Privacy Policy

We collect only what we need to run the service:

• Account & identity. When you sign in or connect a platform (Twitch, YouTube/Google, or Spotify), we receive your account identifier, display name, email, and profile details that the platform shares with us through OAuth.
• Platform access tokens. To read your stream, chat, and playback data on your behalf, we store the OAuth access and refresh tokens you authorise. These tokens are encrypted at rest.
• Stream & channel activity. Support events (follows, subscriptions, bits, raids), chat messages, Super Chats, memberships, and related metadata from your connected channels.
• Spotify playback. If you connect Spotify, we read your currently playing track and playback state to display and control it, as authorised by you.
• Billing information. If you subscribe to a paid plan, our payment provider Polar (Polar Software Inc.) acts as the merchant of record and handles your payment details. We do not store your full card details; we retain records such as your subscription status and plan.
• Preferences & goals. Settings such as enabled features, stream goals, and theme.
• Waitlist email. If you join the waitlist, we store the email address you provide so we can contact you about access.

• Provide the dashboard, live event feed, chat view, goals, and analytics.
• Authenticate you and keep your connected platform integrations working.
• Display your channel activity back to you in real time and in your history.
• Process subscriptions and manage your plan where you choose a paid tier.
• Communicate with you about access, service changes, and support.
• Diagnose problems, prevent abuse, and keep the service secure.

We do not sell your personal data, and we do not use your chat or channel content for advertising.

CreatorDeck integrates with third-party platforms using their official APIs and OAuth. When you connect an account, that platform’s own privacy policy and terms also apply to the data it shares with us. We request only the permissions needed for the features you use, and you can revoke our access at any time from the platform’s account settings. The scopes we request are:

• Twitch: your email and identity, subscriptions, followers, chat, and bits (user:read:email, channel:read:subscriptions, moderator:read:followers, chat:read, user:read:chat, bits:read).
• YouTube (Google): read-only access to your YouTube account, channel, and live chat (https://www.googleapis.com/auth/youtube.readonly, plus openid email profile).
• Spotify: read and control your current playback (user-read-playback-state, user-modify-playback-state, user-read-currently-playing).

CreatorDeck uses YouTube API Services. By connecting your YouTube account, you also agree to the YouTube Terms of Service, and your data is handled in accordance with the Google Privacy Policy.

What we access from YouTube. Using read-only access to your own YouTube account, we read your channel and live broadcast metadata and your live chat — including chat messages and Super Chats — while you are streaming. We display this activity back to you in real time on your dashboard and event feed. Chat messages are relayed to your dashboard in real time and are not stored on our servers. Super Chat events are saved to power your event feed and revenue analytics; the broadcast session details we use to follow your live chat are kept only while you are live and deleted when your stream ends (see “Data retention” below). OAuth tokens are encrypted at rest. We do not use your YouTube data for advertising and we do not share it except with the sub-processors listed below.

Revoking YouTube access.You can revoke CreatorDeck’s access to your Google/YouTube account at any time from your Google security settings, or by disconnecting YouTube from your CreatorDeck connections settings. Either action stops further data collection and deletes the YouTube data we have stored for your account.

CreatorDeck’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use your Google/YouTube data to provide and improve the user-facing features described above.

We use strictly necessary cookies to keep you signed in and to secure your session (set through our authentication provider). These are essential to operate the service. We do not use advertising or third-party tracking cookies.

Your data is stored in a hosted database. Sensitive credentials such as OAuth tokens are encrypted at rest, and access is limited to what is required to operate the service. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

We do not sell your data. We share it only with service providers that process data on our behalf under confidentiality obligations, and where required by law. Our main sub-processors are:

• Neon — managed database hosting.
• Polar — payment processing and merchant of record for paid plans.
• Our hosting provider — application hosting and delivery.
• Twitch, Google/YouTube, and Spotify — the platforms you connect, which provide the data you ask us to display.

We may also disclose data when required by law or to protect the rights, safety, and security of CreatorDeck and its users. Some of these providers may process data outside your country; where they do, appropriate safeguards apply.

CreatorDeck account data (email address, dashboard settings, platform connections) is retained for as long as your account is active. Your YouTube live chat messages are processed in real time and are not stored on our servers. Super Chat events retrieved from YouTube API Services are stored for a maximum of 30 days, after which they are automatically deleted. Broadcast session information is kept only while you are live and is deleted when your stream ends. Aggregated, non-identifying statistics may be retained beyond this period. Google OAuth tokens are stored for as long as your Google account remains connected. When you disconnect your Google account or revoke access via your Google security settings, stored YouTube data associated with your account is deleted.

You can disconnect any connected platform yourself at any time from your CreatorDeck connections settings — this revokes the stored tokens and stops further data collection for that platform. In addition, under the GDPR you may:

• Request access to, correction of, or deletion (“erasure”) of your personal data.
• Object to or restrict certain processing, and request data portability.
• Revoke CreatorDeck’s access from your Twitch, Google, or Spotify account settings.
• Ask to be removed from the waitlist or other communications.

You can permanently delete your account and all associated data yourself at any time from your account settings (Account → Danger Zone). This erases your connected platforms, tokens, and stored stream and chat history, and cancels any active subscription. Alternatively, you can email us at contact.itsspekkie@gmail.com and we will action it. If you are in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens.

CreatorDeck is not directed to children under 16, and we do not knowingly collect their personal data.

We may update this policy from time to time. When we do, we will revise the “Last updated” date above. Significant changes may be communicated to you directly.

Questions about this policy or your data? Contact Tom Spek at contact.itsspekkie@gmail.com.