Privacy Policy

About this notice

This notice explains how The Streamstones website at thestreamstones.live handles personal data and connected-service data.

Data processed by the website

• Technical request data: the server may record IP address, browser/user-agent information, requested URL, date/time and security events so the site can be operated, protected and diagnosed.
• Account data: if you create or use an account, the website stores the information needed to provide and secure that account.
• Cart and order data: the shop may process information you actively provide when cart, checkout or order functions are used.

Cookies

Ordinary anonymous page views do not require advertising cookies. The website and shop may use strictly necessary session, login, cart or security cookies when you sign in or use those functions.

Google and YouTube data

When an authorized Streamstones operator connects a YouTube channel, The Streamstones uses Google OAuth and the YouTube Data API to operate the live-stream integration. The application may access information about the authenticated YouTube channel, discover the active live broadcast and live chat, read live-chat messages and video comments, and publish messages that are explicitly approved or generated as Streamstones system messages.

The Streamstones does not ask for or store the operator’s Google password. OAuth client credentials are kept server-side. The long-lived OAuth refresh token is stored encrypted on the Streamstones server; short-lived access tokens are used to communicate with Google APIs.

Google/YouTube user data is used only to provide, secure and operate Streamstones live-stream features, including chat display, moderation, interaction handling, operator controls and live-session records. It is not sold or used for advertising. It is not shared with third parties except where necessary to operate the service or comply with law.

You may revoke Streamstones access at any time from your Google Account permissions. An authorized Streamstones operator can also disconnect the YouTube integration, which removes the stored refresh token. Requests relating to retained account or live-interaction data can be made through the Contact page.

The Streamstones’ use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Live and embedded services

Live video, camera or other third-party embeds are shown only when an integration is enabled. An external provider may receive normal connection information such as your IP address and browser data when its content is loaded.

How long data is kept

Technical and security records are retained only for operational and security needs. Account and transaction records may be retained for administrative, legal and accounting obligations. Live-interaction records such as chat or event history may be retained when needed for session history, moderation, abuse prevention, support or auditability.

Your rights

Where applicable, you may request access to, correction of or deletion of personal data, and may have additional rights under data-protection law. Requests can be made through the Contact page.

Updates

This notice may be updated when public services, payments, analytics, external embeds or data-processing functions change.