StreamSpot — Privacy Policy

1. Who is responsible for your data

StreamSpot is operated by an independent individual developer, not a company. The person responsible for processing personal information through StreamSpot is:

• StreamSpot Operator: Independent developer, based in Argentina
• Email: svenandreasclausz@gmail.com

Where applicable law requires a data controller to be identified, this individual is the data controller for personal information processed through the Service.

2. Information we collect

We try to keep StreamSpot relatively simple and collect information that is reasonably necessary to operate the Service, process payments, prevent abuse, support Creators, and maintain the platform.

Depending on how you use StreamSpot, we may collect the categories of information described in the sections below.

3. Information submitted when activating a Spot

• When you activate or contribute to a Spot, you may provide:
• livestream Channel URL; selected category; payment amount; social media handle; email address; payment-related information; and other information required to process the transaction.

The Channel URL and certain associated information may become publicly visible on StreamSpot.

4. Payment information

Payments are processed through a third-party payment provider — currently Polar. StreamSpot does not use PayPal or any other payment processor at this time.

Payment card numbers and other sensitive payment credentials are handled directly by Polar rather than stored by StreamSpot.

Polar may provide StreamSpot with information necessary to confirm and manage a transaction, which may include: payment status; transaction ID; checkout ID; customer email; amount paid; currency; payment date; refund or chargeback information; and other transaction metadata.

Polar processes information according to its own privacy policy and terms.

5. Support payments

If you use StreamSpot to Support a Creator, we may collect or receive information associated with the transaction, such as: email address; Creator supported; Support amount; date and time; payment status; transaction identifiers; display name and message, if provided; and information necessary to maintain Support history.

Some Support activity may be displayed publicly. For example, StreamSpot may display Creator Support rankings, daily Support rankings, platform-wide Top Supporters rankings, Support amounts, supporter display names, and supporter avatars.

If you mark a Support payment as anonymous, your name and avatar will not be shown publicly for that payment. Marking a payment anonymous affects public display only — StreamSpot still retains the underlying transaction record and email address for receipt, accounting, and fraud-prevention purposes.

The exact information displayed publicly may depend on the feature and configuration available at the time.

6. Account and authentication information

StreamSpot uses Supabase Authentication to let you create an account and log in. Supported sign-in providers currently include Twitch and Google, and may include Kick.

If you authenticate using one of these providers, we receive information made available to us by that provider, such as your name, email address, profile image, and a unique account identifier. We do not receive your password for that provider.

We do not sell or advertise using this authentication information; it is used solely to identify your account and operate the Service.

7. Creator information

If you claim or manage a Creator profile, we may collect information necessary to verify and operate your Creator account. This may include: email address; authentication information; profile name; avatar; livestream platform information; Channel URL; Creator profile information; payout information; Support history; ranking information; widget configuration; and communications between you and StreamSpot.

8. Creator verification

Because StreamSpot allows users to submit Channels they do not own, we collect information necessary to verify that a person requesting management access is authorized to manage a Channel.

Verification currently happens through one of two mechanisms: (a) an OAuth-based check that confirms your identity directly with Twitch, YouTube, or Kick; or (b) a bio-token check, where you temporarily paste a StreamSpot-issued code into your channel's public bio, which we verify by reading the channel's public bio through the relevant platform's API. StreamSpot may also perform manual review in individual cases.

This information is used solely or primarily to prevent unauthorized access to Creator functionality.

9. Supporter accounts

StreamSpot allows users to make Support payments without creating an account beforehand. An email address is always collected at checkout for receipt and transaction purposes.

After a purchase, StreamSpot may send an email containing a link that allows you to access your Support history or other features without a full account (a "magic link"). If you subsequently create or authenticate an account, StreamSpot may associate eligible previous transactions with your account where the same email address was used.

If the email address associated with an authenticated account does not match the email address used for a previous transaction, StreamSpot may not automatically associate those transactions.

10. Technical information

When you access StreamSpot, our infrastructure and service providers may automatically process technical information such as: IP address; browser type; operating system; device information; approximate location derived from IP address; referring URL; pages visited; timestamps; request information; error logs; and other standard technical information.

This information may be used for security, fraud prevention, debugging, service operation, rate limiting, and performance monitoring.

11. Cookies and session storage

StreamSpot uses a small number of cookies necessary to operate the Service:

• "streamspot_locale" — remembers your selected display language, stored for one year.
• "ss_supporter_session" — an httpOnly session cookie that lets a Supporter without a full account revisit their Support history, valid for 30 days.
• Standard Supabase Authentication session cookies — used to keep you signed in after logging in with Twitch, Google, or Kick.

StreamSpot does not use advertising or third-party tracking cookies, and does not use browser local storage to store your identity.

Some third-party services integrated into StreamSpot, such as the embedded livestream players, may independently set cookies according to their own policies — see Section 14.

12. Analytics

StreamSpot does not currently use any third-party analytics service. If we introduce analytics in the future, we intend to prefer privacy-focused providers and will update this Privacy Policy accordingly before doing so.

We may display certain aggregate statistics publicly on the Service, such as total active users, page activity, or Support activity. We do not intend for publicly displayed statistics to reveal individual users' private identities.

13. Creator widgets

Creators can install a StreamSpot widget as an OBS browser source or similar overlay. The widget connects to a private, Creator-specific real-time channel and displays live Support alerts as they happen — the supporter's display name (or an anonymous placeholder), the Support amount, and an optional message, based on the display settings the Creator has chosen (show name / show amount / show message).

The widget does not display ranking or leaderboard information. Creators are responsible for determining how and where they use the widget in their livestream setup, and should be mindful that anything shown on the widget may be visible to their stream's audience.

14. Embedded livestreams

StreamSpot may display livestreams using embedded players provided by third-party platforms such as Twitch, YouTube, Kick, or other supported livestream platforms.

When you interact with an embedded player, the relevant third-party platform may process information about your interaction according to its own privacy policy and technical implementation — for example, your IP address, browser information, or information about the embedded content you access.

StreamSpot does not control how third-party platforms process information through their embedded players. Your use of those platforms is also subject to their respective privacy policies and terms.

15. Support messages

If you submit a message together with a Support payment, the message may be stored and displayed to the relevant Creator — in their StreamSpot dashboard's Support Activity feed and, if the Creator enables it, live on their StreamSpot widget overlay.

Support messages should not contain passwords, payment information, private personal information belonging to someone else, malicious links, illegal content, or information belonging to another person without authorization.

StreamSpot may remove or restrict messages that violate our Terms or applicable law.

16. Public information

Certain information on StreamSpot is intentionally public. This may include: Channel name; Channel URL; platform; category; leaderboard position; accumulated Spot amount; ranking; Support totals; Support rankings; Creator profile information; Creator avatar; public display name; and other information explicitly displayed as public.

Public information may be accessible to anyone and may potentially be indexed by search engines. Do not submit information to a public StreamSpot field if you do not want it publicly displayed.

17. Why we use your information

Providing the Service — to create and maintain leaderboard entries, process Spot activations, process Supports, display rankings, provide Creator Management functionality, operate widgets, maintain Support history, and provide other requested functionality.

Payments — to process transactions, confirm payments, calculate Creator balances, manage chargebacks, calculate applicable fees, and facilitate Creator payouts.

Security and fraud prevention — to detect suspicious transactions, prevent payment fraud, prevent manipulation of rankings, detect automated abuse, protect accounts, and secure the Service.

Communications — to send transaction confirmations, payment notifications, Creator notifications, Support-related communications, account or security messages, and other necessary communications.

Legal compliance — to comply with legal obligations, respond to lawful requests, maintain accounting records, resolve disputes, enforce our Terms, and protect our rights and the rights of our users.

18. Legal bases for processing

Where applicable law, including the GDPR, requires a legal basis for processing personal information, StreamSpot may rely on:

• Contract — when processing is necessary to provide a requested Service or complete a transaction.
• Legitimate interests — for security, fraud prevention, platform integrity, and protection of legal rights.
• Legal obligation — when processing is required by law.
• Consent — where applicable and where we rely on consent.

Where processing is based on legitimate interests, you may have the right to object in accordance with applicable law.

19. Who we share information with

We share information with a limited number of service providers that help us operate StreamSpot:

• Payment provider — Polar, which processes payment transactions and related information.
• Hosting and infrastructure providers — including our cloud hosting provider, our Supabase-hosted Postgres database, and related infrastructure services.
• Authentication providers — Twitch, Google, and Kick, when you choose to sign in using one of them.
• Email provider — Resend, which we use to send payment confirmations, Creator notifications, login links, and other account-related messages.

We may also disclose information to professional advisers (lawyers, accountants, auditors) where reasonably necessary, to authorities when required by law or reasonably necessary to protect users or investigate fraud, and as part of a business transfer if StreamSpot is sold, acquired, or transferred.

20. We do not sell personal information

StreamSpot does not sell personal information to data brokers or advertisers. We use a small number of third-party service providers to operate the Service, listed in Section 19, but this does not mean that we sell your personal information.

21. International data transfers

StreamSpot and its service providers (including Supabase for hosting and the database, Polar for payments, Resend for email, and Twitch/Google/Kick for authentication) may process information in countries other than the country where you live, which may include the United States or other jurisdictions depending on each provider's own infrastructure.

Where applicable law requires safeguards for international transfers, we seek to rely on the safeguards each provider offers, which may include standard contractual clauses or other legally recognized transfer mechanisms.

22. Data retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law. Retention periods vary depending on the type of information.

• Transaction information — payment and transaction records are retained for accounting, tax, fraud prevention, dispute resolution, and legal compliance.
• Public leaderboard information — leaderboard records may remain available while relevant to the Service and may remain in historical records or backups after removal.
• Support information — Support transaction records are retained to maintain financial records, calculate Creator payouts, resolve disputes, and maintain Reward Pool calculations.
• Account information — retained while your account remains active and for a reasonable period afterward where necessary for legal, security, or operational purposes.
• Security information — technical and anti-abuse records are retained for as long as reasonably necessary to protect the Service.

23. Data deletion

You may request deletion of personal information that StreamSpot holds about you, subject to applicable legal and operational requirements.

Certain information may need to be retained when necessary for tax or accounting obligations, payment disputes, fraud prevention, chargebacks, legal claims, security, or other legally permitted purposes.

Deleting personal information may not necessarily remove public information that is legally required to remain available or that relates to another user's transaction.

24. Your privacy rights

Depending on where you live and applicable law, you may have rights including: access to personal information; correction of inaccurate information; deletion; restriction of processing; objection to certain processing; data portability; withdrawal of consent where applicable; and the right to lodge a complaint with a relevant data protection authority.

To exercise your rights, contact svenandreasclausz@gmail.com. We may need sufficient information to verify your request and locate the relevant information.

25. Public Creator and Support information

Because StreamSpot is designed around public rankings and Creator discovery, some information may intentionally remain public even after a user requests deletion of other personal information — for example, a historical leaderboard entry necessary to preserve the integrity of rankings or financial records.

Where appropriate and legally required, StreamSpot may anonymize or remove information while preserving non-personal aggregate information.

26. Children's privacy

StreamSpot is not intended for children. We do not knowingly collect personal information from children in violation of applicable law.

If you believe a child has provided personal information to StreamSpot, please contact svenandreasclausz@gmail.com. We will take reasonable steps to investigate and delete information where required.

27. Third-party websites and services

StreamSpot may contain links to third-party websites or services, including livestream platforms, Creator websites, social media platforms, and our payment provider.

StreamSpot does not control the privacy practices of those services. You should review the privacy policy of any third-party service before providing personal information to it.

28. Security

We use reasonable technical and organizational measures designed to protect information processed through StreamSpot. However, no internet service, database, authentication system, or transmission method can be guaranteed to be completely secure.

You acknowledge that using online services involves inherent security risks. If we become aware of a security incident affecting personal information, we will respond according to applicable law.

29. Changes to this Privacy Policy

We may update this Privacy Policy when the Service changes, new features are introduced, our service providers change, legal requirements change, or our data-processing practices change.

The latest version will always be published through the Service and will include the applicable "Last Updated" date. Where required by law, we will provide additional notice of material changes.

30. Contact

If you have questions about this Privacy Policy or wish to exercise a privacy right, contact:

• StreamSpot
• Operator: Independent developer, based in Argentina
• Email: svenandreasclausz@gmail.com