently chosen service.

You can also complain to a data-protection supervisory authority, including the Bavarian State Office for Data Protection Supervision (BayLDA).

6. Changes to this policy

This policy describes the website and app features currently offered, including prerelease versions. If data handling changes, this page will be updated and the “Last updated” date will change. Where a change requires consent or additional notice, it will be requested or provided before that processing starts.