Privacy Notice
Updated November 12, 2026
Who operates Play That Back
Storytailor Inc., Kansas, United States, is the publisher. Use Help → Contact Play That Back Support for support or a privacy request. You can also contact support@storytailor.com for legal or privacy matters. This notice covers the Mac application, the iPhone and iPad app, and their purchase and activation service.
What stays on your Mac
Play That Back keeps your videos and recordings in the folder you select. It stores saved reviews, comparisons, optional cover images and report files beside them, and collection, pin and status records in a hidden folder inside it. macOS preferences hold the library, links waiting to be recorded, local file paths, chosen folder, saved video models, model and display preferences. Color looks (LUTs) are saved only where you choose. The app stores a randomly generated installation identifier, your license key, and a signed offline license in macOS Keychain. A hash derived from the installation identifier identifies an activation; it is not a hardware serial number. Play That Back reads the clipboard when you request a paste. Copying a prompt brief places its text, including the selected assessment, on your system clipboard. An exported app or CLI review kit contains the prompt, your notes, and timestamped JPEGs. These stay in the folder you choose until you attach them, ask an external app to read them, or delete them. Imported reports are labeled user-supplied. Your macOS clipboard or cloud-sync settings may make local data available on your other devices. Selecting a cloud-synced or shared folder subjects its contents to that service’s settings. Play That Back has no advertising SDK or behavioral analytics. It does not send Storytailor a copy of your library, videos, API keys, or prompts during normal use. Purchase and license information are processed as described below.
Purchases and activation
Stripe hosts checkout and processes payment details under its privacy policy. Play That Back does not collect full payment-card numbers. Storytailor receives the purchase email, payment and checkout references, amount and currency, and payment/refund/dispute status. Stripe’s privacy policy is available at https://stripe.com/privacy. The licensing service is hosted by Supabase in the United States. It stores the purchase email, purchase references, a one-way hash of the license key, the licensed major version, activation status, hashed installation identifiers, Mac names, and activation dates. Your license key is transmitted over HTTPS to authenticate licensing requests; it is hashed before database storage. After you first activate, we email your license key once to your purchase address so you have a copy. If you ask for your key on our website, we email a new key for the same license to that address, and the address you enter is used only to find your license. Resend delivers these emails and handles their contents under its privacy policy at https://resend.com/legal/privacy-policy. We do not keep any key in our database, only its hash. Signed activation responses are cached in Keychain for offline use. The server’s cryptographic signing key never ships with the application. Once a day, Play That Back checks playthatback.tech (playthatback.xyz before version 1.2) for a newer version, and you can turn that off in Settings → About. The check sends your IP address and the app’s version, and no information about your videos. Network requests reveal your IP address to the hosting providers. Play That Back uses salted hashes of request addresses, and of email addresses entered to find a key, for short-lived abuse limits. Request-limit records expire after two hours and are removed on subsequent requests; hosting providers may retain their own infrastructure logs under their policies. We do not intentionally log license keys or payment credentials. We use purchase and activation information to fulfill the contract, provide support, enforce the two-Mac limit, prevent fraud, process refunds, and meet accounting or legal obligations. License records remain while needed to provide your purchased license; financial records may be retained where law requires. Contact us to request access, correction, or deletion. Deleting records necessary to verify a purchase may prevent license recovery or future activation. We assess requests in light of your rights and applicable retention requirements.
Embedded players and recordings
Play That Back does not download posts or fetch comments or counts. When you open a link to record it, the app loads that platform’s official embedded player (Instagram, TikTok or YouTube’s privacy-enhanced player) inside the app. That platform and the hosts it uses receive network information such as your IP address and the post requested, and may set their own cookies for that session; the app does not keep them after the window closes. For YouTube and TikTok links, the app also asks the platform’s public oEmbed service for the post’s title to name your recording. Recording uses macOS Screen Recording permission, which you grant in System Settings. Only the player inside the Recorder window is recorded, with its sound, and only between your Record and Stop. Recordings are saved in your library folder and are not sent to Storytailor.
Comparisons and color looks
Compare and Match color measure timing and color on your Mac. Matching color to your references or to your own before and after uses no AI and sends nothing. If you type a request to change a look, your words and the look’s current settings go to your chosen AI provider, never frames or video. Compare sends your chosen AI provider the review text and the measurements of the videos in the collection, along with your video’s frames (see below).
Optional AI connections
For optional AI connections, you can approve a connection through OpenRouter in your browser, which gives the app a key billed to your OpenRouter account, or enter a developer API key for the current run or save it in macOS Keychain. This retail version does not offer ChatGPT subscription sign-in. For cloud reviews, the request goes directly to the selected provider: OpenAI, Anthropic, xAI, Google or OpenRouter. OpenRouter passes it on to the company that makes the model you chose, such as OpenAI or Anthropic. API-key verification sends the key to that provider to check the chosen model before any review media is attached. Depending on your choices, the request includes up to 12 timestamped frames, instructions, your notes or transcript, and, for Compare, the saved reviews and measurements of the videos in the collection you picked and the video model you said you used. The optional Gemini full-video path sends a compressed media copy, including available audio. For local reviews, the app contacts an Ollama or LM Studio server on the loopback address of this Mac. Play That Back requests an installed vision model and excludes Ollama models identified as cloud-backed. You control the server and its settings. Desktop apps and command-line tools handle their own authentication and may use cloud processing. Play That Back does not read their login tokens. Connecting or loading models also contacts the provider. Providers process requests under their own terms, account settings and retention policies. They can process data outside your country. Deleting a local report or disconnecting an account does not erase a provider’s records. Use the provider’s privacy controls or contact it about those records. If you add Play That Back to the Claude app on your Mac, Claude can ask Play That Back for your collection names, video titles and dates, saved reviews, the measurements of a video you name, and up to 12 still frames from it, and can ask it to save a comparison or a color look (LUT) to your Mac. Play That Back answers only on this Mac, only when Claude calls one of its tools in your conversation, and asks nothing of its own. Claude sends what it receives to Anthropic under your own Claude account, plan and settings; Storytailor receives none of it. Remove Play That Back in Claude’s settings to stop this.
Retention and your choices
Local files remain until you delete them in Finder. Removing a link you haven’t recorded only removes it from the list. Removing the app can leave media, preferences and Keychain items on the Mac. Use Settings → AI Connections to disconnect an API key or local server. The app removes its stored credential when you disconnect. Apps & CLI lets you unlink the handoff destination. Sign out or revoke access with the provider to end its own session. You can also review authorized apps and permissions with the provider. Temporary media used for recording or full-video review is normally removed after the operation; an interrupted process may leave temporary files. You decide what to record, which provider to use, and what to send for each review or comparison. You can watch saved videos and read existing reports without sending a review. Creating a prompt brief is local until you paste, save to a shared location, or send it elsewhere.
Play That Back for iPhone and iPad
The iPhone and iPad app keeps your looks, photos, videos and saved links on your device, in Photos, and in your iCloud Drive if you connect your Mac’s library. Storytailor does not receive your photos, videos, looks or links. The app has no advertising SDK, behavioral analytics or tracking, and does not ask to track you.
Camera and microphone. The camera records only between your Record and Stop, or when you take a photo, and the microphone records sound with video. Each shot is saved to Photos as the clean original with your look applied as a Photos edit, so Revert in Photos removes it; if you allow Play That Back only to add photos, it saves the original and a copy with your look side by side. Scopes, skin exposure and Match on set measure the picture on the device; the app does not store face data or identify anyone. On iPhone Duo, the outer screen shows the person you are filming the live picture with your look, and lets them pick a look; nothing from it is stored or sent.
Photos. Learn your look asks for access to your Photos library only when you use it. It reads photos you edited in Photos together with the originals Photos keeps, and learns your look from the ones you pick. Check and Match on set read only the photo or video you choose. All of this runs on your iPhone or iPad. The app keeps the look it learned, not your photos. You can change Photos access in Settings at any time.
Saving links and stills from other apps. When you share a post’s link to Play That Back, it saves the link, the time, and an optional note and collection. It does not download the post or read the page. If you share a still image, it is kept on the device to use as a reference for Match on set. Saved links are passed to your Mac’s library, where Play That Back on your Mac can record them as described above.
Your Mac’s library and iCloud Drive. If you connect your Mac, you choose its library folder in iCloud Drive once. The app then reads the looks and shot lists your Mac keeps there, and writes looks you send to your Mac, your shot-list progress, links you saved, and a small file naming the device: its model, the app version and a random identifier made for this installation, not a serial number or your device’s name. Apple stores and syncs these files under your iCloud account and settings, and anyone you share the folder with can see them.
Plus. Plus is a one-time in-app purchase. Apple processes the payment under its own terms and privacy policy, and Storytailor does not receive your payment details or your Apple Account. The app checks your purchase with Apple on the device.
If you own Play That Back for Mac. You can unlock Plus by entering the email address you used to buy the Mac app. The address goes over HTTPS to our licensing service, hosted by Supabase in the United States, which uses it only to find your license. If an active license uses that address, we email a 6-digit code to it through Resend; the code works once, for 15 minutes. We keep only a salted hash of the address you entered and of the code, and delete them a day after the code expires. When you enter the right code, the service records which license unlocked a device, a random identifier the app made for this installation, and the dates, and returns a signed unlock that the app keeps in the device’s Keychain. Your Mac license key is never sent to the phone. Salted hashes of request addresses are used for short-lived abuse limits, as described above.
Retention and your choices. Looks, saved links and stills stay until you delete them. Deleting the app removes its own storage on the device; items saved to Photos and files in iCloud Drive stay. Turn off camera, microphone or Photos access in Settings → Play That Back. To remove an iPhone or iPad unlock from your license, contact us.
Contacting us and privacy rights
The Play That Back Support form uses Google Forms in the publisher’s Workspace. It asks for a topic, reply email and message. It accepts responses without Google sign-in. Google hosts the form and stores submitted responses for Storytailor. Opening the form shares normal browser request information with Google. Nothing from your Play That Back library is attached automatically. Share only what is needed for support. Storytailor uses these to respond, resolve the issue, maintain security and meet legal obligations. It retains support material only as reasonably needed for those purposes. Do not send passwords, API keys or sign-in tokens. Depending on your location and the data Storytailor actually holds, you may request access, correction, deletion, restriction or portability, object to processing, or complain to a relevant authority. Choose Help → Contact Play That Back Support and select Privacy or data request, or use the privacy contact above. We may need information to verify the request. A local-only file is under your control. For content published on Instagram, TikTok or YouTube or stored by an AI provider, contact the applicable service as well.
This website
playthatback.tech sets no cookies and runs no analytics, ads or tracking scripts, so there is nothing to accept. Fonts and images are served from this site, not from third parties.
Our hosting provider keeps standard server logs, such as IP addresses and the pages requested, to deliver and protect the site. Support requests go through a Google Form, which Google processes under its own privacy policy.