Privacy Policy

• Data you provide: the email address, password (stored only as a hash), and contact details you provide when registering, purchasing, or requesting a trial, plus any information needed to verify payment (such as the last five digits of a transfer). If you do not provide an email address and payment information, we will not be able to create an account for you or issue a license key.
• License data: the license key issued to you, the bound device identifier, and activation/verification records, used to maintain your device-based license.
• Public live-stream events: while the Service is running, it processes publicly broadcast gifts, comments, joins, and likes from the live-stream rooms you designate for real-time scoring and display. Likes and joins are processed in memory only. When optional chat archiving is configured and enabled, comment text, the viewer's platform user ID and nickname, and the event timestamp are uploaded in compressed batches to private object storage for session chat review and search. Our database stores archive references and interaction statistics rather than the full comment text. Without configured chat archiving, comment text is processed in memory only.
• Session reports: when your control console connects using a licensed key, each stream's gift record (the gifting viewer's platform ID and display name, the gift name, its diamond value, the time, and which member or team it was credited to) is uploaded and stored under your account so you can look it up and export a session report afterward.
• Optional profile-frame features: if you use the profile-frame feature, we may read the public avatar of the relevant public account for display purposes.
• Technical logs: connection and error logs (such as IP address, time, event type, and error content) used for debugging and abuse prevention.
• Website usage: the official website uses Google Analytics 4 / PostHog to measure traffic. See Section 4 and the Cookie Policy.

Ubicación del navegador (opcional): Si eliges «Compartir ubicación» al solicitar una prueba y permites que el navegador acceda a tu ubicación, guardamos tus coordenadas precisas, la precisión estimada y la hora de obtención junto con esa solicitud de prueba para confirmar tu región y darte soporte. Es una ubicación puntual, no un seguimiento continuo, y puede proceder del GPS, la red Wi-Fi o señales de red. Compartirla es opcional y no afecta a tu acceso a la prueba. Solo los administradores de TStar pueden verla; no se envía a plataformas de análisis, correos de notificación ni a Notion, y se conserva con los datos de tu cuenta de prueba según la Sección 7. Puedes quitarla antes de enviar la solicitud o contactarnos después para pedir que la eliminemos.

PostHog (región de EE. UU.): Usamos PostHog para saber, de forma anónima, cómo se usan el sitio web y la consola de escritorio: qué páginas del sitio se visitan y si se completan pasos como descargar, registrarse o pagar, y en la consola qué pantallas, herramientas y modos de juego se abren y si la conexión en vivo se mantiene estable. Solo usamos estos datos para detectar qué corregir y mejorar en TStar. Nunca incluyen tu cuenta, tu correo electrónico, claves de licencia, datos de espectadores ni grabaciones de pantalla, y la actividad solo se vincula dentro de la ventana que tienes abierta, sin un identificador duradero. En el sitio web, PostHog sigue tu elección de análisis en la configuración de cookies. En la consola está activado de forma predeterminada y puedes desactivarlo cuando quieras en Ajustes → Análisis de uso.

• To provide, maintain, and improve the Service's scoring, PK, and interactive game modes.
• To issue and verify license keys, maintain device-based licensing, and send service-related notifications.
• To generate your session reports, helping you reconcile gifting revenue and payout shares.
• To detect and prevent abuse, fraud, and violations of the Terms of Service.
• To respond to your inquiries and provide customer support, to the extent you consent.
• To understand usage of the Service and improve the product using aggregated statistics that do not identify any individual (for example, average session length site-wide).

With respect to the public data of your live-stream viewers, you (the streamer or guild) determine the purposes and means of collection, and we process such data on your instructions, protecting it under this Policy and the Data Processing Addendum in Section 7 of the Terms of Service.

• We do not log in to or act on behalf of your viewers' accounts, and we do not send gifts or messages on anyone's behalf.
• We do not sell, rent, or share your personal data in exchange for consideration (including the "sale" and "sharing" defined under California law).
• We do not use your data, or the event data from your live-stream room, to train AI models.
• We do not access your session data for any purpose other than providing the Service, customer support, operating the systems, and legal compliance — see Section 9 for our access rules.

The official website uses essential cookies (for example, to maintain your login state, remember your chosen language, and identify your visitor country) to keep it running, and uses Google Analytics 4 / PostHog to measure traffic.

En el Espacio Económico Europeo, Reino Unido y Suiza, el análisis requiere consentimiento previo. En otras regiones está activado por defecto hasta que lo rechaces. La medición publicitaria requiere consentimiento expreso por separado en todas las regiones; el consentimiento anterior para análisis no la activa. Puedes cambiar o retirar cualquiera de tus preferencias en Configuración de cookies en cualquier momento. Rechazar los usos opcionales no impide usar el sitio.

Solo con tu consentimiento expreso por separado y con el análisis activado, usamos eventos de Google Analytics 4 con Google Ads para medir si los anuncios generan registros y solicitudes de prueba. Este consentimiento permite el almacenamiento publicitario y el uso de datos de eventos para la medición. La publicidad personalizada permanece desactivada. No enviamos direcciones de correo ni listas de clientes para cotejarlas, ni hacemos remarketing.

For the full list of cookie names, purposes, and durations, see the Cookie Policy.

To provide the Service, we engage third-party service providers to process certain data, sharing only what is necessary. The full list, each provider's purpose, and where data is located are named on our Sub-processors List. We update that page whenever the list changes.

In addition, live-streaming platforms such as TikTok are the source of the public live-stream event data the Service uses; your relationship with such platforms is separately governed by their own privacy policies. For payments, card numbers are handled by our payment provider's own pages — we do not access or store card numbers.

Our servers and service providers are located outside Taiwan (primarily Japan and the United States, with some services using global edge networks), so your data may be stored or processed in a country other than the one you are in. See the Sub-processors List for each provider's location.

We rely on the following bases for cross-border transfers:

• Necessary for performance of a contract: transfer is an integral part of providing the Service you purchase and use.
• Contractual safeguards with service providers: our agreements with each service provider incorporate their data processing terms; for transfers involving the European Economic Area, the UK, or Switzerland, we rely on the EU Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement/Addendum (UK IDTA).
• Your consent: where local law requires separate consent for cross-border transfer (for example, South Korea or Vietnam), we will clearly disclose the recipient, destination country, purpose, and items to be transferred at the time of collection, and obtain your consent.

You can email hello@tstar.stream for further information about our transfer safeguards.

• Session reports: retained for twenty-four months from the end of the session, then automatically deleted. You may also request earlier deletion of an individual session or all sessions at any time.
• Account and license data: retained until you delete your account, or for ninety days after your license ends; transaction records are retained for the period required under tax law.
• Optional session chat archives: comment text, platform user IDs, nicknames, and timestamps are retained for up to 30 days after the session ends, then expire automatically. Access is restricted to the account authorized to view the session report. Aggregate comment counts, distinct commenter counts, and per-minute comment counts are retained with session reports for 24 months. Likes and join events remain memory-only. Earlier sessions are not backfilled; an expired or incomplete archive does not provide a complete chat history.
• Technical and error logs: retained for up to ninety days.
• Access records (Section 9): retained for twelve months for later audit.
• We take reasonable technical and organizational measures (such as end-to-end encrypted transmission, password hashing, and least-privilege access) to protect data security. In the event of a data breach likely to cause material harm to your rights, we will notify you and the competent authority within the timeframe required by applicable local law.

The Service is intended for streamers and guild operators who are at least 18 years old, and we do not knowingly collect personal data from children. With respect to your viewers, it is your (the streamer's or guild's) responsibility to confirm whether a viewer has reached the applicable age of consent — see Section 2 of the Terms of Service. If you believe we hold data about a minor without an appropriate basis, please email hello@tstar.stream and we will investigate and delete it.

Our personnel may access your account and session data to the extent necessary to provide the Service, handle issues you report, keep the systems running, and comply with the law or a request from a competent authority. Our internal rules limit access to those purposes, and we keep internal access records for after-the-fact review; you may email us to request the access records relating to your account. See Section 8 of the Terms of Service for details.

To the extent permitted by law, you may request to access, review, obtain a copy of, correct, or delete the personal data we hold about you, or request that we stop collecting, processing, or using it, or withdraw your consent. Please contact us at hello@tstar.stream; we will respond within a reasonable time and will not treat you differently for exercising your rights.

Depending on where you are located, you may also have the following rights:

• European Economic Area / UK / Switzerland: the rights to access, rectification, erasure, restriction of processing, objection to processing, and data portability, as well as the right to lodge a complaint with your local data protection authority. Depending on the circumstances, our legal basis for processing your personal data is performance of a contract, our legitimate interest in keeping the Service secure, or your consent.
• South Korea: under the Personal Information Protection Act, you may request access, correction, deletion, and suspension of processing, and may decline consent to optional items without affecting your use of essential features; cross-border provision separately requires consent as described in Section 6.
• Japan: under the Act on the Protection of Personal Information, you may request disclosure, correction, suspension of use, and disclosure of records of provision to third parties.
• Thailand / Indonesia / Malaysia / Philippines / Vietnam: you have the rights of access, correction, deletion, withdrawal of consent, and complaint provided under each jurisdiction's personal data protection law.
• United States (including California): you may request to know, delete, or correct the personal data we hold. We do not sell or "share" personal data, and we do not use your data for cross-context behavioral advertising.
• Taiwan: the rights of inquiry, review, copying, supplementation and correction, cessation of collection, processing, or use, and deletion provided under Article 3 of the Personal Data Protection Act.

If you believe our processing is unlawful, in addition to contacting us, you may also lodge a complaint with the personal data protection authority in your jurisdiction.

We may update this Policy from time to time and will post the updated date on the official website. For material changes, we will separately notify you by email to the address on your account at least thirty days before they take effect.