Privacy Policy

1. Data controller

The controller of your personal data is Igor Koval, a sole proprietorship (jednoosobowa działalność gospodarcza) registered in the Central Registration and Information on Business (CEIDG) in Poland, operating the StreamSnipe service.

2. What we collect

• Account data — your email address and password (stored hashed); or, if you sign in with Discord, your Discord user ID, username and avatar.
• Profile & content — the streams you create, follows, and settings you choose.
• Usage & activity data — pages you view, streams you watch or broadcast, and similar interactions, used to operate and improve the Service.
• Technical data — IP address, browser and device information, and logs needed for security and to make streaming work.
• Connected social accounts — only if you use autoposting (sections 9 to 11). For each platform you connect we store the account identifier and display name, the permissions you granted, and the authorisation tokens that let us publish on your behalf. Tokens are encrypted at rest and are never shown to anyone, including you.
• Videos you submit for publishing — the video file itself and the title, description, tags and visibility you choose, plus the outcome reported back by each platform (success or failure, and the resulting post's ID and URL).
• Support data — the messages and contact details you send us.
• Payment data — handled by Paddle (see section 4). We do not receive or store your full card details.

3. Why we use it and our legal bases

• To provide the Service — creating your account, running streams, and delivering features you request. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• To keep the Service secure and working — preventing abuse, debugging, and protecting our users. Legal basis: our legitimate interests (Art. 6(1)(f) GDPR).
• To publish videos you ask us to publish — connecting a platform and selecting it for a video is your explicit instruction to us; we use the stored authorisation only to carry it out. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). We never publish anything you have not submitted, and we do not use these permissions for any other purpose.
• To handle payments — processed by Paddle on our behalf. Legal basis: performance of a contract, and compliance with legal (accounting) obligations (Art. 6(1)(b) and (c) GDPR).
• To communicate with you — service messages and replies to your enquiries. Legal basis: contract and legitimate interests. Any marketing email is sent only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

4. Payments

Payments and subscriptions are processed by our Merchant of Record, Paddle.com Market Limited (“Paddle”). When you buy a subscription, Paddle collects and processes your payment and billing information as an independent controller under its own privacy policy. We receive only limited information such as your subscription status, country and the outcome of a transaction — never your full card number.

5. Cookies

We use cookies and similar technologies that are strictly necessary to run the Service — for example to keep you signed in and to protect against cross-site request forgery. Because these are essential, they do not require consent. Paddle may set its own cookies during checkout. You can control cookies through your browser settings, though blocking essential cookies may stop the Service from working.

6. Who we share data with

We do not sell your personal data. We share it only with service providers (processors) who help us run StreamSnipe, and only as needed:

• Paddle — payments and subscription billing;
• Discord — if you choose to sign in with Discord;
• Hosting and infrastructure providers — to store data and deliver streams;
• Email provider — to send account and support messages.

If you use autoposting, we also send data to the platform you selected — and only to the platform you selected. In each case we transmit the video file, the title, description, tags and visibility you chose, and the authorisation token for your account there:

• Google / YouTube — Google Privacy Policy;
• Meta / Instagram — Meta Privacy Policy;
• TikTok — TikTok Privacy Policy.

One thing to be aware of for Instagram. Instagram does not accept a direct file upload — it fetches the video from a web address instead. So when you post to Instagram, the watermarked file is served from a temporary public link for as long as it takes Instagram to collect it, and is deleted immediately afterwards. The link is unguessable and never published by us, but during that window anyone holding it could open the file. This does not apply to YouTube or TikTok, which we upload to directly.

We may also disclose data where required by law, to enforce our Terms, or to protect the rights and safety of our users.

7. International transfers

Some of our providers process data outside the European Economic Area — in particular Google and Meta process in the United States, and TikTok processes outside the EEA. Where that happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision to protect your data.

8. How long we keep it

We keep your account data for as long as your account is active. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain records (for example billing records kept by Paddle and for tax purposes) for as long as the law requires.

For autoposting specifically, we commit to the following:

• Authorisation tokens are kept only while your account is connected, and only to publish what you submit. Disconnecting a platform, or deleting your StreamSnipe account, revokes them with the platform and deletes them here straight away.
• Video files — both your original and the watermarked copy — are deleted as soon as every selected destination has finished, whether it succeeded or failed. We do not keep a library of your uploads.
• Any other data we obtain from the YouTube API is deleted or refreshed within 30 calendar days.
• If you ask us to delete data we hold about you, we do so within 7 calendar days.
• If you revoke our access from Google’s security settings, we delete the affected data within 30 calendar days.

We keep a small record of what was published where (the platform, the time and the resulting post ID) so you can see your own posting history. You can have this deleted on request.

9. YouTube API Services

If you connect a YouTube channel, StreamSnipe uses YouTube API Services to upload videos on your behalf. By using this part of the Service you agree to the YouTube Terms of Service, and Google’s handling of your data is governed by the Google Privacy Policy.

What we access and store

• Your YouTube channel ID and channel title — read once when you connect, and shown in your profile so you can see which channel you are posting to;
• Your Google account identifier and the permissions you granted;
• OAuth access and refresh tokens, encrypted at rest, used solely to upload the videos you submit;
• The result of each upload — the resulting video ID and URL, or the error if it failed.

We request only two permissions: the ability to upload videos, and read-only access used exclusively to identify your channel at the moment you connect. We do not read your videos, comments, subscribers, watch history or analytics.

What we do not do

• We do not sell YouTube data, or share it with anyone other than you and Google.
• We do not serve advertisements, and we do not allow third parties to serve content or advertisements, against YouTube data.
• We do not use YouTube data to build user profiles, for advertising or targeting, or to train machine-learning or AI models.
• We do not store, access or collect information from your device beyond what is described in section 2 and the strictly necessary cookies in section 5.

Limited Use

StreamSnipe’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access

In addition to disconnecting inside StreamSnipe (Profile → Connected accounts), you can revoke our access to your YouTube data at any time from the Google security settings page at https://myaccount.google.com/permissions. See section 11 for what happens to your data when you do.

Questions or complaints about our use of YouTube data can be sent to support@mail.streamsnipe.live.

10. Instagram and TikTok data

The same principles apply to the other platforms you can connect: we request the minimum permissions needed to publish, we use them only to publish what you submit, and we never sell the data, use it for advertising, or use it to train models.

Instagram

If you connect an Instagram professional account, we store its Instagram account ID and username, the ID of the linked Facebook Page required by Meta’s publishing API, the permissions you granted, and encrypted access tokens. We use them only to publish the videos you submit. Our use of Meta’s platform is subject to the Meta Platform Terms, and Meta’s handling of your data is governed by the Meta Privacy Policy. You can revoke our access at any time under Instagram → Apps and websites. Please also read the note in section 6 about how Instagram collects the video file.

TikTok

If you connect a TikTok account, we store the account identifier TikTok issues to us (your open ID), your display name, the permissions you granted, and encrypted access tokens. Before each post we ask TikTok which visibility and interaction settings your account allows, so the choices we show you match your own TikTok settings — we do not read anything else about your account. Your use of TikTok remains governed by the TikTok Terms of Service, its Music Usage Confirmation and the TikTok Privacy Policy. You can revoke our access at any time under TikTok → Settings and privacy → Security and permissions → Manage app permissions.

11. Revoking access and deleting your data

You are in control of this at all times, and there are three ways to act:

• Disconnect one platform — Profile → Connected accounts → Disconnect. We immediately revoke our authorisation with that platform and delete the stored tokens and account details. Future publishing to it stops at once.
• Delete your whole account — Profile → Delete account. We revoke every connected platform and delete your account data, as described in section 8.
• Revoke from the platform’s own settings — Google, Instagram, or TikTok’s Manage app permissions screen. Publishing stops immediately and we delete the affected data within 30 calendar days.

You can also email support@mail.streamsnipe.live and we will delete your data within 7 calendar days. Step-by-step instructions are on our data deletion page.

Deleting data here does not remove videos already published to a platform at your request — those are on your own account, and you can delete them there.

12. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased (“right to be forgotten”);
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email support@mail.streamsnipe.live. You also have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl).

13. Children

StreamSnipe is not directed at children under 16. We do not knowingly collect their data; if you believe a child has provided us personal data, contact us and we will delete it.

14. Security

We use appropriate technical and organisational measures — including encryption in transit, hashed passwords and access controls — to protect your data. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the authorities of a breach where the law requires.

15. Changes to this policy

We may update this Privacy Policy from time to time. We will change the “Last updated” date above and, for material changes, take reasonable steps to let you know.

16. Contact

For any privacy question or request, contact us at support@mail.streamsnipe.live.