1. Controller and contact
Streamwrld is the controller responsible for the personal data described in this policy and operates the Streamwrld service. Privacy questions and requests may be sent to allstreamsapp@gmail.com.
- Controller
- Streamwrld
- Country
- Sweden
Launch requirement: add the controller's real legal name and postal address before public launch.
2. Information we process and its source
- Account data provided by you: email address, display name, Supabase user identifier, account timestamps and acceptance records.
- Preferences and activity: followed creators, notification choices and actions needed to provide account features.
- Anonymous product counters: daily aggregated counts of Stream Spin uses, filter selections and Watch now clicks. These counters do not contain IP addresses, account identifiers, cookies or individual browsing histories.
- Device data: followed creators, up to 20 recently viewed creator identifiers and the latest 20 Stream Spin results stored locally in your browser.
- Technical data: IP address, browser or device information, timestamps, requested URLs, security events and diagnostic logs generated when you use the service.
- Messages: information you include in support, privacy, security, copyright or correction requests.
- Public platform data: creator identifiers, channel names, titles, categories, thumbnails, live status and viewer counts received from Twitch, Kick and YouTube APIs. This public catalogue is kept separate from viewer accounts.
We receive data directly from you, automatically from your device and server traffic, from Supabase when it provides authentication, and from the named streaming-platform APIs.
3. Purposes and legal bases
- Provide your account and synchronized follow list: performance of our agreement with you.
- Operate the public discovery, search and ranking service: our legitimate interest in providing and improving Streamwrld, balanced against the limited and public nature of the platform data.
- Secure, prevent abuse, troubleshoot and improve the service: our legitimate interest in running a safe and reliable service.
- Respond to privacy, support and legal requests: performance of our agreement, compliance with legal obligations and legitimate interests in handling claims.
- Optional notifications or marketing: consent where consent is required. You may withdraw it at any time.
4. Services, recipients and disclosure
Supabase provides authentication and PostgreSQL database infrastructure and processes account information for Streamwrld. Our production hosting provider processes requests and limited operational logs so the service can be delivered securely. Twitch, Kick, YouTube and Google provide public platform data or embedded content and receive technical information when their content is loaded. Professional advisers, authorities or security providers may receive limited information where necessary and legally permitted.
Processors may act only under our instructions and appropriate data-protection terms. We do not sell personal data and do not use it for third-party advertising.
5. YouTube API Services
Streamwrld uses YouTube API Services. Use of YouTube features is also governed by the YouTube Terms of Service. Google's handling of information is described in the Google Privacy Policy. Streamwrld does not request or store your YouTube credentials or access private YouTube account data.
6. Retention
- Account data and synchronized preferences are kept while the account is active and removed after a valid deletion request, subject to limited legal, fraud-prevention or security retention.
- Detailed public stream measurements are normally retained for 14 days.
- Aggregated daily ranking history and anonymous product counters are normally retained for up to 365 days.
- YouTube API data is deleted or refreshed within the periods required by YouTube's developer policies and is not kept as current data for longer than 30 days without refresh.
- Local browser history remains until you clear it in Streamwrld or your browser.
- Support and legal correspondence is retained only as long as needed to resolve the request and establish or defend legal claims.
- Operational and security logs are normally retained for no longer than 30 days unless a shorter provider limit applies or longer retention is necessary to investigate abuse, comply with law or establish legal claims.
7. International transfers
Some providers may process data outside Sweden or the EEA. Where required, transfers rely on an adequacy decision, the European Commission's Standard Contractual Clauses together with supplementary safeguards, or another lawful transfer mechanism. You may contact us for information about the safeguard relevant to your data.
8. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction or portability, object to processing based on legitimate interests, and withdraw consent at any time. A request is normally answered within one month. We may request only the additional information reasonably necessary to verify the request. You may also complain to the Swedish Authority for Privacy Protection, IMY.
9. Deletion
Use Delete your account for instructions. We aim to complete verified requests promptly and, where YouTube-related personal data is involved, within 30 days as required by applicable YouTube developer policy.
10. Security, decisions and changes
We use access controls, encrypted connections, restricted server-side credentials and other proportionate safeguards. No internet service can guarantee absolute security. Streamwrld does not use viewer-account data for automated decisions that produce legal or similarly significant effects.
Material policy changes will be announced on the service or by email where appropriate. The effective date above identifies the current version.