1. Who we are
Stream Collections is operated by Steven Dickinson, trading as Stream Collections. Steven Dickinson is the controller of the personal information described in this policy unless a separate notice says otherwise.
Privacy and account enquiries can be sent to support@steveyde.co.uk or by post to 124 City Road, London, EC1V 2NX, United Kingdom.
2. Where this policy applies
This policy covers streamcollections.click, the Stream Collections Twitch Extension, creator and collector dashboards, collection books, claim links, OBS and Stream Buddy tools, and related support interactions. Twitch, Stripe, and other third-party services have their own privacy policies for data they process independently.
3. Information we collect
Twitch and account information
- Twitch user ID, login, display name, profile image, and email address when Twitch supplies it.
- Account roles, authorised Twitch scopes, access tokens, refresh tokens, and token expiry information.
- Follow or subscription status when you authorise the relevant Twitch permission.
- Twitch Extension identity only after you choose to share it through Twitch.
Collection and creator activity
- Collections joined, stamps earned, claim attempts, check-ins, progress, completion, and activity history.
- Creator profiles, collection settings, stamp criteria, Twitch reward links, and EventSub status.
- Referral visits, creator invite attribution, leaderboard results, and use of creator or collector tools.
- Content you provide, including names, descriptions, links, codes, prompts, and uploaded artwork.
Payments and service records
- Gem balances and ledger entries, purchases, recoveries, refunds, subscriptions, and creator earnings records.
- Twitch Bits Extension transaction identifiers, product SKU, amount, channel, stamp, and signed receipt-verification records.
- Stripe customer, payment, invoice, subscription, Connect, transfer, refund, and dispute identifiers.
- We do not receive or store your complete payment-card number; Stripe handles payment details.
Technical information
- Session identifiers, requested pages, referrer, browser or device user agent, and timestamps.
- Security, diagnostic, request, and error information supplied by our hosting and infrastructure providers.
- A sessionStorage visit identifier used to avoid counting the same signed-in visit repeatedly.
4. How we use information
We use personal information to:
- authenticate accounts and connect the correct Twitch and Stream Collections identities;
- operate collection books, stamp progress, creator tools, overlays, rewards, and support features;
- verify and fulfil eligible Twitch Bits stamp exchanges and prevent duplicate or fraudulent fulfilment;
- process payments, subscriptions, refunds, creator earnings, and accounting records;
- protect accounts, investigate misuse, diagnose failures, and keep the service secure;
- measure product use and improve reliability, accessibility, and collection experiences;
- communicate important service, account, billing, or policy information; and
- comply with legal, tax, accounting, fraud-prevention, and regulatory obligations.
5. Our lawful bases
- Contract: to provide the service, account, collection, or paid feature you request.
- Legitimate interests: to secure, maintain, understand, and improve Stream Collections, provided those interests do not override your rights.
- Legal obligation: for tax, accounting, fraud, law-enforcement, and regulatory requirements.
- Consent: where we ask for an optional permission, including sharing Twitch Extension identity or granting additional Twitch scopes. You may withdraw consent, although some personalised features may then stop working.
6. What other people can see
Published creator profiles, public collections, stamp artwork, creator display names, and selected collection statistics may be visible publicly. Collector display names, earned stamps, completion, or leaderboard information may be visible where the relevant collection experience clearly presents it. Private and draft creator information is not intended for public display.
The Twitch Extension can show public channel collection information without shared identity. Personal collector progress is returned only after Twitch identity is shared and the Extension token is verified.
7. Service providers and disclosures
We disclose only the information reasonably needed for providers to perform their services:
- Twitch: authentication, identity, channel information, rewards, subscriptions, follows, chat-related tools, Twitch Bits transaction receipts, and the Twitch Extension.
- Supabase: database, authentication-related records, file storage, and realtime infrastructure.
- Vercel: website hosting, delivery, request processing, and technical logs.
- Stripe: checkout, subscriptions, refunds, fraud prevention, and creator payout onboarding.
- OpenAI: prompts and source images submitted to optional AI artwork features.
We may also disclose information when required by law, to protect users or the service, during a business reorganisation, or with your direction. We do not sell personal information or use it for third-party advertising.
8. Cookies and local storage
Stream Collections uses an essential, secure session cookie to keep you signed in. Temporary OAuth cookies protect Twitch login and remember the requested return path. The website and Extension may use sessionStorage or localStorage for short-lived interface state, visit deduplication, identity-flow state, and saved display choices. We do not currently use third-party advertising cookies.
9. Retention
We retain account and collection information while your account is active and for as long as reasonably needed to provide the service, resolve disputes, prevent abuse, and meet legal obligations. Financial, transaction, tax, refund, and creator payout records may be kept for the legally required period. Revoked sessions and technical records may be retained for a limited security and diagnostic period.
Some collection history may need to remain after content is archived so that collector progress, creator records, and transactions remain accurate. We delete or anonymise information when it is no longer required, unless law or an active dispute requires continued retention.
10. International transfers and security
Our providers may process information outside the United Kingdom. Where required, we rely on adequacy regulations or appropriate contractual and organisational safeguards. We use access controls, encrypted transport, restricted service credentials, hashed session tokens, and server-side authorisation checks. No online service can guarantee absolute security.
11. Your rights
Depending on where you live, you may have rights to access, correct, erase, restrict, or receive your personal information, object to certain processing, and withdraw consent. You may also complain to the UK Information Commissioner's Office or your local data-protection authority.
Send a request to support@steveyde.co.uk. We may need to verify your identity before acting. You can also revoke Stream Collections permissions through Twitch and sign out to revoke the current website session.
12. Children and automated decisions
Stream Collections is not intended for children under 13. Users must also meet Twitch's age requirements. We do not make decisions that produce legal or similarly significant effects using solely automated processing.
13. Changes and contact
We may update this policy as the service or law changes. Material changes will be highlighted through the service where practical, and the effective date above will be updated. Questions and privacy requests can be sent to support@steveyde.co.uk.