Introduction
Welcome to StreamSailor ("we," "our," or "us"). StreamSailor is a live game streaming platform that lets users broadcast, watch, and engage with gaming content from around the world.
This Privacy Policy explains how StreamSailor collects, uses, discloses, and safeguards your personal information when you use our mobile application ("App"), our website at streamsailor.app ("Site"), and any related services (collectively, the "Services").
By downloading the App, accessing our Site, or using our Services, you agree to this Privacy Policy. If you do not agree, please do not use our Services.
🔒 Our Core Privacy Principles
We collect only what we need, protect what we collect, and give you control over your data. We will never sell your personal information to third parties for their own marketing purposes.
Information We Collect
We collect information in the following ways:
A. Information You Provide Directly- Account Registration: Username, email address, password (stored as a secure hash), date of birth, and optional profile photo.
- Profile Information: Display name, biography, social media links, and any other optional profile details you choose to add.
- Payment Information: If you purchase Sailor Coins or a premium subscription, billing name, payment card details, and billing address. Payment data is processed by our PCI-DSS-compliant payment processors and is not stored on our servers.
- Communications: Messages you send us via support tickets, feedback forms, or email correspondence.
- Stream Content: Video, audio, and chat content you broadcast or post during streaming sessions.
- Device Information: Device type, operating system version, unique device identifiers (IMEI, IDFA, GAID), and mobile network information.
- Usage Data: Features used, streams watched, duration of sessions, clicks, scrolls, search queries, and interaction events within the App.
- Log Data: IP address, access times, pages or screens viewed, app crashes, and error logs.
- Location Data: Country or region inferred from IP address. We do not collect precise GPS location unless you explicitly grant permission.
- Camera & Microphone: Accessed only during active streaming sessions, with your explicit permission. We do not record or store camera/microphone data outside of your live streams.
- Social Sign-In: If you log in with Google, Apple, or another provider, we receive your name, email address, and profile picture from that provider.
- Analytics Partners: Aggregated analytics about app performance and user behaviour from providers like Firebase and Mixpanel.
How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Legal Basis (GDPR) | Data Used |
|---|---|---|
| Create and manage your account | Contract performance | Name, email, password |
| Provide & improve our Services | Legitimate interests | Usage data, device info |
| Personalise your content feed | Legitimate interests / Consent | Watch history, interactions |
| Process payments & Sailor Coins | Contract performance | Billing info, transaction data |
| Send transactional emails | Contract performance | Email address |
| Send promotional communications | Consent | Email, push notification token |
| Ensure platform safety & moderation | Legal obligation / Legitimate interests | Content, reports, IP address |
| Fraud prevention & security | Legal obligation / Legitimate interests | IP, device ID, log data |
| Analytics & research | Legitimate interests | Aggregated / anonymised data |
| Legal compliance | Legal obligation | As required by applicable law |
How We Share Your Information
We do not sell your personal information. We may share it only in the following circumstances:
- Service Providers: Trusted third parties that help us operate the platform — such as cloud hosting (AWS / Google Cloud), payment processors (Stripe), email delivery (SendGrid), analytics (Firebase), and customer support tools. These providers process data only on our behalf and are bound by data processing agreements.
- Other Users (Public Content): Your username, profile picture, stream content, and public chat messages are visible to other users as part of the platform's core functionality.
- Business Transfers: If StreamSailor is involved in a merger, acquisition, or asset sale, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
- Law & Safety: We may disclose information when required by law, court order, or government authority, or when necessary to protect the rights, safety, or property of StreamSailor, our users, or the public.
- With Your Consent: We will share your information with any other party only when you explicitly consent to such disclosure.
⚠️ Streamer Earnings Reports
If you are a monetised streamer, we may share aggregated financial summaries with relevant tax authorities as required by law in your jurisdiction.
Cookies & Tracking Technologies
We use cookies and similar tracking technologies on our website and app. These include:
- Essential Cookies: Required for core functionality such as authentication sessions and security. These cannot be disabled.
- Performance Cookies: Help us understand how visitors use our Site (e.g., Google Analytics). Data is anonymised where possible.
- Functional Cookies: Remember your preferences (e.g., language, video quality) to personalise your experience.
- Advertising / Targeting Cookies: Used to show you relevant promotional content. These are only set with your consent.
You can manage cookie preferences through your browser settings or our in-app privacy centre. Note that disabling certain cookies may affect the functionality of our Services.
Our App may also use mobile advertising identifiers (IDFA on iOS, GAID on Android) for analytics and attribution. You can reset or limit these identifiers in your device settings.
Data Retention
We retain your personal information for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law.
| Data Type | Retention Period |
|---|---|
| Account information | Until account deletion + 30 days for recovery |
| Stream VODs (Videos on Demand) | 90 days by default; indefinite if saved by streamer |
| Chat messages | 60 days post-stream (moderation purposes) |
| Payment records | 7 years (legal & tax obligation) |
| Log & security data | 90 days |
| Support correspondence | 3 years after ticket resolution |
| Anonymised analytics | Indefinitely (no personal identifiers) |
After the retention period ends, we securely delete or anonymise your data. You may request early deletion at any time (see Section 7).
Your Rights & Choices
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Ask us to correct inaccurate or incomplete data.
- Deletion: Request that we delete your personal data ("right to be forgotten"). Some data may be retained for legal obligations.
- Portability: Receive your data in a structured, machine-readable format to transfer to another service.
- Restriction: Ask us to limit how we process your data in certain circumstances.
- Objection: Object to processing based on legitimate interests, including profiling and direct marketing.
- Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.
- Lodge a Complaint: File a complaint with your local data protection authority (e.g., ICO in the UK, CNIL in France).
California Residents (CCPA): You have the right to know what personal information is collected and sold, to opt out of any sale of your data (we do not sell data), and to non-discrimination for exercising your rights.
✅ How to Exercise Your Rights
Go to Settings → Privacy Centre in the App, or email us at privacy@streamsailor.app. We will respond within 30 days. Identity verification may be required.
Children's Privacy
StreamSailor is intended for users who are 13 years of age or older. We do not knowingly collect personal information from children under 13 (or under 16 in the European Economic Area).
If we become aware that we have collected personal information from a child under the applicable age limit without verifiable parental consent, we will take steps to delete that information as soon as possible.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@streamsailor.app so we can take appropriate action.
⚠️ Parental Controls
We encourage parents and guardians to monitor their children's use of online platforms. StreamSailor offers content filtering and parental controls accessible through the App settings.
Data Security
We implement industry-standard technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These include:
- Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.3.
- Encryption at Rest: Sensitive data stored on our servers is encrypted using AES-256.
- Access Controls: Strict role-based access controls ensure only authorised personnel can access user data, on a need-to-know basis.
- Regular Audits: We conduct regular security audits and penetration testing.
- Incident Response: We maintain a data breach response plan and will notify affected users and regulators within 72 hours of discovering a breach, as required by law.
- Password Hashing: Passwords are stored using bcrypt with a high cost factor — we never store plain-text passwords.
While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We encourage you to use a strong, unique password and enable two-factor authentication in your account settings.
International Data Transfers
StreamSailor operates globally. Your personal information may be transferred to, stored, and processed in countries other than your country of residence, including countries that may have different data protection laws.
When we transfer personal data from the European Economic Area (EEA), UK, or Switzerland to countries not deemed "adequate" by the European Commission, we rely on approved transfer mechanisms, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Adequacy Decisions for transfers to countries the EC has deemed adequate.
- Binding Corporate Rules where applicable with our group companies.
By using our Services, you acknowledge that your data may be transferred internationally in accordance with these safeguards.
Third-Party Services & Links
Our Services may contain links to third-party websites, apps, or services (e.g., social media platforms, game publishers, streamer merchandise stores). This Privacy Policy does not apply to those third-party services.
We use the following key third-party service providers whose privacy practices you should also be aware of:
- Google / Firebase — Analytics, crash reporting, push notifications (Privacy Policy)
- Stripe — Payment processing (Privacy Policy)
- Amazon Web Services (AWS) — Cloud infrastructure and CDN (Privacy Policy)
- SendGrid — Transactional email delivery (Privacy Policy)
We encourage you to review the privacy policies of any third-party services you interact with through our platform.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
When we make material changes, we will:
- Update the "Last Updated" date at the top of this page.
- Send you an in-app notification and/or email alert prior to the change taking effect.
- For significant changes, request your re-consent where required by law.
Your continued use of the Services after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the updated policy, please discontinue use and delete your account.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us:
StreamSailor Data Protection Team
📧 Email: privacy@streamsailor.app
📬 Subject line: "Privacy Policy Inquiry"
⏱ Response time: We aim to respond to all privacy requests within 30 days.
For EU/UK users, you also have the right to lodge a complaint with your local supervisory authority if you believe we have not handled your data appropriately.