This Privacy Policy explains what information StreamEcon collects, why, who it is shared with, how long it is kept and the choices you have. It covers creators and other people with StreamEcon accounts, and viewers whose information reaches StreamEcon because they take part in a channel that uses StreamEcon. Words like "Service" and "workspace" have the same meaning as in the Terms of Service.
1. Who Is Responsible
The Service is operated by John Sacco ("StreamEcon," "we," "us"). Contact: support@streamecon.com.
For account information (Section 2.1) and for security and operations, we decide how information is used. For information about a creator's viewers and community, the creator decides which features to use and how long some information is kept, and we process that information to provide the Service to the creator and to keep the Service secure. If you are a viewer, see Section 11.
2. Information We Collect
2.1 Account information
E-mail address, display name, a one-way hash of your password (we never store the password itself), time zone, language, account status, e-mail verification status, the workspaces you belong to and your role in each, your settings and preferences, and a record of which version of each legal policy you accepted, when, and from which IP address and browser.
2.2 Workspace configuration and content
Workspace name and public address, and everything you set up: timer, wheel, goal, alert, marquee, poll, giveaway, draft board, Live Control and automation settings; chat commands, Chat Notifications and scheduled messages; banned words and moderation rules; overlays and layouts; uploaded images, sounds and videos; notes; and the history of configuration changes.
2.3 Twitch connection
When you connect Twitch: your Twitch user ID, login and display name, the permissions you granted, and the access and refresh tokens Twitch issues (stored encrypted and used only to provide the Service), plus channel status such as whether you are live.
2.4 Channel events from Twitch
Twitch sends StreamEcon events from your channel, such as follows, subscriptions and gifted subscriptions, Bits, raids, Channel Points redemptions, polls, predictions, Hype Trains, charity donations, goals, ads, shoutouts, stream start and end, and moderation events. Events contain the Twitch user ID and name of the viewer involved and details such as tier, amount, message or reward. StreamEcon turns these into Creator Events and keeps them as your channel's event history, which powers timers, wheels, goals, alerts, leaderboards, automations and analytics.
2.5 Chat
While your channel is connected, StreamEcon's chat bot account (StreamEconBot) reads every message in your channel's chat, whether or not you are live, so commands, Chat Notifications, moderation tools and the chat overlay work. For each message we process the sender's Twitch ID, name, colour, badges and the message text. Messages are stored as chat history for the retention period set in your workspace (between 15 and 60 days; 30 days by default) and then deleted. Counts derived from chat (for example how many messages a viewer sent in a stream) can be kept longer as part of analytics (Section 2.6). Deleted and moderated messages are hidden from overlays and public pages but may stay in private chat history until it expires.
2.6 Viewer records and analytics
To show creators who their community is, StreamEcon keeps per-channel records of viewers who interact: Twitch ID and name, first and last seen, chat activity counts, streams attended, support such as subscriptions, gifts, Bits and tips, participation in wheels, polls, giveaways and other tools, and notes a creator adds. Activity detail is kept for the period set in the workspace (365 days by default). Stream analytics (followers gained, peak and average figures, event totals, sessions) are kept while the workspace exists.
2.7 Tips and other connected services
If you connect StreamElements, we store its access token (encrypted) and receive tip events: the tipper's name, the amount and currency, and any message. If you use Now Playing, we receive media details from your device or media source, such as title, artist, album, artwork link and playback position; we never receive the audio. If you use Words on Stream or other integrations, we process the commands and settings needed for them.
2.8 Webhooks, API tokens and remote control keys
The addresses and settings of webhooks you add, and delivery records (the payload sent, response code and timing). API tokens and remote control keys are stored only as hashes; we record when they are created, used and revoked.
2.9 Support
What you send us through the Contact page, a support ticket page or by e-mail: name, e-mail address, message, subject, the tool it concerns, and attachments (up to three images or PDF files per message; other file types are refused). For signed-in users we also attach the workspace, page, browser and app version to help us troubleshoot. Each ticket has a private page where you can read our replies and answer; if you were not signed in when you contacted us, that page is reached through a private link we e-mail you, and anyone who has the link can read and answer the ticket. Our staff may add internal notes to a ticket that are not shown to you.
2.10 Security, technical and usage information
IP addresses, browser and device information, request times, session identifiers, sign-in history (IP address, time, browser), audit records of important actions, application and server logs, error reports sent by your browser (page address and error message), and service health data. To stop abuse of sign-up and other public forms we keep rate-limit counters and sign-up attempt records containing a keyed hash of the IP address and network (not the address itself), the e-mail domain and the outcome.
2.11 E-mails we send
A log of the e-mails we send you (type, address, subject, time and whether delivery succeeded), and a copy of each e-mail's content (text, sender and reply-to address, and the names of any attachments, not the attachments themselves) so our staff can check what was sent and send it again if it did not arrive.
2.12 Information we do not want
StreamEcon does not ask for government ID numbers, payment-card numbers, bank details, health information or similar sensitive information. Please do not put it in support messages, commands, notes or other free-text fields.
3. How We Use Information
We use information to create and secure accounts; verify e-mail addresses; run workspaces and every feature you turn on, including acting on your Twitch channel as you configure; show overlays and public pages you publish; produce analytics for creators; send service and security e-mails; answer support requests; detect, investigate and prevent abuse, fraud, spam and security incidents (including automated sign-up checks); diagnose problems and keep the Service reliable; enforce our Terms; and meet legal obligations. We do not sell personal information, use it for advertising, share it for cross-context behavioural advertising, or make decisions with legal or similarly significant effects about people solely by automated means. Automated tools you configure (for example banned-word timeouts) act on your instructions.
4. Legal Bases (EEA, UK and Similar Laws)
Where these laws apply, we rely on: performance of our contract with you (to provide the Service you asked for); our legitimate interests and those of creators (to run interactive streams, keep communities safe, secure the Service and prevent abuse), balanced against your rights; compliance with legal obligations; and consent where it is required.
5. Who We Share Information With
- Infrastructure providers. InMotion Hosting (United States) hosts the website, database and the servers that run StreamEcon's chat bot, event processing, real-time updates and caches, and relays our outgoing e-mail. Cloudflare provides content delivery, DDoS protection and bot screening for the website and sees the traffic passing through it, including IP addresses.
- Fonts. Our public pages load fonts from Google Fonts, so your browser sends your IP address and browser details to Google when those pages load.
- Platforms you connect. Twitch, StreamElements and other services receive what is needed to carry out actions you request (for example a chat message StreamEconBot posts or a moderation action).
- Destinations you choose. Webhook addresses you add receive the event data you select.
- The public and your community. Information you publish through overlays and public pages, such as viewer names in an alert or a leaderboard, is visible to anyone who can see them.
- Workspace members. People you add to your workspace can see its information within their permissions.
- Legal and safety. When required by law or a valid legal request, or when needed to protect the rights, safety or property of users, viewers, StreamEcon or others.
- Business transfers. In a merger, acquisition, reorganization or sale of the Service, subject to this Policy.
Our providers may only use the information to provide their services to us.
6. Twitch Information
We use information received from Twitch only to provide the Service to the creator who connected the channel and to secure it, and we follow Twitch's developer rules. We do not sell it or share it with data brokers or advertisers. Disconnecting Twitch stops new information from arriving. Deactivating your account also revokes StreamEcon's Twitch tokens and removes its event subscriptions. Deleting your account deletes the information described in Section 8.
7. How Long We Keep Information
- Account information: while the account exists. Accounts that never verify their e-mail address: removed after 7 days.
- Workspace configuration, event history and analytics: while the workspace exists, or until you delete them where the Service lets you. Configuration change history: 180 days.
- Chat history: the workspace's retention setting (15–60 days, 30 by default).
- Viewer activity detail: the workspace's setting (365 days by default).
- Webhook delivery records: 14 days (30 days for failed deliveries).
- Sign-in history (IP address and browser): up to 12 months. Sign-up attempt records: 30 days. Rate-limit counters: hours to days.
- Real-time copies and queues on our processing servers: generally expire within a day.
- Support tickets: while needed to resolve the request and for a reasonable period afterwards, or until you delete your account. This includes the replies and attachments on the ticket.
- E-mail log: type, address, subject, time and delivery status are kept with other operational records. The copy of an e-mail's content: 90 days.
- Server and application logs: kept as long as needed for troubleshooting and security, then rotated or deleted.
- Deactivated accounts: kept until you reactivate or delete them.
- Backups made by us or our hosting provider: overwritten as they rotate.
We may keep information longer where the law requires it, to resolve disputes, or to investigate and prevent fraud and abuse.
8. Deactivating and Deleting Your Account
On the My Profile page you can deactivate or delete your account yourself.
Deactivate: StreamEcon stops monitoring your channel, revokes its Twitch tokens, removes its event subscriptions, and closes the workspaces you own alone (their overlays and public pages go offline). Your information is kept so you can come back. Chat history still expires on its normal schedule.
Delete: StreamEcon revokes its Twitch tokens and removes its event subscriptions, then permanently deletes your account (profile, sign-in data, notifications, settings, memberships, sign-in history, policy acceptance records, support tickets and our e-mail log for your address) and every record of the workspaces you own alone, including their uploaded media. Where your name appears in another workspace's history (for example as the person who changed a setting), the reference is removed. A record that a deletion took place is kept, without your name or e-mail address. Copies in backups are overwritten as backups rotate.
9. Security
We protect information with HTTPS, password hashing, encryption of stored tokens and secrets, hashed API tokens and keys, access controls and workspace separation, CSRF protection, rate limits, private storage for support attachments, audit logging and least-privilege access by staff. No system is perfectly secure. If we learn of a breach that affects your information, we will notify you and authorities as the law requires.
10. Your Choices and Rights
You can update your profile on My Profile, disconnect Twitch and other services on Connections, change retention settings, delete content, and deactivate or delete your account. Depending on where you live, you may also have the right to access, correct, delete, restrict or object to processing of your information, to receive a portable copy, to withdraw consent, and to appeal our decision or complain to a data protection authority. To make a request, e-mail support@streamecon.com. We will verify your identity (for example by e-mail to the address on the account) before acting and will respond within the time the law requires. You may use an authorized agent where the law allows. We will not discriminate against you for exercising a privacy right.
Residents of California and other U.S. states with privacy laws: in the last 12 months we collected the categories of information described in Section 2 (identifiers such as e-mail addresses and Twitch IDs, internet and network activity, and the content of chat and support messages) for the purposes in Section 3 and disclosed them only as described in Section 5. We do not sell or "share" personal information as those laws define it and we do not use sensitive personal information to infer characteristics. Because we do not sell or share personal information, we treat Global Privacy Control signals as already honoured.
11. If You Are a Viewer
If you watch or chat in a channel that uses StreamEcon, information about you reaches us through Twitch as described in Sections 2.4 to 2.7: your Twitch name and ID, your chat messages in that channel, and your follows, subscriptions, gifts, Bits, tips and participation in that channel's tools. It is used to run that channel's features and analytics and is visible to that channel's creator and their workspace members, and anything shown on stream is public. We do not combine your information across different creators' channels to build a profile of you, and we do not sell it. You can ask the creator to remove you from their tools, or e-mail support@streamecon.com with your Twitch username to access or delete the information StreamEcon holds about you; we may need to confirm that the Twitch account is yours.
12. International Users
StreamEcon is operated from and hosted in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States, where privacy laws may differ from yours. Where the law requires, we use appropriate safeguards for these transfers.
13. Age Requirement
StreamEcon accounts are only for people 18 or older. We do not knowingly create accounts for younger people. Viewers of a creator's channel are subject to Twitch's own age rules; we do not knowingly collect information from children under 13. If you believe a child has given us information, contact support@streamecon.com and we will delete it.
14. Cookies
We use cookies and browser storage that are needed to sign you in, keep you secure and remember preferences. See the Cookie Policy. We do not use advertising cookies.
15. Changes to This Policy
We will update this Policy when our practices change. The version and effective date are at the top. For material changes we will notify account holders, for example by e-mail or in the Service, and may ask you to review the new version before continuing.
16. Contact
Privacy questions and requests: support@streamecon.com. Operator: John Sacco.