Privacy policy
Last updated: October 6, 2026
Martin Lechêne (Braine-le-Comte, Belgium — contact@streamcrea.com), publisher of StreamCrea, is the controller of the personal data described below, under the General Data Protection Regulation (GDPR). For any question about your data: contact@streamcrea.com.
Data processed
| Category | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Account | e-mail, display name, avatar, OAuth identifiers (Twitch, Google, Discord), date and version of the accepted terms | create and manage your account, security (2FA, passkeys) | performance of the contract | lifetime of the account; erased from backups within 30 days after deletion |
| Brand identity | channel name, handle, games, mood, colours, references, uploaded logo | generate and keep your brand kit | performance of the contract | lifetime of the account |
| Generations | prompts, settings, generated files, cost | provide the service, history, credit accounting | performance of the contract | lifetime of the account; failed: 14 days; in the trash: 30 days |
| Personal API keys (BYOK) | encrypted keys | run your generations with the chosen provider | performance of the contract | until you delete them |
| Platforms | encrypted access tokens, channel ID and name, live events (follows, subscriptions, chat messages) | control room, alerts, automations | performance of the contract | events: 30 days; tokens: until disconnected |
| Live studio | encrypted stream keys, destinations, broadcast sessions (start, end, minutes charged); picture and sound in transit only | broadcast from the browser, charge the minutes | performance of the contract | sessions: lifetime of the account; picture and sound: never recorded |
| Payment | Stripe customer ID, purchases, invoices, consent to immediate performance (date, time, IP address) | sell credits and the subscription, proof of consent, accounting obligations | performance of the contract, legal obligation | 7 years (accounting) |
| Technical | IP address, logs, errors | security, diagnostics | legitimate interest | logs: 14 days; errors: 90 days at most |
| News list (early access) | e-mail; platform, audience and channel name (optional); demo theme you chose; language | tell you about new features | consent (double opt-in) | until you unsubscribe; unconfirmed: 7 days |
| Audience measurement (if enabled) | pseudonymous identifier, pages viewed, features used | improve the product | consent | 12 months |
StreamCrea never stores card data. No decision with legal effects is taken solely on the basis of automated processing, and your data is neither sold nor used for advertising.
What AI engines receive. To generate, we send them the prompt and, where relevant, reference images. The prompt may contain your channel name, your handle and what you described (games, mood). Never your e-mail address, your password or your login identifiers.
Where some data comes from. When you sign in with Twitch, Google or Discord, or link Twitch, Kick, YouTube or Discord, the platform sends us your identifier, display name, avatar and e-mail (sign-in) or the permissions requested (control room).
Recipients and processors
We only share your data with the providers needed to run the service, bound by a data processing agreement:
| Provider | Role | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| Hetzner Online GmbH | hosting of the application, database and generated files | all | Germany (EU) | — |
| Stripe (Stripe Payments Europe Ltd, Stripe, Inc.) | payments, invoices | e-mail, purchases, payment data | Ireland (EU), United States | EU–US Data Privacy Framework, standard contractual clauses |
| Resend (Plus Five Five, Inc.) | sending e-mails (confirmation, security, news list) | e-mail, message content | United States | standard contractual clauses |
| Sentry (Functional Software, Inc.) | error tracking | technical information, without IP address or e-mail | United States | Data Privacy Framework, standard contractual clauses |
| Agnes AI (Singapore Sapiens Technology) | image generation (default engine) | generation prompt | Singapore | standard contractual clauses |
| Cloudflare, Inc. (Workers AI) | image generation (fallback engine) | generation prompt | United States and global network | Data Privacy Framework, standard contractual clauses |
| Pollinations (pollinations.ai) | text and image generation (default or fallback engine) | generation prompt | European Union and infrastructure providers outside the EU | standard contractual clauses |
| BunnyWay d.o.o. (Bunny Fonts) | fonts of the demo themes and animations | IP address (when a font loads) | Slovenia (EU) | — |
| PostHog, Inc. (EU hosting) | audience measurement, only with your consent and if enabled | pseudonymous identifier, usage | Germany (EU) | — |
| Live studio video relay (server run by the publisher) | carry your picture and sound to the platform | audio and video stream in transit, stream key | European Union | — |
AI engines you choose. If you plug in your own key (OpenAI, Anthropic, Google Gemini, Mistral, OpenRouter, Groq, DeepSeek, xAI, Together, DeepInfra, OpenCode, or a compatible endpoint), the generation prompt is sent to that provider under its terms, which you accepted with it. Some are established outside the EU (United States, China for DeepSeek): by choosing one, you request that transfer. A local engine (Ollama, LM Studio) sends nothing outside your machine.
Streaming platforms. Twitch (Twitch Interactive, Inc., United States), YouTube and Google (Google LLC, United States; Google Ireland Ltd), Kick (Kick Streaming Pty Ltd, Australia) and Discord (Discord Inc., United States) are not our processors: they are services you ask us to link to your account, each responsible for its own processing. Game cover images shown during onboarding are loaded from Twitch's image servers.
Your viewers. Events from your platforms (chat, follows, subscriptions) contain third-party data. For your channel, you are the controller and StreamCrea acts as your processor; these events are erased after 30 days.
The list of processors is updated with every new provider; the date at the top of the page then changes.
YouTube and Google data
- When you link your YouTube channel, StreamCrea uses the YouTube API Services (
youtube.readonlypermission) to read your channel name and ID as well as the chat and events of your live stream, to show them in your control room and trigger your alerts. By using this feature, you agree to the YouTube Terms of Service. How Google processes your data is described in the Google Privacy Policy. - When you sign in with Google, we only receive your identifier, name, profile picture and e-mail address (
openid,profile,email). - StreamCrea's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. This data is only used for the features described above: it is not sold, not used for advertising, not used to train AI models, and nobody reads it except with your consent, for security or to comply with the law.
- Access tokens are encrypted. Chat events are erased after 30 days; tokens and channel data are erased as soon as you disconnect YouTube or Google in your settings, or delete your account.
- You can revoke StreamCrea's access to your Google account at any time from Google's security permissions page, in addition to disconnecting from your settings.
Transfers outside the European Union
When a provider processes data outside the EU, the transfer relies on an adequacy decision of the European Commission (for the United States, the EU–US Data Privacy Framework, if the provider is certified) or on the Commission's standard contractual clauses, as shown in the table above. You can get a copy by writing to contact@streamcrea.com.
Your rights
You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw your consent at any time (without affecting what was done before). From your settings you can export your data and delete your account. For any other request: contact@streamcrea.com; we answer within one month. You may lodge a complaint with the data protection authority: Autorité de protection des données (APD), or the one of your country of residence.
Minimum age
The service is for people aged 16 or over. If you think an account belongs to someone younger, write to us: we will delete it.
Security
Encryption in transit (TLS) and at rest for secrets (API keys, tokens, stream keys), two-factor authentication and passkeys, logging of sensitive actions, encrypted backups. In case of a data breach likely to result in a risk to your rights, you will be informed within the deadlines set by the GDPR.
Cookies
See the cookie policy and the Manage my cookies page.
Changes
This policy may change (new provider, new feature). The date at the top of the page shows the version in force; for any significant change, we let you know by e-mail or in the app.