Privacy Policy

Cascade is a Chrome extension that batches generations on Google Flow. It runs primarily on your own machine. We do not sell, share, or transfer user data to third parties for any purpose unrelated to operating the product.

Inside the Chrome extension:

• Google Flow authentication headers — captured from your active labs.google/flow session so the extension can replay API calls on your behalf. These never leave your device.
• Your generations — prompts, images, videos, and derived metadata. Stored locally in IndexedDB. Files are downloaded to the folder you choose.
• Extension settings — model preferences, concurrency limits, naming patterns, theme. Stored in chrome.storage.local.
• License key — the Whop-issued key you paste in the Account tab. Stored locally; sent to our license-validation backend (see below) to confirm your subscription is active.

On this website (cascade.ytba.com):

• Account info — your email address and, if you use Google sign-in, your Google profile name and picture. Provided by Firebase Authentication.
• License binding — the license key you link to your account, plus subscription status and expiry, stored in Firestore.

• No analytics, telemetry, or crash reporting.
• No browsing history outside labs.google.
• No keystroke logging or click tracking.
• No personal information beyond what you explicitly enter.
• No payment card data — billing is handled by Whop, not us.

The Cascade extension makes network requests to:

• Google Flow servers (labs.google, googleapis.com, googleusercontent.com, flow-content.google) — to run your generations. Cascade reuses your existing Flow session; we do not create or authenticate accounts on your behalf.
• Our Cloud Function (hosted on Google Cloud) — only to verify the license key you typed is active. We send the key + a device identifier. We receive subscription status.
• unpkg.com — to download FFmpeg.wasm binaries used for video assembly. No user data is sent; cached after first use.
• huggingface.co — to download the Whisper model used for optional local transcription. No user data is sent; cached after first use.

We rely on these processors strictly to operate the product:

• Firebase (Google) — authentication + database for the website's account features.
• Whop — payment processing and subscription management. We never see your card details.

We do not sell user data. We do not transfer user data to third parties outside the approved use cases above. We do not use user data to determine creditworthiness or for lending purposes.

You can delete your locally stored data anytime by removing the extension or clearing site data in Chrome. You can delete your account and all associated cloud data by emailing support@cascade.ytba.com. We respond within 30 days.

Cascade is not intended for users under 13. We do not knowingly collect data from children.

If we materially change this policy, we will update the date at the top and notify active subscribers via email.

Questions? Email support@cascade.ytba.com.