Privacy Notice
Effective date: 2026-09-27 · Last updated: 2026-11-04
Toast Karaoke ("the app", "we") is self-hosted karaoke software that runs on your own computer. This notice explains what personal data we handle, why, for how long, and your rights. The short version: your library and settings stay on your machine. There are no user accounts. Data reaches us only when you buy, activate or trial a licence, search YouTube in the app, contact us, or visit our website.
The data controller is Watcharapong Dokmai (sole proprietor), contactable about privacy at [email protected]. We describe legal bases in GDPR terms; the equivalent bases apply under Thailand's Personal Data Protection Act (PDPA) and similar laws.
1. Data that stays on your device
By design, these never reach us. We cannot see them:
- Your media library — the song files you point the app at and the metadata read from them (title, artist, duration).
- App data — settings, play counts, artwork, queue history, guest nicknames and avatars. Stored on the host machine and in your music folder.
- Guest connections — when guests join from their phones over your local network, their requests go to your machine, not to us.
- YouTube songs — the videos you find or add through the YouTube features (video ID, title, channel name, thumbnail link) are kept on the host machine.
2. Data we hold
There is no sign-up or password. A licence is your email address + licence key. We hold only what the licence and support need:
| When | Data | Why | Legal basis |
|---|---|---|---|
| You buy | Email address; licence key; plan, status and dates; Paddle's transaction/subscription IDs; amount and currency paid | Issue and email your licence key; honour renewals, refunds and disputes | Performance of a contract |
| You activate a licence on a computer | A random device identifier the app creates for that installation, its public key, the computer code (below), the computer's name and operating system (e.g. "Nok-MacBook · macOS 15"), when it was added and last checked in | Keep your licence working; enforce the device limit and one active device at a time; let support tell your computers apart | Performance of a contract; legitimate interests (support) |
| You start a free trial | The device details above, stored against the computer code (below), keyed again on our server; trial start date | One trial per device; prevent repeat trials. If you later buy on the same computer, we note that the trial led to the purchase | Legitimate interests (preventing abuse; understanding sales) |
| You search YouTube in the app | Your search words; your IP address, or on a licensed computer its device identifier, which we only count as a one-way code that changes every day | Pass your search to YouTube with our API key so you need none; share results between users so YouTube's daily limit lasts; apply fair daily limits and prevent abuse | Performance of a contract; legitimate interests (fair use, preventing abuse) |
| Your key email is delivered | Whether the email bounced or was reported as spam, noted on the licence | Make sure you actually receive your key | Performance of a contract |
| You use "Lost your key?" | The email address you type (used to look up and re-send keys already on file; not stored separately) | Re-send your key | Performance of a contract |
| You email us | Your message, email address and anything you choose to include | Answer you and keep a record of support | Performance of a contract; legitimate interests (support records) |
| Any licence request | Your IP address, processed transiently to block abuse (rate limiting); not stored with your licence | Security | Legitimate interests (security) |
We never receive your card details, your song library or what you sing. The YouTube features talk to Google directly (section 3). Any other optional plugin you install sends the requests you make to that plugin's service under its own terms.
The computer code is a one-way code the app makes on your computer from your operating system's own computer identifier (the hardware UUID on macOS, the MachineGuid on Windows). Only the code leaves your computer — never the identifier itself — and it cannot be turned back into it. It is sent only once you start a trial or activate a licence, and then with each online licence check — not merely because you open the app; the app explains this before you start a trial. We use it for two things: to allow one free trial per computer (for this we key it again with a secret before storing it, so deleting the app's files does not start another trial), and to keep a licence working only on the computer it was activated on (we store it with that device and include it in the signed licence file, so a copy of the app's files does not unlock another computer). If the app cannot read the identifier, it sends the random installation identifier instead for trials and skips the computer check.
Do you have to give us this data? Your email address is needed to sell you a licence and deliver its key, and the device details are needed to activate a licence or trial; without them we cannot provide those services. The app's free version needs none of it.
We make no automated decisions that produce legal or similarly significant effects about you. Refusing a second trial on the same device is a technical limit, and you can still buy a plan.
3. Requests the app makes on its own
- Update check — at start-up the desktop app asks our release host (GitHub) whether a newer version exists and, if so, downloads it from there. GitHub sees your IP address and the app version.
- Artwork you fetch — if you choose to download artist artwork from a web address, the app downloads it from that site.
YouTube features
Toast Karaoke uses YouTube API Services to search and play YouTube videos. Searches pass through our server (section 2); playing a video talks to YouTube directly from your computer.
- What Google receives. When you search, the app sends your search words to our server, which sends them to the YouTube Data API with our API key, so Google sees our server, not your computer. When a video plays, YouTube's embedded player loads from YouTube and Google receives what any website embedding YouTube sends: your IP address, browser and device details, and which video is playing. Google handles this under the Google Privacy Policy.
- Cookies and similar technology. YouTube's player may place, read or recognise cookies or similar technology (such as local storage) in the app's player window, and YouTube may show advertising and other content of its own in the player.
- What the app stores. Details of the videos you find or add (video ID, title, channel name, thumbnail link) are kept on the host machine, to show your library and search history and to avoid repeating searches. Search results you did not add are deleted after 30 days; songs you added are refreshed from YouTube (through our server) at least every 30 days, and removed if the video no longer exists.
- What our server keeps. YouTube's results for a search phrase for up to 7 days and a video's details for up to 1 day, shared between users, with nothing that identifies who searched. The daily counters behind the search limits hold only a one-way code that changes every day and are deleted the next day. We do not record who searched for what, or what you watch.
- No Google sign-in. The app never asks you to sign in to Google and does not access your YouTube or Google account.
- Removing it. Delete YouTube songs from your library, or stop using the YouTube features.
4. Our website
- Hosting. https://toastkaraoke.app is hosted by Cloudflare, which processes your IP address and browser details to deliver the pages and protect them from abuse.
- Analytics. We use Cloudflare Web Analytics, which counts page views without cookies and without identifying you; we see only aggregate numbers.
- Prices and checkout. Pages with prices load Paddle's checkout script. To show prices in your currency, Paddle receives your IP address when the page loads; if you start a checkout, Paddle collects your payment details under its own privacy notice.
- Cookies. We do not set cookies or use advertising or tracking tools.
5. Payment processing
Payments are handled by Paddle, our reseller and merchant of record: it processes the transaction, issues invoices, collects applicable taxes, and is responsible for your payment data as a controller in its own right under its own privacy notice. We do not receive or store full card numbers.
6. Sharing
We do not sell or rent your personal data, and we do not share it for advertising. We share it only with:
- service providers that run parts of the service for us and may use it only for that: Cloudflare (hosting of the website, licence server, YouTube search relay and databases; security; website analytics; routing of email sent to our addresses), Resend (sending your licence-key email), GitHub (app downloads and update checks), and our email mailbox provider (storing email you send us);
- Paddle, as merchant of record (section 5);
- Google, which receives your YouTube search words from our server (section 3);
- a successor to our business, if it is transferred, which must keep handling your data under this notice; and
- authorities, where required by law or to protect legal rights.
7. International transfers
Our service providers may process data outside your country, including in the United States, the United Kingdom and the European Union. Where the law requires it (for example, the PDPA or the GDPR), we rely on appropriate safeguards such as the providers' standard contractual clauses or data-processing agreements.
8. How long we keep it
We keep personal data only as long as the table below says. Licence-server periods are enforced automatically.
| Data | How long |
|---|---|
| Licence data (email, key, device details, notes, settings you sync) | While the licence is valid, then 3 years after it ends or was last used, whichever is later — then erased automatically. A Lifetime licence that is still valid is kept for as long as it is valid |
| What remains after erasure — an anonymous record of the sale (plan, amount, currency, dates, Paddle reference) | 5 years after the sale, for tax, accounting and payment disputes — then deleted automatically |
| Trial records (device details, keyed hash, start date) | 2 years after the trial started — then deleted automatically |
| YouTube search cache on our server (search phrases, YouTube's public video details) | 7 days (video details 1 day) — then deleted automatically |
| YouTube daily search counters (one-way daily code of your IP or device identifier) | Deleted the next day |
| Email you send us | Up to 3 years after the matter is closed |
| IP addresses for rate limiting | Not stored by us |
| Website analytics | Aggregate counts only, no personal data |
| Local data on your computer | Until you delete it (Settings → reset/clear, or by removing the app's data folder). We cannot delete it for you |
Paddle, Cloudflare, Resend and GitHub keep their own records under their own retention policies.
9. Your rights
Depending on where you live (for example under Thailand's PDPA, the EU/UK GDPR, or similar laws), you may have the right to access, correct, delete, port, or restrict your personal data, to object to processing based on legitimate interests, and to withdraw consent where we rely on it. To exercise any right, contact [email protected] from the email address on your licence (or otherwise show it is yours); we reply within 30 days. Erasing your data ends the licence, because the email is how it is activated; an active subscription must be cancelled first so that you are not charged for a licence we can no longer serve.
You may also complain to a data-protection authority — in Thailand, the Personal Data Protection Committee (PDPC); in the EU or UK, the authority where you live or work.
10. Children
Toast Karaoke is a general-audience app and is not directed at children under 13 (or the minimum age in your country). We don't knowingly collect their personal data; if you believe a child gave us data, contact us and we will delete it.
11. Security
We use reasonable technical and organisational measures to protect the limited personal data we hold, including access control on our administration tools. No method is perfectly secure; if a breach affects your data, we will notify the authorities and you where the law requires. Data that never leaves your device is not exposed to us at all.
12. Changes
We'll update this notice as the app changes and revise the "Last updated" date. For material changes we will give reasonable notice (for example, by email or in the app) before they take effect.
13. Contact
Watcharapong Dokmai
Privacy: [email protected] · General: [email protected]