Privacy Policy

• Data you provide: the email address, password (stored only as a hash), and contact details you provide when registering, purchasing, or requesting a trial, plus any information needed to verify payment (such as the last five digits of a transfer). If you do not provide an email address and payment information, we will not be able to create an account for you or issue a license key.
• License data: the license key issued to you, the bound device identifier, and activation/verification records, used to maintain your device-based license.
• Public live-stream events: while the Service is running, it processes in real time the events the platform publicly broadcasts from the live-stream room(s) you designate (gifts, comments, joins, likes, etc.), used for real-time scoring and on-screen display. Comments, likes, and joins are processed in memory in real time only and are not written to our database.
• Session reports: when your control console connects using a licensed key, each stream's gift record (the gifting viewer's platform ID and display name, the gift name, its diamond value, the time, and which member or team it was credited to) is uploaded and stored under your account so you can look it up and export a session report afterward.
• Optional profile-frame features: if you use the profile-frame feature, we may read the public avatar of the relevant public account for display purposes.
• Technical logs: connection and error logs (such as IP address, time, event type, and error content) used for debugging and abuse prevention.
• Website usage: the official website uses Google Analytics 4 to measure traffic. See Section 4 and the Cookie Policy.

• To provide, maintain, and improve the Service's scoring, PK, and interactive game modes.
• To issue and verify license keys, maintain device-based licensing, and send service-related notifications.
• To generate your session reports, helping you reconcile gifting revenue and payout shares.
• To detect and prevent abuse, fraud, and violations of the Terms of Service.
• To respond to your inquiries and provide customer support, to the extent you consent.
• To understand usage of the Service and improve the product using aggregated statistics that do not identify any individual (for example, average session length site-wide).

With respect to the public data of your live-stream viewers, you (the streamer or guild) determine the purposes and means of collection, and we process such data on your instructions, protecting it under this Policy and the Data Processing Addendum in Section 7 of the Terms of Service.

• We do not log in to or act on behalf of your viewers' accounts, and we do not send gifts or messages on anyone's behalf.
• We do not sell, rent, or share your personal data in exchange for consideration (including the "sale" and "sharing" defined under California law).
• We do not use your data, or the event data from your live-stream room, to train AI models.
• We do not browse the contents of your session reports out of curiosity — see Section 9 for our access rules.

The official website uses essential cookies (for example, to maintain your login state, remember your chosen language, and identify your visitor country) to keep it running, and uses Google Analytics 4 to measure traffic.

If you are located in the European Economic Area, the UK, or Switzerland: analytics cookies will not be enabled until you click "Accept" on our consent banner, and you may withdraw consent at any time by clearing your browser data. For visitors elsewhere, analytics cookies are enabled by default, and you can opt out through your browser settings or Google's opt-out add-on.

For the full list of cookie names, purposes, and durations, see the Cookie Policy.

To provide the Service, we engage third-party service providers to process certain data, sharing only what is necessary. The full list, each provider's purpose, and where data is located are named on our Sub-processors List. We update that page whenever the list changes.

In addition, live-streaming platforms such as TikTok are the source of the public live-stream event data the Service uses; your relationship with such platforms is separately governed by their own privacy policies. For payments, card numbers are handled by our payment provider's own pages — we do not access or store card numbers.

Our servers and service providers are located outside Taiwan (primarily Japan and the United States, with some services using global edge networks), so your data may be stored or processed in a country other than the one you are in. See the Sub-processors List for each provider's location.

We rely on the following bases for cross-border transfers:

• Necessary for performance of a contract: transfer is an integral part of providing the Service you purchase and use.
• Contractual safeguards with service providers: our agreements with each service provider incorporate their data processing terms; for transfers involving the European Economic Area, the UK, or Switzerland, we rely on the EU Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement/Addendum (UK IDTA).
• Your consent: where local law requires separate consent for cross-border transfer (for example, South Korea or Vietnam), we will clearly disclose the recipient, destination country, purpose, and items to be transferred at the time of collection, and obtain your consent.

You can email hello@tstar.stream for further information about our transfer safeguards.

• Session reports: retained for twenty-four months from the end of the session, then automatically deleted. You may also request earlier deletion of an individual session or all sessions at any time.
• Account and license data: retained until you delete your account, or for ninety days after your license ends; transaction records are retained for the period required under tax law.
• Comments, likes, and join events in the live-stream room: processed in memory in real time only and not retained long-term.
• Technical and error logs: retained for up to ninety days.
• Access records (Section 9): retained for twelve months for later audit.
• We take reasonable technical and organizational measures (such as end-to-end encrypted transmission, password hashing, and least-privilege access) to protect data security. In the event of a data breach likely to cause material harm to your rights, we will notify you and the competent authority within the timeframe required by applicable local law.

The Service is intended for streamers and guild operators who are at least 18 years old, and we do not knowingly collect personal data from children. With respect to your viewers, it is your (the streamer's or guild's) responsibility to confirm whether a viewer has reached the applicable age of consent — see Section 2 of the Terms of Service. If you believe we hold data about a minor without an appropriate basis, please email hello@tstar.stream and we will investigate and delete it.

Our staff do not browse the contents of your session reports out of curiosity. Access is limited to: (1) customer support during a period you specify, after you enable "Support Access" on your account page; and (2) the minimum scope necessary to fix an outage, prevent abuse, or comply with the law. All access is logged (time, scope, and who accessed it), and you can email us to request the access records related to your account. See Section 8 of the Terms of Service for details.

To the extent permitted by law, you may request to access, review, obtain a copy of, correct, or delete the personal data we hold about you, or request that we stop collecting, processing, or using it, or withdraw your consent. Please contact us at hello@tstar.stream; we will respond within a reasonable time and will not treat you differently for exercising your rights.

Depending on where you are located, you may also have the following rights:

• European Economic Area / UK / Switzerland: the rights to access, rectification, erasure, restriction of processing, objection to processing, and data portability, as well as the right to lodge a complaint with your local data protection authority. Depending on the circumstances, our legal basis for processing your personal data is performance of a contract, our legitimate interest in keeping the Service secure, or your consent.
• South Korea: under the Personal Information Protection Act, you may request access, correction, deletion, and suspension of processing, and may decline consent to optional items without affecting your use of essential features; cross-border provision separately requires consent as described in Section 6.
• Japan: under the Act on the Protection of Personal Information, you may request disclosure, correction, suspension of use, and disclosure of records of provision to third parties.
• Thailand / Indonesia / Malaysia / Philippines / Vietnam: you have the rights of access, correction, deletion, withdrawal of consent, and complaint provided under each jurisdiction's personal data protection law.
• United States (including California): you may request to know, delete, or correct the personal data we hold. We do not sell or "share" personal data, and we do not use your data for cross-context behavioral advertising.
• Taiwan: the rights of inquiry, review, copying, supplementation and correction, cessation of collection, processing, or use, and deletion provided under Article 3 of the Personal Data Protection Act.

If you believe our processing is unlawful, in addition to contacting us, you may also lodge a complaint with the personal data protection authority in your jurisdiction.

We may update this Policy from time to time and will post the updated date on the official website. For material changes, we will separately notify you by email to the address on your account at least thirty days before they take effect.