Privacy Policy

Last updated: July 15, 2026

1. What We Collect

• Username / listener name — your choice; a stage name is encouraged. No legal name required.
• Email address — required only to send your one-time passcode (OTP), handle account recovery, and send occasional important notices.
• Password — stored only as an Argon2id hash. We never see or store your actual password.
• Basic technical logs (IP address, timestamps) for security and abuse prevention — see §4.

We do not collect credit cards, government ID, physical address, or phone number.

2. Stage Names & Pseudonymity

You have the right to listen and broadcast under a pseudonym. AudioRealm does not require your real identity and will never force you to verify a legal name. Mandatory real-name policies are a privacy hazard — they're how data brokers and bad actors build profiles on people. Go by your on-air name.

3. How We Use Your Email

Your email is used for OTP verification, account recovery, security alerts, and infrequent service notices. We do not sell, rent, or share it with advertisers, and we don't send marketing spam.

4. Security & the BackDraft WAF

We hold your data to PCI-DSS-level standards even though we don't process cards: TLS encryption in transit, Argon2id password hashing at rest, least-privilege backend access, and audit logging.

In front of the site we run our own Web Application Firewall (WAF), Mcaster1BackDraft. A WAF inspects incoming web traffic and blocks malicious requests before they reach the application. Ours detects and blocks bots and attackers, rate-limits abuse, blocks disposable-email probing, and automatically bans IP addresses that attack our signup or scan for vulnerabilities. To do this it processes technical request data (IP address, user-agent, request path), used strictly for security — never for advertising or profiling.

5. What We Don't Do

• We don't sell or rent your personal data. Ever.
• We don't require your real-world identity.
• We don't run third-party ad-tracking or behavioral profiling.
• We don't collect more than we need to operate your account.

6. Cookies We Use

We use functional cookies only — no advertising or third-party tracking:

• Session cookie (PHPSESSID) — keeps you signed in and protects forms against CSRF. Cleared when your session ends.
• bd_botproof — set by our BackDraft WAF once you pass the "Verifying you are human" check, so you aren't re-challenged for a short window. Security only.

These are strictly-necessary/security cookies the site needs to function. We do not use cookies for advertising, cross-site tracking, or data sale.

7. Your Choices & Contact

You can update or delete your account at any time. For privacy questions or data requests, contact admin@casterclub.ai.

New here? Our Signup Tips explain all of this in plain language.