Privacy Policy

StreamForge is a desktop app and set of online services for live streamers. This policy explains what information we collect, why, where it is kept, who it is shared with, and the choices you have. We have tried to write it plainly and to be specific about what the app actually does.

Who we are

StreamForge ("we", "us", "our") operates the StreamForge desktop app and the services at stream-forge.co.uk and sync.stream-forge.co.uk, and is the data controller for the information described here. We are based in the United Kingdom. For any privacy question or request, email hello@stream-forge.co.uk.

What we collect

Your StreamForge account

• Sign-up details — email address, display name and avatar, whether you sign up with an email and password or with Discord or Google. Passwords are stored only as salted hashes.
• Subscription — your plan, its status and renewal date, received from our payment processor Stripe. We never see or store card details.
• Referrals, friends and agency membership — which code you joined with, your friend code, and the agency you belong to if you join one.
• Synced settings — the app configuration you create (overlays, alerts, sounds, automations, rules, channel names and similar) so it follows your account between your devices. Your platform stream keys and the app's session tokens are excluded from this sync. Note that if you log in to TikTok inside the app, your TikTok session cookie is part of the synced settings so it is available on your other devices.

Things you choose to publish or upload

• Files you upload — images, GIFs and short clips you pick for alerts and entrances are stored on our server so your overlay link can show them anywhere.
• Bio page — if you claim a public link-in-bio page, its handle, name, bio, links and images are published at stream-forge.co.uk/u/<handle>.
• Community posts — crosshairs you post to the community, and Founders feed posts you opt into.

Stream data handled for you

• Live events — chat messages, gifts, follows, subscriptions, raids and similar events from your connected platforms are processed on your PC. When you use our cloud overlay links, these events pass through our server in real time to reach your browser sources; the latest overlay state is held in memory only and is not written to a database.
• Viewer points — if you use the channel-points economy, your viewers' usernames and point balances are backed up to your account (with up to 14 daily snapshots) so they survive a reinstall or a new PC.
• Tips — if you connect Ko-fi, the tip notification Ko-fi sends (supporter name, message and amount) is passed through our server to your app.

Technical and diagnostic data

• App version, approximate uptime, and counts of calls made to third-party live APIs (route names and numbers only — no stream content), used to keep the shared service within its limits.
• Server error logs (the time, what failed and, where relevant, the account involved) kept for troubleshooting. We do not keep logs of every request or your IP address history.
• GIF library searches are sent to our GIF provider (see below) with an anonymous identifier derived from your account, never your name or email.

We do not use advertising trackers or sell personal data. This site sets no third-party advertising cookies.

Linked streaming platforms

You can link Twitch, YouTube, Kick, TikTok, Spotify, Discord and Ko-fi. Linking is always your choice and you can unlink at any time from the Connections page in the app.

YouTube & Google user data

When you sign in with Google (to create or open a StreamForge account) we receive your name, email address and profile picture, used only to identify your StreamForge account.

When you link YouTube in the app, we request the YouTube scopes youtube.readonly and youtube.force-ssl and use them only for these features, each started by you:

• reading your channel's ID, name, handle and avatar so the app knows which channel is yours;
• finding your current live broadcast and its live chat, so replies from StreamForge (games, commands, automations you set up) can be posted to your chat;
• reading and, when you press Update, changing your live stream's title and category;
• reading your stream key, only to fill in the Stream Relay when you go live through it.

Reading your live chat itself uses YouTube's public live-chat page, not your login.

Storage. We store your YouTube refresh token and your channel ID, name and handle on our server, linked to your StreamForge account, so you stay logged in across restarts and devices. Everything else retrieved from YouTube (titles, categories, chat) is used in the moment and is not stored on our servers.

Sharing. We do not sell, rent or share YouTube or Google user data with anyone, and we do not use it for advertising. It is never used to train AI or machine-learning models.

Limited Use. StreamForge's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access. Press Log out on the YouTube card in the app's Connections page, which deletes the stored refresh token from our server. You can also remove StreamForge's access at any time at myaccount.google.com/permissions; we then lose access immediately and delete the stored link the next time it is used. Deleting your StreamForge account deletes it too.

What stays on your PC

• Stream keys for the Stream Relay (encrypted by Windows) — your video goes from your PC straight to each platform; it does not pass through our servers.
• Clips you save, your sound files, Twitch and Spotify logins, and local logs.
• Text-to-speech, sound alerts and most overlay rendering run on your machine.

How we use data

We use the information above to: run and secure your account; check your subscription; sync your settings and back up your viewer points; deliver events to your overlays and alerts; carry out platform actions you ask for (chat replies, title changes, moderation, fetching stream keys); show your public bio page and community posts; send account emails (sign-in, receipts, important service notices); provide support; and keep the service within the limits of the platforms and providers it depends on. Our legal bases under UK GDPR are performing our contract with you, our legitimate interest in running a secure and reliable service, and your consent where we ask for it (for example linking a platform), which you can withdraw at any time.

Who we share data with

We only share what each provider needs to do its job for us:

• Stripe — payments and subscriptions.
• Resend — sending account emails.
• Our hosting provider (UK) — runs our servers and database.
• EulerStream — signs TikTok LIVE requests made on your behalf.
• KLIPY — the GIF library search (search terms and an anonymous ID only).
• Discord, Google, Twitch, Kick, TikTok, Spotify, Ko-fi — when you link them, to provide the features above.

We may also disclose information if the law requires it. Some providers process data outside the UK; where they do, they rely on recognised safeguards such as the UK International Data Transfer Addendum or adequacy decisions.

Retention & deletion

• Account data and synced settings are kept while your account exists.
• Platform links (YouTube, Kick) are deleted when you log out of that platform in the app, revoke access at the platform, or delete your account.
• Viewer-point backups keep the latest copy plus up to 14 daily snapshots.
• Uploaded files and bio pages stay until you remove them or delete your account.
• Server error logs are kept for a limited period for troubleshooting, then removed.
• Billing records are kept as long as UK tax and accounting law requires.

To delete your account and its data, email hello@stream-forge.co.uk from the address on the account. We will complete it within 30 days, apart from records we must keep by law.

Your rights

Under UK data protection law you can ask to access, correct, delete, restrict or move your personal data, and object to how we use it. Email hello@stream-forge.co.uk and we will respond within one month. If you are unhappy with our answer you can complain to the UK Information Commissioner's Office at ico.org.uk.

Security

All traffic to our services uses TLS. Session tokens are signed, logins and keys kept on your PC are encrypted by your operating system, platform refresh tokens on our server are only usable by your signed-in account, and access to our servers is restricted. No system is perfectly secure, but we work to protect your data and will tell affected users promptly if a breach puts it at risk.

Children

StreamForge is not intended for anyone under 13, and you must also meet the minimum age of each platform you link. We do not knowingly collect data from children under 13; if you believe a child has given us data, contact us and we will delete it.

Changes to this policy

If we change this policy we will update this page and the date at the top, and for significant changes we will also let you know in the app or by email.