Privacy Policy

• Data you provide: the email address, password (stored only as a hash), and contact details you provide when registering, purchasing, or requesting a trial, plus any information needed to verify payment (such as the last five digits of a transfer). If you do not provide an email address and payment information, we will not be able to create an account for you or issue a license key.
• License data: the license key issued to you, the bound device identifier, and activation/verification records, used to maintain your device-based license.
• Public live-stream events: while the Service is running, it processes publicly broadcast gifts, comments, joins, and likes from the live-stream rooms you designate for real-time scoring and display. Likes and joins are processed in memory only. When optional chat archiving is configured and enabled, comment text, the viewer's platform user ID and nickname, and the event timestamp are uploaded in compressed batches to private object storage for session chat review and search. Our database stores archive references and interaction statistics rather than the full comment text. Without configured chat archiving, comment text is processed in memory only.
• Session reports: when your control console connects using a licensed key, each stream's gift record (the gifting viewer's platform ID and display name, the gift name, its diamond value, the time, and which member or team it was credited to) is uploaded and stored under your account so you can look it up and export a session report afterward.
• Optional profile-frame features: if you use the profile-frame feature, we may read the public avatar of the relevant public account for display purposes.
• Technical logs: connection and error logs (such as IP address, time, event type, and error content) used for debugging and abuse prevention.
• Website usage: the official website uses Google Analytics 4 / PostHog to measure traffic. See Section 4 and the Cookie Policy.

Местоположение браузера (по желанию): Если при заявке на пробный период вы нажмёте «Поделиться местоположением» и разрешите браузеру доступ к нему, мы сохраним точные координаты, примерную точность и время определения вместе с этой заявкой, чтобы уточнить ваш регион и оказывать поддержку. Местоположение определяется один раз, без постоянного отслеживания, и может быть получено по GPS, Wi-Fi или сигналам сети. Передавать его необязательно, и это не влияет на получение пробного периода. Местоположение видят только администраторы TStar; оно не передаётся аналитическим платформам, в письма-уведомления или в Notion и хранится вместе с данными вашей пробной учётной записи в соответствии с разделом 7. Вы можете удалить его до отправки заявки или после отправки обратиться к нам с просьбой об удалении.

PostHog (регион США): Мы используем PostHog, чтобы анонимно понимать, как используются сайт и настольная консоль: какие страницы сайта открывают и завершаются ли такие шаги, как скачивание, регистрация или оплата, а в консоли — какие экраны, инструменты и игровые режимы открывают и остаётся ли стабильным подключение к эфиру. Эти данные нужны нам только для того, чтобы находить, что исправить и улучшить в TStar. В них никогда не входят ваша учётная запись, адрес электронной почты, ключи лицензий, данные зрителей и записи экрана, а действия связываются только в пределах открытого окна, без долговременного идентификатора. На сайте PostHog следует вашему выбору аналитики в настройках cookie. В консоли сбор включён по умолчанию, и его можно в любой момент отключить в разделе «Настройки → Аналитика использования».

• To provide, maintain, and improve the Service's scoring, PK, and interactive game modes.
• To issue and verify license keys, maintain device-based licensing, and send service-related notifications.
• To generate your session reports, helping you reconcile gifting revenue and payout shares.
• To detect and prevent abuse, fraud, and violations of the Terms of Service.
• To respond to your inquiries and provide customer support, to the extent you consent.
• To understand usage of the Service and improve the product using aggregated statistics that do not identify any individual (for example, average session length site-wide).

With respect to the public data of your live-stream viewers, you (the streamer or guild) determine the purposes and means of collection, and we process such data on your instructions, protecting it under this Policy and the Data Processing Addendum in Section 7 of the Terms of Service.

• We do not log in to or act on behalf of your viewers' accounts, and we do not send gifts or messages on anyone's behalf.
• We do not sell, rent, or share your personal data in exchange for consideration (including the "sale" and "sharing" defined under California law).
• We do not use your data, or the event data from your live-stream room, to train AI models.
• We do not access your session data for any purpose other than providing the Service, customer support, operating the systems, and legal compliance — see Section 9 for our access rules.

The official website uses essential cookies (for example, to maintain your login state, remember your chosen language, and identify your visitor country) to keep it running, and uses Google Analytics 4 / PostHog to measure traffic.

В Европейской экономической зоне, Великобритании и Швейцарии аналитика требует предварительного согласия. В других регионах она включена по умолчанию до отказа. Измерение рекламы требует отдельного явного согласия во всех регионах; прежнее согласие на аналитику его не включает. Каждый выбор можно изменить или отозвать в настройках cookie в любое время. Отказ от необязательных целей не мешает пользоваться сайтом.

Только с отдельного явного согласия и при включённой аналитике мы используем события Google Analytics 4 с Google Ads, чтобы измерить, приводят ли объявления к регистрации и заявкам на пробный период. Согласие разрешает хранение данных для рекламы и использование данных событий для измерения. Персонализированная реклама всегда отключена. Мы не передаём адреса электронной почты или списки клиентов для сопоставления и не используем ремаркетинг.

For the full list of cookie names, purposes, and durations, see the Cookie Policy.

To provide the Service, we engage third-party service providers to process certain data, sharing only what is necessary. The full list, each provider's purpose, and where data is located are named on our Sub-processors List. We update that page whenever the list changes.

In addition, live-streaming platforms such as TikTok are the source of the public live-stream event data the Service uses; your relationship with such platforms is separately governed by their own privacy policies. For payments, card numbers are handled by our payment provider's own pages — we do not access or store card numbers.

Our servers and service providers are located outside Taiwan (primarily Japan and the United States, with some services using global edge networks), so your data may be stored or processed in a country other than the one you are in. See the Sub-processors List for each provider's location.

We rely on the following bases for cross-border transfers:

• Necessary for performance of a contract: transfer is an integral part of providing the Service you purchase and use.
• Contractual safeguards with service providers: our agreements with each service provider incorporate their data processing terms; for transfers involving the European Economic Area, the UK, or Switzerland, we rely on the EU Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement/Addendum (UK IDTA).
• Your consent: where local law requires separate consent for cross-border transfer (for example, South Korea or Vietnam), we will clearly disclose the recipient, destination country, purpose, and items to be transferred at the time of collection, and obtain your consent.

You can email hello@tstar.stream for further information about our transfer safeguards.

• Session reports: retained for twenty-four months from the end of the session, then automatically deleted. You may also request earlier deletion of an individual session or all sessions at any time.
• Account and license data: retained until you delete your account, or for ninety days after your license ends; transaction records are retained for the period required under tax law.
• Optional session chat archives: comment text, platform user IDs, nicknames, and timestamps are retained for up to 30 days after the session ends, then expire automatically. Access is restricted to the account authorized to view the session report. Aggregate comment counts, distinct commenter counts, and per-minute comment counts are retained with session reports for 24 months. Likes and join events remain memory-only. Earlier sessions are not backfilled; an expired or incomplete archive does not provide a complete chat history.
• Technical and error logs: retained for up to ninety days.
• Access records (Section 9): retained for twelve months for later audit.
• We take reasonable technical and organizational measures (such as end-to-end encrypted transmission, password hashing, and least-privilege access) to protect data security. In the event of a data breach likely to cause material harm to your rights, we will notify you and the competent authority within the timeframe required by applicable local law.

The Service is intended for streamers and guild operators who are at least 18 years old, and we do not knowingly collect personal data from children. With respect to your viewers, it is your (the streamer's or guild's) responsibility to confirm whether a viewer has reached the applicable age of consent — see Section 2 of the Terms of Service. If you believe we hold data about a minor without an appropriate basis, please email hello@tstar.stream and we will investigate and delete it.

Our personnel may access your account and session data to the extent necessary to provide the Service, handle issues you report, keep the systems running, and comply with the law or a request from a competent authority. Our internal rules limit access to those purposes, and we keep internal access records for after-the-fact review; you may email us to request the access records relating to your account. See Section 8 of the Terms of Service for details.

To the extent permitted by law, you may request to access, review, obtain a copy of, correct, or delete the personal data we hold about you, or request that we stop collecting, processing, or using it, or withdraw your consent. Please contact us at hello@tstar.stream; we will respond within a reasonable time and will not treat you differently for exercising your rights.

Depending on where you are located, you may also have the following rights:

• European Economic Area / UK / Switzerland: the rights to access, rectification, erasure, restriction of processing, objection to processing, and data portability, as well as the right to lodge a complaint with your local data protection authority. Depending on the circumstances, our legal basis for processing your personal data is performance of a contract, our legitimate interest in keeping the Service secure, or your consent.
• South Korea: under the Personal Information Protection Act, you may request access, correction, deletion, and suspension of processing, and may decline consent to optional items without affecting your use of essential features; cross-border provision separately requires consent as described in Section 6.
• Japan: under the Act on the Protection of Personal Information, you may request disclosure, correction, suspension of use, and disclosure of records of provision to third parties.
• Thailand / Indonesia / Malaysia / Philippines / Vietnam: you have the rights of access, correction, deletion, withdrawal of consent, and complaint provided under each jurisdiction's personal data protection law.
• United States (including California): you may request to know, delete, or correct the personal data we hold. We do not sell or "share" personal data, and we do not use your data for cross-context behavioral advertising.
• Taiwan: the rights of inquiry, review, copying, supplementation and correction, cessation of collection, processing, or use, and deletion provided under Article 3 of the Personal Data Protection Act.

If you believe our processing is unlawful, in addition to contacting us, you may also lodge a complaint with the personal data protection authority in your jurisdiction.

We may update this Policy from time to time and will post the updated date on the official website. For material changes, we will separately notify you by email to the address on your account at least thirty days before they take effect.