Privacy Policy — CCVSP Player for Roku

Last updated: 2026-10-29 · Starting point, not legal advice. Have it reviewed before you publish, especially for the EU/UK or California.

CCVSP Player ("the app") is published by CCVSP (camcast.studio) ("we"). The app turns a Roku device into a digital-signage screen controlled by the business that owns it (the "screen owner") through the CCVSP. This policy explains what the app collects and why.

What the app stores on the device

• The pairing token that links this screen to the screen owner's CCVSP account, the screen's name, and the server address.
• A short-lived copy of the current playlist and a queue of play reports waiting to be sent.

This data stays in the app's storage on the Roku device.

What the app sends to CCVSP (camcast.studio)

The app sends the following so the screen owner can manage the screen and prove which ads were shown:

• Device details: Roku model, Roku OS version, display resolution, app version, and Roku's per-app device identifier (channel client ID).
• Network details: connection type (Wi-Fi or wired), the device's local IP address, and the Wi-Fi network name. The server also sees the public IP address of each request, and works out the screen's approximate city from it (see below).
• Playback reports ("proof of play"): which item was shown, when it started and ended, and whether it played fully, plus playback errors.
• App-open times: when the app was opened and closed, and periodic "still running" signals, used to show screen uptime.

This data belongs to the screen owner's account and is used only to run the service: showing screen status, proof-of-play reports and uptime. We do not use it for advertising profiles.

Preview sample ads downloads a public sample playlist. It sends no device details, playback reports or app-open times.

When someone scans a QR code on a screen

Some ads show a QR code. Scanning one opens a short CCVSP link that sends you on to the advertiser's website. When that link opens, CCVSP records:

• the date and time
• the ad and the screen it was scanned from
• a one-way code of your public IP address (we do not keep the address itself)
• your browser's user-agent, and the phone or computer type worked out from it
• your preferred language
• the page that referred you, if any
• your approximate location (city, region and country) and the name of your network provider, worked out from your IP address at the moment of the scan

The location is looked up on CCVSP's own server, in a database of which networks are used where (by DB-IP). Your IP address is not sent to anyone to do this, and it is not stored after the lookup — only a keyed hash remains for fraud checks. The location is only accurate to about a city, and never to a street or building. The screen owner's reports show the city and network, not your IP address.

The advertiser and the screen owner use this to see how many people responded to an ad and where. We don't use it to identify you, and we don't sell it.

To count each phone once, and to tell real scans apart from automated traffic, the link sets a small cookie (camcast_v) holding a random number. It is only sent back to CCVSP's scan links (never to other pages or other sites), contains nothing about you, and expires after a year. If your browser blocks it, we fall back to a one-way code made from your IP address, browser and date, which changes every day. Clearing your cookies removes it. The advertiser's website has its own privacy policy, which applies once you arrive there.

What we don't do

We don't sell personal information. The app has no viewer accounts, no microphone or camera access, and no third-party analytics or advertising SDKs. The screen does not collect data about people watching it. The only data we keep about viewers is the scan record described above, and only when someone chooses to scan a QR code. The app is not directed to children.

Retention

Playback reports and QR scan records are kept for about 13 months, then deleted automatically. Device and app-open records are kept while the screen is registered. When the screen owner removes the screen, the device's token stops working immediately.

Roku

Roku collects data about device use under its own policy: https://www.roku.com/legal/privacy

Your choices

Screen owners can remove a screen from their dashboard at any time. Removing the app from the Roku (Home → highlight the app → * → Remove) deletes its stored data.

Account holders can:

• Download their data from Account → Download my data (a machine-readable JSON export)
• Close their account from Account → Close my account (erases uploads, playlists and disconnects their TVs)

To request access to or deletion of other data, contact us.

How we protect personal data (GDPR Art. 32)

• Passwords are hashed with bcrypt; sessions use signed httpOnly cookies over HTTPS in production
• Staff admin access expires after 12 hours without re-entering a password, and after 2 hours of idle time
• Visitor IP addresses are stored only as keyed hashes; security and audit logs do the same
• Playback reports, QR scans and security logs expire automatically after about 13 months
• Exports of personal or report data are rate-limited and written to the security log
• Uploads are checked against their real file type; admin and member APIs refuse cross-site requests

If we become aware of a personal data breach that is likely to risk people's rights, we aim to notify the relevant supervisory authority within 72 hours and affected people without undue delay.

Contact

CCVSP · info@eligapris.com · https://camcast.studio