Privacy Policy

Last updated: February 26, 2026

1. Introduction

StreamTools ("we", "our", or "us") operates streamtools.gg. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. Please read it carefully. By using StreamTools you agree to the practices described here.

2. Information We Collect

Account information

When you register we collect your email address and a hashed version of your password. We never store your password in plain text. Each account has a unique encryption key; sensitive fields are only decrypted while you are actively logged in.

Usage data

We automatically collect certain information when you interact with StreamTools, including IP addresses (used only for rate-limiting and security), browser type, pages visited, and timestamps of actions. This data is stored for up to 90 days for security and debugging purposes.

Community member data

Streamer accounts may upload data about their community members (display names, wagered amounts, bonus records, cryptocurrency addresses). This data belongs entirely to you. We store it to provide the StreamTools service and do not use it for any other purpose.

Payment information

Subscription payments are processed via third-party providers (e.g. cryptocurrency payment processors). We record transaction hashes and plan status, but never store full payment card details on our servers.

3. How We Use Your Information

  • To provide, operate, and maintain the StreamTools platform.
  • To authenticate you and secure your account.
  • To process subscription payments and manage billing.
  • To send service-related notifications (e.g. account security alerts).
  • To detect and prevent fraud, abuse, and security threats via rate-limiting and anomaly detection.
  • To improve the platform based on aggregate, anonymised usage patterns.

We do not sell your personal data or your community members' data to third parties. We do not use your data for advertising.

4. Data Storage & Security

All data is stored in an encrypted SQLite database. Sensitive fields use per-account encryption keys derived from your credentials. Passwords are hashed with a strong one-way algorithm before storage. API keys are generated with cryptographically secure random bytes and are prefixed to allow instant identification and revocation.

We apply HTTP security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options) to all responses. Access to sensitive administrative routes is protected by separate authentication flows.

While we take reasonable precautions, no system is completely secure. If you discover a security vulnerability, please contact us at security@streamtools.gg before public disclosure.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, all personally identifiable information and community member data is permanently deleted within 30 days, except where retention is required by law.

6. Cookies

StreamTools uses a single first-party session cookie (streamtools_session) to keep you logged in. We do not use advertising cookies or third-party tracking cookies. A separate cookie (streamtools-theme) stores your light/dark mode preference locally.

7. Third-Party Services

StreamTools may integrate with the following third-party services:

  • Google Fonts – for typography. Google's privacy policy applies.
  • Cryptocurrency payment processors – for subscription billing.
  • Webhook destinations you configure – outbound POST requests to URLs you provide.

We are not responsible for the privacy practices of third-party services.

8. Your Rights

Depending on your jurisdiction you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your data ("right to be forgotten").
  • Export your data in a machine-readable format (available in dashboard → Settings → Data).
  • Object to or restrict certain processing.

To exercise any of these rights, email us at privacy@streamtools.gg. We will respond within 30 days.

9. Children

StreamTools is intended for users aged 18 and over. We do not knowingly collect personal information from children under 18. If you believe a minor has created an account, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of StreamTools after changes constitutes acceptance of the revised policy.

11. Contact Us

Questions or concerns about this policy? Reach us at: privacy@streamtools.gg