Privacy
Last updated: September 2026
There is no account, no sign-up and no app. Nothing you watch, and nothing about what you watch, ever leaves your home.
Exactly one request goes out to the internet: twice a day the device asks whether newer firmware exists. Everything below is a description of that request.
What stays on your network
- Talking to your televisions. CastMute connects to Cast devices on your own Wi-Fi to see whether an ad break is playing and to set the volume. That traffic never leaves your network and is not recorded anywhere.
- What you are watching. The device can see which app is casting and whether an ad is on. It is used to decide whether to mute, and then discarded. It is not stored, not counted and not transmitted.
- Your Wi-Fi password. Entered once during setup and saved on the device itself. It is never sent to us. Note that it is stored unencrypted in the device's own flash memory, so treat a CastMute like any other device holding your network credentials — hold the reset pinhole for five seconds to erase it before giving one away.
- The status page.
http://castmute.localis served by the device, on your network. Nothing on it is reported to us.
What leaves your network
Every twelve hours, give or take half an hour, the device asks this address whether newer firmware is available:
https://www.vroombaby.com/castmute/firmware/manifest.json
That request necessarily carries your public IP address — as any web request does — and the firmware version the device is currently running. Both are written to this server's logs.
If an update is available, the firmware image is downloaded from GitHub Releases, which means GitHub also receives your public IP address. GitHub's handling of that is covered by their own privacy statement.
That is the complete list. There is no other outbound connection, no telemetry, no crash reporting and no analytics of any kind.
Why that is logged at all
Because a firmware update that breaks something has to be noticed. Knowing roughly how many units exist and which versions they are on is what makes it safe to publish an update at all — otherwise a bad release would be discovered only when somebody emailed to complain.
It is not used to build a profile of you, is never sold, and is not shared with anybody. The addresses are not linked to a name, an email address or an account, because none of those exist.
How long it is kept
Server logs containing these addresses are rotated and deleted within ninety days. They are not copied anywhere else beforehand.
Turning it off
Update checking is the one thing that leaves your network, and it is also the only way a fault can be fixed once the device is in your house. If you would rather it never contacted anything, the firmware is open and can be built with the update URL left empty — the device then talks to nothing but your own televisions, and stays on whatever version you flashed.
This website
These pages load nothing from anywhere else. No analytics, no advertising, no tracking pixels, no fonts or scripts from other companies — the styling is part of the page itself, and the only script is a few lines written into the front page to fade sections in as you scroll. They set no cookies to identify you. Ordinary web server request logs apply, on the same ninety-day rotation.
Children
CastMute has no accounts and collects no personal details from anyone, of any age.
Changes
If any of the above changes, this page changes with it, and the date at the top moves.