ITZON
ITZON
Last updated: 2026-07-22
The controller responsible for the processing of personal data on this live streaming platform (the “Platform”) within the meaning of the General Data Protection Regulation (GDPR) is the operator of the Platform. Contact details for the controller are provided in the Legal Notice (Impressum).
This Privacy Policy explains what personal data we process when you use the Platform – whether you visit as a viewer, register a user account, transmit a stream, or take part in chat – the purposes and legal bases of that processing, how long we keep the data, and the rights available to you.
3.1 Server log & connection data. When you access the Platform, our servers automatically process technical connection data required to deliver the service and to keep it secure:
3.2 User account data. If you register an account, we process the username you choose, a securely hashed password, and – if provided – your email address and its verification status. Account settings you configure (such as feature flags granted by an operator, a chat display color, or notification preferences) are stored with your account.
3.3 Streaming data. If you transmit a stream, we process the media you send and technical telemetry needed to relay and monitor it, including stream keys (stored only as hashes), session start/end times, byte counts, resolution, frame rate, bitrate, codecs, and the source IP address of the encoder. Stream content is relayed live and is not retained by us as a recording unless a feature you explicitly enable does so.
3.4 Chat data. If you take part in chat, we process the messages you send and the identifier you appear under (your account username, or an automatically assigned guest name). Messages are transient and are not persisted to a database; a short in-memory buffer of recent message identifiers is kept only to support moderation actions such as deletion. Moderation records (bans, timeouts, moderator/VIP assignments) are stored for the affected channel and may include an account username and/or a truncated IP-based key.
3.5 Third-party integrations. If you connect a third-party account (for example a Twitch account) to use an optional feature, we process the identifiers and access/refresh tokens necessary for that integration; refresh tokens are stored encrypted. If a channel enables third-party emotes, your browser loads emote images directly from the relevant third-party emote provider, which will receive your IP address as part of that request.
3.6 Order & billing data (where applicable). If you place an order or receive an invoice through the Platform, we process the contact and transaction details necessary to fulfil and document that order in accordance with statutory retention obligations.
| Purpose | Legal basis (Art. 6(1) GDPR) |
|---|---|
| Delivering the Platform, relaying streams, and operating chat | (b) performance of a contract / pre-contractual steps; (f) legitimate interests in providing the service |
| Account creation, authentication, and session management | (b) performance of a contract |
| Security, abuse prevention, rate limiting, and moderation | (f) legitimate interests in a safe, functioning service |
| Server logs and error diagnostics | (f) legitimate interests in operating and securing the service |
| Email verification and service notifications | (b) performance of a contract; (f) legitimate interests |
| Optional third-party integrations you activate | (b) performance of a contract; (a) consent where required |
| Orders, invoicing, and statutory bookkeeping | (b) performance of a contract; (c) legal obligation |
We use strictly necessary cookies and browser local storage to keep you signed in across the Platform (for example a session/authentication cookie scoped to our domain) and to remember interface preferences (such as a guest chat name, chat layout side, or a per-browser viewer identifier used for viewer counts). These are required for the service to function and are set on the basis of Art. 6(1)(f) GDPR; we do not use advertising or cross-site tracking cookies.
Personal data is processed on servers operated for us by our hosting provider(s) acting as processors under Art. 28 GDPR. We share data with third parties only where necessary to provide the service (for example email delivery, or a third-party account/emote provider you choose to use), where you have consented, or where we are legally required to do so. We do not sell personal data.
Where a third-party integration you activate involves a provider outside the European Economic Area, the associated transfer is based on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) or on your consent. Our own infrastructure is operated within the EU/EEA where feasible.
We keep personal data only for as long as necessary for the purposes described above or as required by law:
Subject to the conditions of the GDPR, you have the right to:
To exercise these rights, contact us using the details in the Legal Notice. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77), in particular in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement.
Providing certain data is necessary to use the Platform: without connection data we cannot deliver content, and without account data we cannot create or authenticate an account. Providing an email address, connecting a third-party account, or enabling optional features is voluntary but may be required for the corresponding feature to work.
We do not use automated decision-making that produces legal or similarly significant effects concerning you within the meaning of Art. 22 GDPR. Automated measures such as rate limiting and abuse detection are used solely to keep the service secure and functioning.
We may update this Privacy Policy to reflect changes to the Platform or legal requirements. The “last updated” date above indicates the current version.