Privacy Policy

What we collect

• Account details — your email address, username, display name and, if you add them, a bio, avatar, banner and links. Your password is stored only as a salted scrypt hash; we never store it in a form that can be read back.
• Sign-in with Google — if you choose it, the email address and account identifier Google shares with us.
• Sessions — for each signed-in device, the browser’s user-agent string and a salted hash of the IP address, so you can recognise and sign out devices in Settings. We do not keep the IP address itself.
• What you publish — broadcasts, videos, clips, posts, comments and chat messages, and the metadata that goes with them.
• Location, only if you add it — a country, region or city you choose yourself, with your own choice of who can see it. We do not derive it from your device.
• Connected platforms — if you connect an outside streaming account to restream, the access tokens that platform issues (stored encrypted) and the chat messages from that broadcast that we show beside your stream.
• Push notifications — if you allow them in the app, the device token Apple or Google issues for delivering them.
• Usage — views, follows, and a small set of first-party events such as which recommendation or search result was opened. These are used to count views, rank discovery and show creators their own analytics. We do not use third-party advertising or analytics trackers.
• Reports — what you report and why, and the outcome of the review.

Cookies and local storage

We set only the cookies the site needs to work. There are no advertising or cross-site tracking cookies, which is why there is no cookie banner.

• onzsa_session — keeps you signed in, for up to 30 days.
• onzsa_csrf — protects forms against cross-site request forgery.
• onzsa_vid — a random identifier for this browser, kept for a year, so that refreshing a page does not count as a second view. It is not linked to your name or address.
• Short-lived sign-in cookies that carry the state of a Google sign-in or a platform connection while you are away on the other site. They expire within minutes.

Your theme and whether the side menu is collapsed are remembered in your browser’s local storage. They never leave your device.

How we use it

To run your account and the service, keep it secure, deliver the notifications and emails you ask for, show creators how their channel is doing, enforce the Terms of Service, and respond to reports and legal requests. We do not sell personal information.

Service providers

We use providers to host and deliver the service: infrastructure and file storage, email delivery, push delivery through Apple and Google, error monitoring, and Google for the optional sign-in. They process data on our behalf to provide those functions only.

How long we keep it

• Chat messages are deleted after 90 days.
• Notifications are deleted 90 days after you read them, and all of them after 180 days.
• Account data and your published content are kept until you delete them.

Your choices

• Edit your profile, location, and notification preferences in Settings.
• Delete your own videos, clips and posts at any time.
• Sign out any device from Settings.
• To delete your account or get a copy of your data, email [email protected] from the address on the account.

Changes

If this policy changes in a way that matters, we will say so on the site before the change takes effect. The date at the top is when it last changed.