Privacy Notice

Retail · Version 2026-11-02.retail2 · November 2, 2026

Who operates Play That Back

Storytailor Inc., Kansas, United States, is the publisher. Use Help → Contact Play That Back Support for support or a privacy request. You can also contact support@storytailor.com for legal or privacy matters. This notice covers the Mac application and its purchase and activation service.

What stays on your Mac

Play That Back keeps your videos and recordings in the folder you select. It stores saved reviews, comparisons, optional cover images and report files beside them, and collection, pin and status records in a hidden folder inside it. macOS preferences hold the library, links waiting to be recorded, local file paths, chosen folder, saved video models, model and display preferences. Colour looks (LUTs) are saved only where you choose. The app stores a randomly generated installation identifier, your license key, and a signed offline license in macOS Keychain. A hash derived from the installation identifier identifies an activation; it is not a hardware serial number. Play That Back reads the clipboard when you request a paste. Copying a prompt brief places its text, including the selected assessment, on your system clipboard. An exported app or CLI review kit contains the prompt, your notes, and timestamped JPEGs. These stay in the folder you choose until you attach them, ask an external app to read them, or delete them. Imported reports are labeled user-supplied. Your macOS clipboard or cloud-sync settings may make local data available on your other devices. Selecting a cloud-synced or shared folder subjects its contents to that service’s settings. Play That Back has no advertising SDK or behavioral analytics. It does not send Storytailor a copy of your library, videos, API keys, or prompts during normal use. Purchase and license information are processed as described below.

Purchases and activation

Stripe hosts checkout and processes payment details under its privacy policy. Play That Back does not collect full payment-card numbers. Storytailor receives the purchase email, payment and checkout references, amount and currency, and payment/refund/dispute status. Stripe’s privacy policy is available at https://stripe.com/privacy. The licensing service is hosted by Supabase in the United States. It stores the purchase email, purchase references, a one-way hash of the license key, the licensed major version, activation status, hashed installation identifiers, Mac names, and activation dates. Your license key is transmitted over HTTPS to authenticate licensing requests; it is hashed before database storage. Signed activation responses are cached in Keychain for offline use. The server’s cryptographic signing key never ships with the application. Network requests reveal your IP address to the hosting providers. Play That Back uses salted hashes of request addresses for short-lived abuse limits. Request-limit records expire after two hours and are removed on subsequent requests; hosting providers may retain their own infrastructure logs under their policies. We do not intentionally log license keys or payment credentials. We use purchase and activation information to fulfill the contract, provide support, enforce the two-Mac limit, prevent fraud, process refunds, and meet accounting or legal obligations. License records remain while needed to provide your purchased license; financial records may be retained where law requires. Contact us to request access, correction, or deletion. Deleting records necessary to verify a purchase may prevent license recovery or future activation. We assess requests in light of your rights and applicable retention requirements.

Embedded players and recordings

Play That Back does not download posts or fetch comments or counts. When you open a link to record it, the app loads that platform’s official embedded player (Instagram, TikTok or YouTube’s privacy-enhanced player) inside the app. That platform and the hosts it uses receive network information such as your IP address and the post requested, and may set their own cookies for that session; the app does not keep them after the window closes. For YouTube and TikTok links, the app also asks the platform’s public oEmbed service for the post’s title to name your recording. Recording uses macOS Screen Recording permission, which you grant in System Settings. Only the player inside the Recorder window is recorded, with its sound, and only between your Record and Stop. Recordings are saved in your library folder and are not sent to Storytailor.

Comparisons and colour looks

Compare and Make a look measure timing and colour on your Mac. Make a look uses no AI and sends nothing. Compare sends your chosen AI provider the review text and the measurements of the videos in the collection, along with your video’s frames (see below).

Optional AI connections

For optional AI connections, you can enter a developer API key for the current run or save it in macOS Keychain. This retail version does not offer ChatGPT subscription sign-in. For cloud reviews, the request goes directly to the selected provider: OpenAI, Anthropic, xAI or Google. API-key verification sends the key to that provider to check the chosen model before any review media is attached. Depending on your choices, the request includes up to 12 timestamped frames, instructions, your notes or transcript, and, for Compare, the saved reviews and measurements of the videos in the collection you picked and the video model you said you used. The optional Gemini full-video path sends a compressed media copy, including available audio. For local reviews, the app contacts an Ollama or LM Studio server on the loopback address of this Mac. Play That Back requests an installed vision model and excludes Ollama models identified as cloud-backed. You control the server and its settings. Desktop apps and command-line tools handle their own authentication and may use cloud processing. Play That Back does not read their login tokens. Connecting or loading models also contacts the provider. Providers process requests under their own terms, account settings and retention policies. They can process data outside your country. Deleting a local report or disconnecting an account does not erase a provider’s records. Use the provider’s privacy controls or contact it about those records.

Retention and your choices

Local files remain until you delete them in Finder. Removing a link you haven’t recorded only removes it from the list. Removing the app can leave media, preferences and Keychain items on the Mac. Use Settings → AI Connections to disconnect an API key or local server. The app removes its stored credential when you disconnect. Apps & CLI lets you unlink the handoff destination. Sign out or revoke access with the provider to end its own session. You can also review authorized apps and permissions with the provider. Temporary media used for recording or full-video review is normally removed after the operation; an interrupted process may leave temporary files. You decide what to record, which provider to use, and what to send for each review or comparison. You can watch saved videos and read existing reports without sending a review. Creating a prompt brief is local until you paste, save to a shared location, or send it elsewhere.

Contacting us and privacy rights

The Play That Back Support form uses Google Forms in the publisher’s Workspace. It asks for a topic, reply email and message. It accepts responses without Google sign-in. Google hosts the form and stores submitted responses for Storytailor. Opening the form shares normal browser request information with Google. Nothing from your Play That Back library is attached automatically. Share only what is needed for support. Storytailor uses these to respond, resolve the issue, maintain security and meet legal obligations. It retains support material only as reasonably needed for those purposes. Do not send passwords, API keys or sign-in tokens. Depending on your location and the data Storytailor actually holds, you may request access, correction, deletion, restriction or portability, object to processing, or complain to a relevant authority. Choose Help → Contact Play That Back Support and select Privacy or data request, or use the privacy contact above. We may need information to verify the request. A local-only file is under your control. For content published on Instagram, TikTok or YouTube or stored by an AI provider, contact the applicable service as well.

This website

playthatback.xyz sets no cookies and runs no analytics, ads or tracking scripts, so there is nothing to accept. Fonts and images are served from this site, not from third parties.

Our hosting provider keeps standard server logs, such as IP addresses and the pages requested, to deliver and protect the site. Support requests go through a Google Form, which Google processes under its own privacy policy.