← Back to Streamneeds

Privacy Policy

Effective 28 May 2026

This Privacy Policy explains how HALFORD SUCKS LTD, company number 14173794 (“Company”, “we”, “us”, or “our”) collects, uses, stores and protects information in connection with the Streamneeds platform, website, software, applications and related services (the “Services”). By accessing or using Streamneeds, you acknowledge and agree to the practices described here.

1. Who we are

Streamneeds is operated by:

2. Information we collect

2.1 Account information

When you register for or use Streamneeds, we may collect:

  • email address;
  • a password — only for accounts that sign in with a password (e.g. moderator accounts); passwords are stored as a one-way bcrypt hash and are never stored or visible in plain text;
  • display name and avatar / profile image;
  • your Kick username, where used to authenticate the chat bot;
  • subscription details — your plan tier, status and trial dates, and a Stripe customer / subscription identifier (see Section 3);
  • optional onboarding details you choose to provide, such as a Discord or Telegram contact handle, plan interest, and how you heard about us.

Account sign-in is provided through Google OAuth and/or email-and-password credentials. Where you sign in with Google, we receive your basic profile details (such as email, name and image) from Google in order to create and authenticate your account.

2.2 Platform integration information

Where you connect third-party services to Streamneeds, we may collect and store:

  • Discord account identifiers, usernames and display names;
  • Kick account identifiers, usernames and display names;
  • OAuth access tokens for the platforms you authorise (e.g. Kick), stored encrypted and used solely to read and send messages and perform actions on your behalf;
  • channel / stream information and related integration metadata.

If you configure stream alerts, we may also process inbound event data sent to us from third-party platforms including Twitch and YouTube (for example follows, subscriptions, tips, super chats and chat events) so we can display alerts. We do not require, and do not collect, your Twitch or YouTube account login for this purpose.

2.3 Viewer and engagement information

Streamneeds processes viewer and engagement information on behalf of creators using the Services, including:

  • viewer usernames, display names, avatars and platform user IDs;
  • chat activity and message counts;
  • participation and engagement data — points balances, gifted subs, giveaway and raffle entries, store purchases, slot requests and balance guesses;
  • moderation activity (e.g. bans, flags and related notes).

Viewers may also voluntarily provide additional details through features a creator enables, such as casino account usernames, cryptocurrency wallet addresses, affiliate codes, and — where a creator ships physical prizes — a name and postal address. We do not collect casino passwords or account balances.

For viewer data, the creator is the data controller and Streamneeds acts as a data processor on the creator’s instructions. Creators are responsible for telling their viewers what data they collect and for having a lawful basis to do so in their jurisdiction.

2.4 Technical and usage information

We may automatically collect technical information including:

  • IP addresses;
  • browser and user-agent information;
  • request, activity and diagnostic logs;
  • a probabilistic device fingerprint derived from hardware and browser characteristics (such as GPU, screen and timezone), collected when your overlay renders or you use the app.

This information is used primarily for security, rate limiting, abuse prevention and debugging. The device fingerprint is used solely to detect sharing of a single subscription across multiple people — a legitimate-interest basis (abuse prevention); we never use it for advertising and never sell it. Streamneeds does not currently load third-party web analytics products (such as Google Analytics) on the site.

2.5 Uploaded content

You may upload files, graphics, overlays, logos, media and related assets through the Services. Uploaded files are stored using our hosting provider’s blob storage. You remain solely responsible for all content you upload.

3. Payment processing

Streamneeds does not directly store or process payment card information. Payments are processed by Stripe, our third-party payment provider. We retain only billing metadata such as a Stripe customer ID, subscription ID and plan/status information. Your use of payment services is subject to Stripe’s own terms and privacy policy.

4. How we use information

We may use collected information to:

  • provide and operate the Services;
  • manage accounts and subscriptions;
  • authenticate users;
  • process billing and payments via Stripe;
  • provide moderation and automation functionality;
  • operate real-time overlays and live updates;
  • send transactional email (e.g. verification and password reset);
  • maintain platform security and prevent abuse;
  • investigate misuse;
  • communicate account or service-related notices;
  • improve platform features and performance; and
  • comply with legal obligations.

We may use aggregated and anonymised statistics for research, platform optimisation and related business purposes. Such information is not intended to identify individual users or viewers. We do not sell your personal data, and we do not use it to train third-party AI models.

5. Cookies and similar technologies

Streamneeds uses cookies and similar technologies to:

  • maintain authenticated user sessions;
  • remember preferences (such as your light/dark theme);
  • support core platform functionality.

These are limited to what is necessary to operate the Services. We do not currently use third-party advertising or analytics cookies. If we introduce analytics providers in the future, we will update this policy accordingly.

6. Third-party services and sub-processors

We rely on the following third-party services to operate the Services. Each is bound by its own terms and data-protection obligations.

  • Vercel — application hosting and file/blob storage
  • Neon — managed PostgreSQL database
  • Railway — bot hosting
  • Stripe — payment processing
  • Pusher — real-time messaging
  • Resend — transactional email
  • Upstash — rate limiting
  • Discord, Kick — platform integrations you authorise
  • Twitch, YouTube — optional inbound alert event sources

We are not responsible for the privacy practices of third-party services. You should review their privacy policies separately.

7. Data storage and security

We implement reasonable technical and organisational measures designed to protect information against unauthorised access, misuse, disclosure, alteration and destruction. These include encryption in transit (TLS), bcrypt hashing of passwords, encryption of sensitive integration tokens at rest, scoped access controls and audit logging. Our primary database is hosted on Neon in the EU (eu-west-2) region. However, no method of transmission or storage can be guaranteed to be completely secure, and use of the Services is at your own risk.

8. International users

Streamneeds is available globally and is operated from the United Kingdom. By using the Services, you understand and agree that information may be transferred, processed and stored in jurisdictions outside your country of residence, including the United Kingdom, the European Economic Area and the United States. Where required, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.

9. Data retention

We retain information only for as long as reasonably necessary for the operation of the Services, legal obligations, security, dispute resolution, fraud prevention, enforcement of agreements and legitimate business interests. Where account deletion is requested or approved, account data may be deleted within up to twenty-eight (28) days. Activity logs are retained for a limited period for security and debugging. Live chat is not persisted to our database by default — it is broadcast in real time and held only in short-lived buffers. Certain information may be retained where reasonably necessary for legal, security or compliance purposes.

10. Your rights

Depending on applicable law and your jurisdiction, you may have rights to request access to, correction of, deletion of, or a portable copy of your personal information, and to restrict or object to certain processing. Requests may be submitted to streamneeds@sucksmedia.com. We may verify your identity before processing a request. Viewers should contact the creator whose channel they interacted with, as that creator is the controller of viewer data.

11. Eligibility and user responsibility

You are solely responsible for ensuring that your use of Streamneeds complies with the laws, regulations and eligibility requirements in your jurisdiction. The Company accepts no responsibility for unlawful or non-compliant use of the Services.

12. User responsibility for content

You are solely responsible for all content, uploads, files, messages and activity processed through the Services. The Company does not actively monitor all activity, does not endorse user content, and accepts no responsibility or liability for user-generated content or creator activity.

13. Legal disclosures

We may disclose information where reasonably necessary to comply with applicable laws, respond to lawful requests, enforce agreements, investigate misuse, prevent fraud or abuse, protect platform integrity, or protect the rights, safety or security of the Company, our users or third parties.

14. Children

The Services are not directed at children under 18 and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.

15. Changes to this Privacy Policy

We may modify or update this Privacy Policy at any time. Continued use of the Services following an update constitutes acceptance of the revised policy.

16. Contact

For privacy-related enquiries or requests, contact:

If you are in the UK and believe we have not handled your data correctly, you also have the right to complain to the Information Commissioner’s Office (ico.org.uk).