Privacy policy
This page explains what data StreamLayout processes, why it’s needed and how long we keep it.
Draft: this text is under legal review and the wording may change.
Who we are and how to contact us
StreamLayout is a service that brings donation alerts from several platforms into one OBS widget.
The operator’s details will be added in the final version. For questions about your data, write to [email protected].
Streamer data we process
Email address, password (we store only a hash), language, main currency and time zone.
For signing in: a hash of the IP address and browser details (user agent). An activity log: sign-ins, platform connections, settings changes, data deletion.
Connection data
Your platforms’ widget links, keys and access tokens. We store them encrypted and use them only to receive donation notifications and alert design settings.
When you delete a connection, this data is deleted immediately.
Donor data
Name, message, amount, currency, time and the donation ID on the platform. Voice and video messages are copies of files the platform stores.
The streamer decides why this data is processed; StreamLayout processes it on the streamer’s behalf.
Legal basis
- Running the service: performance of our contract with the streamer.
- Using platform links and optional emails: consent, which you can withdraw.
- Security and technical logs: legitimate interest.
The wording for each purpose will be finalized after legal review.
Retention
- Donor messages: as long as the streamer sets, 180 days by default.
- Raw data from platforms: 30 days.
- Technical logs: 14 days; security log: 365 days. IP addresses in web server logs: 14 days.
- Media files that are no longer referenced: 30 days.
- Descriptions for style generation: 90 days in the generation log. A description saved with a style is kept as long as the style exists.
- Accounts are deleted within 72 hours of the request.
Rights of donors and streamers
You can access your data, correct it, export your donation history, withdraw consent and delete your account. A donor can ask for their donation to be anonymized.
You have the right to complain to a supervisory authority: in the EU, the data protection authority of your country; in Russia, Roskomnadzor. If an EU representative is needed, their contact will appear in the final version.
Third-party services
- Donation platforms: we receive notifications and alert design settings from them.
- An external generation service for styles: it receives only the description text and style parameters, no donor data.
- An email service: to send emails.
- Hosting: to run the service.
Terms for transferring data to other countries will be described after legal review.
Automated style generation
A style from a description is created automatically by an external generation service; only the text of your description is sent to it. You see the result in a preview and can change it or not use it.
Cookies and browser storage
We use only necessary cookies: for your session, for protection against request forgery and for the site language you chose. The site theme you chose is stored in your browser.
We don’t use analytics or advertising cookies.
Minimum age
The minimum age for using the service will be stated after legal review.
Document language
Translations of this document are provided for convenience. If versions differ, the version in the language named in the final version prevails.
Security
Platform keys and tokens are stored encrypted, connections use HTTPS and access to data is restricted.
Changes to this policy
We’ll email you about significant changes.