Privacy policy
This policy explains how we process personal data when you use the loyalty website integrated with Kick.
1. Data controller
The data controller is the streamer operating this website (contact details are available in the Contact section).
2. Data we collect
Kick user ID, username, profile picture, subscription status, points balance and history, chat activity metadata (timestamps, command usage), redemption records, and technical logs (IP address, browser type) necessary for security and operation.
3. Purposes and legal bases
We process data to run the loyalty program, authenticate users, award and redeem points, prevent abuse, and improve the service. Legal bases include contract performance (Art. 6(1)(b) GDPR), legitimate interest in security and fraud prevention (Art. 6(1)(f) GDPR), and consent where required (e.g. optional cookies).
4. Chat content
Depending on configuration, full chat messages may not be stored — we may keep hashes or metadata only. OAuth tokens from Kick are stored encrypted.
5. Retention
Account data is kept while your account is active. Ledger entries may be retained in anonymized form after account deletion for audit integrity. Logs are kept for a limited period necessary for security.
6. Recipients
Data is processed on Cloudflare infrastructure (hosting, database). Kick receives authentication requests when you sign in. We do not sell personal data to third parties.
7. Your rights
You have the right to access, rectify, delete, restrict processing, data portability, and to object. You may lodge a complaint with your supervisory authority. Contact us to exercise your rights.
8. Cookies
We use essential cookies for session management and language preference. Optional analytics cookies, if enabled, require consent.
9. Contact
For privacy requests, use the contact email published on the website.