>
Aithm

No products in the cart.

Privacy Policy for Streambuddies

Privacy Policy for Streambuddies

Last updated: May 16, 2025

1. Data Controller

The data controller for data processing is:

Patrick Wahler
bitekenny.com
Alpenstraße 66b
82194 Gröbenzell / Munich
Germany

2. Overview

Streambuddies is a browser extension that allows users to log in via Twitch and connect with other users of the extension, form friendships, and communicate in private chats.

This privacy policy informs you about the nature, scope, and purpose of the collection and use of personal data when using our browser extension.

3. Data Collected

3.1 Twitch Login Data

When logging in via Twitch OAuth, we process:

  • Twitch ID: Unique user identification
  • Twitch Username: Your public Twitch name
  • Twitch Avatar URL: Link to your Twitch profile picture

3.2 Chat Communication

Data Type Description Encryption Storage Duration
Chat Messages Text messages in private and group chats AES-256 Max. 150 messages per chat
Timestamps Date and time of the message AES-256 Automatic deletion
Sender Information Sender of the message AES-256 Linked to message

3.3 Personal Settings

  • Language Settings: Your chosen interface language
  • Design Settings: Your chosen favorite color for chat names
  • Online Status: Online, Offline, Do Not Disturb (DND), AFK
  • Notification Settings: [If implemented]

3.4 Usage Statistics

  • Message Counter: Total number of messages sent
  • Chat Participation: List of chats you are a member of
  • Role Information: Your role in respective group chats (Admin, Supermod, Mod, User, VIP)

3.5 Technical Log Data

When using the extension, the following technical data is automatically processed:

  • IP address (in anonymized form)
  • Browser type and version
  • Operating system
  • Date and time of access
  • Error messages and crash reports

This data is processed exclusively for the technical provision of the extension, troubleshooting, and security purposes and is deleted after 30 days.

3.6 Categorization of Processed Data

For better overview, we categorize the processed data as follows:

Category A: Identifiers
- Twitch ID, Twitch username, Twitch avatar URL

Category B: Personal Information
- Language settings, design preferences, online status

Category C: Communication Data
- Chat messages, timestamps, emoji reactions

Category D: Technical Data
- IP address (anonymized), browser type, operating system, error messages

Category E: Usage Statistics
- Message counter, chat participation, role assignments

4. Legal Basis for Data Processing

We process your personal data based on the following legal grounds:

Art. 6 para. 1 lit. a GDPR - Consent:

  • Processing of Twitch login data
  • Storage of chat messages
  • Processing of personal settings

Art. 6 para. 1 lit. b GDPR - Contract Performance:

  • Provision of chat functionality
  • Management of your account
  • Enforcement of our terms of service

Art. 6 para. 1 lit. f GDPR - Legitimate Interests:

  • Ensuring extension security (our legitimate interest: protection against misuse)
  • Prevention of misuse (our legitimate interest: maintaining a secure service)
  • Technical administration (our legitimate interest: proper functioning of the extension)
  • Improvement of extension functionality based on anonymized usage data

When processing based on legitimate interests, you have the right to object at any time if there are reasons arising from your particular situation that speak against the processing.

5. Purposes of Data Processing

5.1 Primary Purposes

  • Authentication and access: Enabling secure login via Twitch
  • Chat functionality: Providing private and group chats
  • Friendship system: Managing contacts between users
  • Personalization: Adapting the extension to individual preferences
  • Role management: Managing Admin, Supermod, Mod, User, and VIP rights
  • Storage of emoji reactions to messages to improve interaction possibilities
  • Display and management of your manually set online status for other users

5.2 Secondary Purposes

  • Technical support and troubleshooting
  • Security and abuse prevention
  • Compliance with legal requirements

6. Storage Duration

The storage duration of your data varies by data type:

Data Type Storage Duration Reason
Twitch Login Data Until account deletion Necessary for authentication
Chat Messages Max. 150 messages per chat Automatic deletion of older messages
Personal Settings Until change or account deletion Personalization
Logs and Error Reports 30 days Troubleshooting and security

All data associated with your account will be completely deleted when you delete your account.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

7.1 Technical Measures

  • Encryption: AES-256 for all chat messages
  • Secure Data Transmission: TLS/SSL for all API requests
  • Access Control: Role-based permissions
  • Security Updates: Regular patches and updates

7.2 Organizational Measures

  • Access restrictions for administrators
  • Data protection impact assessment for new features
  • Regular security audits
  • Staff training on data protection

8. Third Country Transfer

Important Notice: Our data is stored in MongoDB Cloud. Depending on the server location, data may be transferred to third countries outside the European Union.

8.1 Guarantees for Third Country Transfer

To ensure an adequate level of data protection even when transferring data to third countries, we have taken the following measures:

  • EU Standard Contractual Clauses with MongoDB
  • Adequacy decision or ruling (if applicable)
  • Service provider certifications

8.2 Legal Basis for Third Country Transfers

For data transfers to countries outside the EU/EEA, we rely on the following legal bases:

  • EU Commission adequacy decision under Art. 45 GDPR (if available)
  • Standard data protection clauses under Art. 46 para. 2 lit. c GDPR
  • Binding corporate rules under Art. 47 GDPR

You can request a copy of the appropriate safeguards from us at the contact address mentioned above.

9. Your Data Protection Rights

Under the GDPR, you have the following rights:

9.1 Right of Access (Art. 15 GDPR)

You have the right to know what personal data we process about you.

9.2 Right to Rectification (Art. 16 GDPR)

You can request correction of incorrect or incomplete data.

9.3 Right to Erasure (Art. 17 GDPR)

Under certain conditions, you can request the deletion of your data.

Automatic Deletion Functions:

  • Delete account: Via extension settings
  • Chat messages: Automatically after 150 messages
  • Temporary data: Automatically after defined periods

9.4 Right to Restriction (Art. 18 GDPR)

You can request restriction of processing under certain circumstances.

9.5 Right to Data Portability (Art. 20 GDPR)

You can request your data in a structured, common format.

Export Functions: You can export all your data as a JSON file.
Available in: Extension → Settings → Export Data

9.6 Right to Object (Art. 21 GDPR)

You have the right to object to the processing of your data.

9.7 Right to Complain (Art. 77 GDPR)

You can file a complaint with a data protection supervisory authority.

10. Withdrawal of Consent

You can withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

10.1 Withdrawal Options

  • Complete withdrawal: Delete account via settings
  • Partial withdrawal: Disable individual functions in privacy settings
  • Email: Withdrawal via email to the contact address

10.2 Consequences of Withdrawal

  • Immediate cessation of data processing
  • Restriction of extension functionality
  • Possible deletion of the account

11. Cookies and Tracking

Streambuddies uses local browser storage (Chrome Storage) instead of cookies for certain functions to ensure a smooth user experience:

Data Type Purpose Storage Duration
Consent Status Stores your consent Unlimited
Login Status Auth token for Twitch Until logout
User Settings Personalization Until change

No cookies or tracking technologies are used.

12. Third-Party Services

12.1 Twitch OAuth

For login, we use Twitch OAuth:

  • Provider: Twitch Interactive, Inc.
  • Purpose: Secure authentication
  • Privacy Policy: Twitch Privacy Notice

12.2 MongoDB Cloud

For data storage, we use MongoDB Cloud:

  • Provider: MongoDB, Inc.
  • Purpose: Secure data storage
  • Encryption: Data at rest and in transit
  • Data protection agreement: EU Standard Contractual Clauses

13. Protection of Minors

Our extension is intended for persons aged 13 and over:

  • Children under 13 should not use the extension
  • If we become aware of data from children under 13, it will be deleted immediately
  • For users aged 13-16, we recommend involving parents

14. Changes to the Privacy Policy

We reserve the right to update this privacy policy as needed:

14.1 Notification of Changes

  • In-app notification for significant changes
  • Email notification to registered users
  • 30-day period for objection to significant changes

14.2 Version History

  • Version 1.0 - May 16, 2025: Initial publication

15. Contact and Complaints

15.1 Data Protection Inquiries

For all data protection inquiries:

Patrick Wahler
bitekenny.com
Alpenstraße 66b
82194 Gröbenzell / Munich
Germany

  • Processing time: Maximum 30 days after receipt
  • Identity verification: Required for all inquiries

15.2 Complaint Options

You have the right to file a complaint with a data protection supervisory authority.

15.3 Data Protection Officer

Due to the size of our company, we are not required to appoint a data protection officer. For all data protection inquiries, please contact the above-mentioned contact address directly.

15.4 Competent Supervisory Authority

The data protection supervisory authority responsible for us is:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
Email: poststelle@lda.bayern.de
Website: https://www.lda.bayern.de

16. Right of Withdrawal for Digital Content

For premium features and digital content provided for a fee, you have a statutory right of withdrawal.

16.1 Withdrawal Instructions

You have the right to withdraw from this contract within fourteen days without giving any reason. The withdrawal period is fourteen days from the day of contract conclusion.

To exercise your right of withdrawal, you must inform us (Patrick Wahler, bitekenny.com, Alpenstraße 66b, 82194 Gröbenzell / Munich, Germany) by means of a clear statement (e.g., a letter sent by post or email) of your decision to withdraw from this contract.

16.2 Expiry of the Right of Withdrawal

Your right of withdrawal expires prematurely if you have expressly agreed that we begin performance of the contract before the withdrawal period expires, and you have confirmed your knowledge that you lose your right of withdrawal by consenting to the beginning of performance of the contract.

16.3 Consequences of Withdrawal

If you withdraw from this contract, we shall reimburse all payments received from you immediately and at the latest within fourteen days from the day on which we received notification of your withdrawal from this contract. For this reimbursement, we will use the same means of payment that you used for the original transaction, unless expressly agreed otherwise with you.

17. "Do Not Track" Policy

Our extension does not respond to "Do Not Track" (DNT) signals. However, since we do not use tracking technologies and only use local browser storage, a specific DNT implementation is not required.

If you want to avoid tracking in general, you can activate the DNT function in your browser settings. However, this has no impact on the functionality of our extension.

18. Automated Decision-Making and Profiling

Our extension does not perform automated decision-making within the meaning of Art. 22 GDPR. No profiles are created that automatically lead to legal consequences for you or similarly significantly affect you.

The only automated processes concern:

  • Automatic deletion of older chat messages (after 150 messages)
  • Automatic deletion of logs after 30 days
  • Technical security measures for abuse prevention

19. Links to Other Websites

Our extension may contain links to other websites that are not operated by us. If you click on a link to a third-party website, you will be redirected to that website.

We strongly advise you to read the privacy policy of every website you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party websites or services.

This applies in particular to:

  • Twitch.tv (for authentication)
  • External links shared in chats
  • Websites on which our extension is used

20. Usage Statistics and Analytics

Data Collection for Statistics

To improve our extension and provide better service, we collect anonymized usage statistics. This data collection is conducted exclusively for statistical purposes and serves to optimize extension functionalities. By using the extension, you consent to the collection of this anonymized data.

What Data is Collected?

Automatically collected data:

  • Browser type (Chrome, Firefox, Safari, Edge, Opera)
  • Country/Region (based on IP address, not stored)
  • Extension version
  • Usage duration and session information
  • Used features (Sidepanel, Chat, Friends system, Notifications)
  • Time of usage

Data NOT collected:

  • Your IP address is not permanently stored
  • Personal messages or chat content
  • Twitch username or other personal identifiers
  • Visited websites outside of Twitch

Anonymization and Privacy Protection

Complete anonymization:

  • All collected data is fully anonymized
  • It is not possible to trace statistics back to individual persons
  • We do not use tracking cookies or persistent identifiers
  • Session IDs are regularly renewed and contain no personal information

Data storage:

  • Statistical data is aggregated and stored only in anonymized form
  • Individual session data is automatically deleted after a maximum of 30 days
  • Live metrics are only used for current user count (5-minute window)

Purpose of Data Collection

The anonymized statistics help us to:

  • Understand the popularity of different features
  • Identify and fix technical problems
  • Optimize extension performance
  • Develop new features based on usage patterns
  • Improve stability and reliability

Your Rights and Consent

Consent:

  • By installing and using the extension, you consent to the collection of anonymized usage statistics
  • Data collection is necessary for the proper functioning and continued development of the extension

Data deletion:

  • Due to complete anonymization, individual data deletion is not possible
  • All session data is automatically deleted after 30 days at the latest
  • Aggregated statistics contain no personal information

Data Sharing

  • Anonymized statistics are not shared with third parties
  • Data is used exclusively for internal purposes to improve the extension
  • There is no commercial use or sale of the data

Technical Security

  • All data transmissions are encrypted (HTTPS)
  • Server-side data is protected by modern security measures
  • Regular security reviews and updates
  • Minimal data storage following the principle of data minimization

Contact

If you have questions about data collection or privacy protection, you can contact us at any time:

  • Email: contact@streambuddies.app
  • Website: streambuddies.app

This privacy policy specifically refers to the anonymized usage statistics of the TwitchFriends Extension. For additional privacy provisions, see our complete privacy policy.

Copyright© 2025 bitekenny.com. All rights reserved.