Privacy
Privacy notice
Last updated October 25, 2026
This notice explains what CohostCast records when you visit cohostcast.com, sign in, or write to us, why we record it, how long we keep it, and how to ask for it to be deleted. We collect what we need to run and secure the site, and we do not sell it.
Who we are
CohostCast operates this website. For anything about your personal information, write to [email protected] or call 510-560-5429.
What we collect, and why
When you visit the site
Our server keeps a log of the requests it answers. For each request it records:
- your IP address;
- the date and time, the page or file requested, and what the server sent back;
- the page that linked you here, if your browser says;
- what your browser tells us about itself — its name and version, your operating system, your language setting, and whether you have set a privacy signal such as Do Not Track or Global Privacy Control;
- your approximate location — the country, and sometimes the region and city — which Cloudflare, the network in front of our site, works out from your IP address.
Once per page view your browser also tells us your screen and window size, your timezone, whether you prefer a light or dark display, your connection type, and how long the page took to load.
We use this to keep the site secure, to find and fix problems, and to understand how the site is used. The request log does not record who is signed in, does not use cookies, and gives your browser no identifier to follow you from one visit to the next. Passwords, sign-in tokens, one-time codes and email addresses in links are never written to it, and nor is your precise location: Cloudflare can work out a postal code and map coordinates from an IP address, and we discard them.
When you create an account or sign in
Sign-in is handled by Firebase Authentication, a service run by Google. If you create an account with an email address and a password, Google stores that password in protected form; we never see it or store it. If you sign in with Google, Google tells us your name, your email address and your profile picture.
We keep a record of account activity: when an account was created, signed in to, or signed out of, together with the email address, the name on the account, the sign-in method, and the IP address, approximate location and browser it came from. We also record sign-in attempts that fail and requests to reset a password, with the email address that was entered. We use these records to protect accounts and to notice attempts to break into them.
When you write to us
The contact form opens your own email app so that you can send your message. When you submit the form we also keep a copy of what you entered — your name, your email address, the subject and the message — along with your IP address, approximate location and browser, so that a message is not lost if the email is never sent. We use it to reply to you. If you email or phone us directly, we keep that correspondence in the same way anyone keeps their mail.
Cookies and storage in your browser
This site does not use advertising cookies. If you sign in, Firebase Authentication keeps a record of your session in your browser's storage so that you stay signed in; signing out removes it.
We use Google Analytics to measure how the site is used. It sets cookies in your browser and sends Google information about your visit, such as the pages you view and your approximate location. It is not started at all if your browser sends Global Privacy Control or Do Not Track. You can also block it with your browser's settings or with Google's opt-out add-on.
Who else handles it
We do not sell your personal information, and we do not share it for advertising. Two companies process it on our behalf so that the site can work:
- Cloudflare carries all traffic between you and our server, and so sees your IP address and the pages you request.
- Google provides sign-in through Firebase Authentication and usage measurement through Google Analytics.
Both operate worldwide, so your information may be processed in the United States and other countries. The logs and messages described above are stored on servers we operate. We may disclose information when the law requires it, or to protect the site and the people who use it.
How long we keep it
- The request log and account activity. These records are deleted automatically after 90 days.
- Messages sent through the contact form. Kept for as long as we need them to deal with your enquiry, and deleted when we no longer do or when you ask.
- Your account. Kept until you ask us to delete it.
Your choices and rights
You can ask us what personal information we hold about you, ask for a copy of it, ask us to correct it, or ask us to delete it — including your account, your messages, and the log entries for your IP address. Depending on where you live, the law may give you further rights, such as objecting to how we use your information or complaining to your local data protection authority.
To use any of these, write to [email protected]. We may need to confirm it is really you before we act, and we will answer as soon as we reasonably can.
Where the law asks us for a reason to hold your information, ours are these: our legitimate interest in running, securing and improving the site; and your own request, when you create an account or write to us.
Security
Traffic to the site is encrypted, and the records described here can be read only by our administrators. No system is perfectly secure, but we work to keep yours safe and to collect no more than we need.
Children
This site is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has given us theirs, tell us and we will delete it.
Changes to this notice
If what we collect or how we use it changes, we will update this page and the date at the top of it.
Contact
Email [email protected]
Phone 510-560-5429