PRIVACY POLICY

StreamDriver (“we”, “us”) provides an interactive platform for live streamers and their viewers: a browser extension that adds an interactive overlay to streams, and a dashboard for streamers to control it. This policy explains what data we collect, why, who we share it with, how long we keep it, and how to delete it.

There are two kinds of user here — viewers, who install the extension and watch streams, and streamers, who run a channel from the dashboard. Both sign in the same way and both are covered below; where something applies to only one, we say so.

WHAT WE COLLECT

• Your Twitch account.You sign in with Twitch. We request one permission — user:read:email— and store what it returns: your Twitch user ID, username, display name, avatar URL, email address, account type (affiliate or partner status), and your public channel description. We never see your Twitch password, and we do not store your Twitch access token.
• Sign-in tokens. Our own access and refresh tokens, kept by the extension in browser extension storage and by the dashboard in cookies, so you stay signed in.
• Which channel you’re watching.When the extension is active on a Twitch or YouTube page it sends us the channel name, so it can connect you to that channel’s live events and credit watch time to the right streamer. It sends nothing on any other site.
• Watch time and attendance.This is how points work, so it is more detailed than “which channels you use it on”: we keep a running total of watch minutes per channel, and one record per broadcast you attend holding the first and last time you were counted during that stream, how many times you were counted, how many minutes were credited and how many points you earned. Watch streaks and achievements are calculated from those records.
• What you do on the overlay.Your points balance and the ledger behind it, poll votes, prediction wagers, giveaway entries, song requests and reward redemptions — including the text you type for a text-to-speech reward, and the optional message you attach to a tip.
• Clicks and notification opens.When you click a streamer’s social handle in the overlay banner we record the channel, your account, the platform, the handle and the time (at most once an hour), so the streamer can tell whether the banner works. When you open a “channel went live” notification we record that it was opened.
• Follows and alert settings. Which channels you follow from the overlay, and whether you have muted alerts for each one.
• Push notification endpoints.If you turn on live alerts, your browser generates a Web Push address for that browser profile plus two encryption keys. We store all three — they are what makes delivery to your device possible, and the Web Push standard requires them.
• Payments.For tips, channel sponsorships and streamer subscriptions we store the amount, currency, our platform fee, the status, any message you attached, and Stripe’s identifiers for the payment, subscription and customer. Card numbers, security codes, expiry dates and bank details never reach us — you enter those on Stripe’s own checkout page.
• Streamer configuration(streamers only): your overlay theme and widget settings, points and reward setup, polls, predictions, giveaways, song-request rules, blocklists, social handles, and a record of each broadcast we detected. If you pair a device such as a Stream Deck we store a one-way hash of that device’s key, never the key itself. If you use multistreaming, we store the stream keys for the platforms you send to, encrypted, because forwarding your broadcast to them is impossible without them; deleting a destination deletes its key.
• Voice control (streamers only, and only if you use it): when you drive the dashboard by voice, a transcript of what you said is sent to an AI model provider to work out what to do, and we keep a record of that request and the response so we can debug bad behaviour.

What we do not collect. The extension runs on twitch.tv and youtube.com and nowhere else. It does not read your browsing history, chat messages, video or audio, page text, form fields, keystrokes or cookies, and it does nothing at all on any other website. We do not collect your location. There is no analytics software, no telemetry, no error-reporting service and no advertising or tracking pixel anywhere in the extension or on this site.

HOW WE USE IT

• To operate the service: signing you in, awarding points, rendering overlays, and delivering real-time events to the right channel.
• To deliver the alerts you asked for, and to stop delivering them when you mute or unfollow a channel.
• To process payments and pay streamers, through Stripe.
• To give streamers channel analytics — leaderboards, attendance counts, whether a social banner got clicked. These describe a channel rather than you personally, except where a leaderboard shows your display name.
• To prevent abuse and keep the points economy fair.
• To provide support when you contact us.

We do not sell your personal data, we do not share it for anyone else’s advertising, and we do not use it to build a profile of you outside StreamDriver.

WHAT STREAMERS CAN SEE

A streamer whose channel you watch can see your display name and your standing on their channel: points, watch minutes, streak, rank, giveaway entries, prediction wagers, song requests and reward redemptions — including any text you submitted to be read aloud. If you tip or sponsor them they also see the amount and any message you wrote. They cannot see your email address, they cannot see a list of who follows them, and they cannot see anything you do on another streamer’s channel.

WHO WE SHARE IT WITH

Only the service providers we need to run the platform. Each of them processes data to provide their service to us, under their own terms.

• Amazon Web Services— our infrastructure: servers, real-time messaging, file storage, queues, the sign-in service, and the text-to-speech voice that reads reward messages aloud. AWS hosts effectively everything.
• Neon— the managed PostgreSQL database where the records described above are stored.
• Upstash— a managed Redis cache holding fast-changing derived state: leaderboards, cached display names, live vote tallies and rate-limit counters.
• Stripe— payments. When you tip, sponsor a channel or subscribe, Stripe receives your email address, display name, our internal account ID, the amount and any tip message. Card details go from your browser directly to Stripe and never pass through us.
• Twitch— our sign-in provider. We read your profile once each time you sign in.
• Push services— Google, for Chrome and other Chromium browsers, and Mozilla, for Firefox. If you enable live alerts your browser’s push service handles delivery and holds the encrypted alert on the way.
• Google, OpenAI and Anthropic— AI model providers, used only for the streamer voice-control feature. They receive the transcript of what a streamer said to their own dashboard. Viewer data is not sent to them.
• Apple— the iTunes Search API, used to look up tracks for song requests. It receives the search text only, with no account identifier attached.

We may also disclose data where we are legally required to, or to investigate abuse of the platform. If StreamDriver were ever acquired or merged, account data would transfer with the business, and we would say so here first.

HOW LONG WE KEEP IT

• While your account existswe keep the records above, because the product needs them — a streak that forgot last month would not be a streak.
• Push endpoints are deleted automatically as soon as the push service tells us the browser is gone, for example because you uninstalled the extension.
• Cached data expires by itself: around 30 days for activity timestamps, and minutes to hours for leaderboards, cooldowns and rate-limit counters.
• Payment records outlive your account, with your identity removed, because tax and accounting rules require us to be able to account for money that moved.

DELETING YOUR ACCOUNT

You can delete your account yourself, at any time, from the dashboard: Connections → Danger zone → Delete my account. You will be asked to type your channel name to confirm. It happens immediately and cannot be undone.

Deleting your account:

• removes your profile — name, email address, avatar and Twitch identity — from our database;
• deletes your points, watch time, attendance records, streaks, achievements, prediction wagers, giveaway entries, song requests, reward redemptions (including any text you submitted), social-link clicks, follows and notifications, on every channel;
• if you are a streamer, deletes your channel configuration, rewards, polls, predictions, giveaways, blocklists and broadcast records, along with your viewers’ points and streaks on your channel;
• revokes every paired device key and deletes every push notification endpoint, so nothing further can be sent to you;
• cancels any StreamDriver subscription and any channel sponsorship you were paying for, and deletes the customer record Stripe holds with your email address on it;
• deletes the records of any voice commands you gave the dashboard.

What survives, and why.The payment records themselves — subscription, tips, sponsorships — are kept for tax and accounting purposes with your name, email address and any message you wrote removed. What is left is an amount, a date, a status and Stripe’s reference numbers, attached to an account that no longer identifies anyone. One other thing stays: if you won a giveaway on someone else’s channel, the record that proves the draw was fair keeps the display name that was on the wheel at the time, because rewriting it would destroy the proof. The link back to your account is removed.

If you are a streamer with active sponsors, deletion is blocked until those sponsorships end. We will not delete a channel out from under people who are still being charged for it — cancel them from your Sponsors page, or ask your sponsors to cancel, and then delete.

If you would rather not use the dashboard, or you want a copy of your data, contact us below and we will handle it by hand. Self-serve data export is not built yet.

YOUR CHOICES

• Turn off alerts for one channel using the bell on the overlay, or for all of them by removing the notification permission from the extension.
• Stop the extension entirely by signing out of it or uninstalling it. Signing out clears the tokens and account details it kept in browser storage.
• Delete your account, as described above.
• Depending on where you live you may also have rights to access, correct, or object to our use of your data. Contact us and we will sort it out.

SECURITY

Data is encrypted in transit. Paired device keys are stored only as one-way hashes, so a copy of our database yields no working key. Card details never reach our servers at all. No system is perfectly secure, but we keep the number of places your data can be as small as we can.

CHANGES

If we make material changes to this policy, we’ll post the update here and note the new date above.

CONTACT

Questions, or a request about your data: reach us on Discord.