What stays on your server — and what leaves it.
Castreon runs on your own server. This page lists exactly what it sends us, what we keep and for how long, and the safeguards the product gives you. The binding details are in the privacy policy.
Stays on your server
Channels, sources and their addresses, keys and passwords, recordings and clips, viewer IP addresses, audience statistics and logs. We have no access to any of it.
What your server sends us
About every six hours, over HTTPS, the server checks its license and asks for updates. It sends four things: the license ID, a device ID (a one-way hash of hardware characteristics), the installed version and its IP address.
What we keep, and for how long
Each license check — time, result, version, IP address — is kept for 90 days to detect misuse, then deleted automatically. For as long as the license exists, we keep its ID, the device ID and the time, IP address and version of the last check.
Diagnostic report — only if you send it
On Enterprise you can send a diagnostic report from the panel to support, choosing its sections first. Passwords, user names, keys, tokens, the license file and viewers’ IP addresses are never included; credentials in addresses are removed and public IP addresses are shortened. We delete the report 30 days after receipt. You can also download it, look at it and attach it to a ticket yourself.
Safeguards in the product
- Two-step sign-in, administrator, operator and read-only roles, and an audit log of who changed what.
- Allow-lists for streams and metrics: IP addresses, networks and ranges, IPv4 and IPv6 — for the whole server or per channel.
- Built-in HTTPS with TLS 1.3 and HTTP/2, with Let’s Encrypt or your own certificate.
- Encrypted contribution: SRT with a passphrase, RIST with AES-128 or AES-256.
- HLS AES-128 with a built-in key server on every plan; Widevine, PlayReady and FairPlay DRM and expiring signed links on Enterprise.
- API keys limited to monitoring, channel control or configuration and bound to IP addresses (Enterprise).
- Backup and restore of the whole configuration.
Updates
The installer checks the integrity of the package before installing it. Updates are installed from the panel in one click; if something goes wrong, Castreon returns to the previous version on its own.
castreon.net and your customer account
The website and customer accounts run on a dedicated server in the Netherlands (EU), behind Cloudflare. Card payments go through Stripe: you enter your card details on Stripe’s page and we never receive them. Your customer account supports two-step authentication, and moving a license to another server requires it. Google Analytics and Google Ads run on the public pages only with your consent — never in the customer account.
Privacy policy →Found a security problem?
Write to [email protected] with the details. Please give us time to fix it before making it public.