Privacy Policy
Last updated: 19 April 2026
Data we collect
- Account: email, username, hashed password, optional display name / bio / avatar / banner.
- Streaming: RTMP stream metadata, peak viewer counts, category, tags.
- Chat: messages you send (retained for history + moderation).
- Billing: handled by Stripe — we receive the subscription status, tier, and transaction timestamps but never your card details.
- Technical: IP address, user agent, request logs (retention: 30 days) for fraud prevention.
How we use it
- Provide the service (authenticate, stream, chat, pay creators).
- Moderate abuse (chat bans, account investigations).
- Send transactional emails (signup confirmation, billing receipts, tier changes). No marketing emails unless you opt in.
- Aggregate analytics (no individual tracking beyond your own channel).
Third parties
- Supabase — database + authentication (EU / Canada data region).
- Stripe — payment processing (PCI-compliant; card data never touches our servers).
- Vercel — web hosting (edge + serverless).
- OVH — streaming ingest + chat WebSocket server (France).
- IGDB — game metadata (queries anonymized).
- OpenAI — AI-assisted metadata generation (your stream title/description can be sent to generate suggestions; the request is retained by OpenAI per their API policy).
Your rights (GDPR / CCPA)
You can:
- Access & export your data — from Settings → Privacy.
- Correct errors — edit your profile directly.
- Delete your account — Settings → Privacy → Delete account (14-day grace period).
- Opt out of tracking cookies — see the Cookies page.
- Object to processing — contact us.
Retention
Account data is kept as long as your account exists. Chat messages: 30 days. Billing records: 7 years (tax requirement). Deleted accounts: fully purged after the 14-day grace period.
Security
All traffic is TLS-encrypted. Passwords are bcrypt-hashed. Stream keys are server-side only — never exposed to other users. We use Row-Level Security on our database.
Children
VPZONE is not directed at children under 13. If you believe a child has created an account, contact us and we'll delete it.
Contact
Data-protection requests: solutionstechnoredac@gmail.com