01Controller
Responsible for data processing on this website and in the app:
- Name
- Robin Lehmann
- Address
- Bahnhofstr. 98, 71679 Asperg, Germany
- hello@vegancode.de
02Hosting
Website, app and sign-in server run on our own server at Hetzner Online GmbH in Germany. A data processing agreement with Hetzner is in place.
- Provider
- Hetzner Online GmbH
- Location
- Data center Falkenstein (Saxony), Germany
- Legal basis
- Art. 6(1)(f) GDPR
03Server logs
When you visit, the web server in front of the app processes technically necessary data: IP address, time, requested address and browser identifier. We use it only for operation and security. The logs are rotated weekly and then deleted automatically.
- Retention
- Requests at most 5 weeks, error messages at most 11 weeks
- Legal basis
- Art. 6(1)(f) GDPR
04Sign-in and Nytro account
You sign in directly at Twitch; we never see your password. On your first sign-in we create a Nytro account. For this, Twitch gives us your Twitch ID, user name, profile picture, the email address in your Twitch account and access keys with the permissions “read chat”, “write chat”, “read followed channels” and “read your emotes”. We use your follows only to show followed channels that are live and to offer them as favorites, your emotes only for the emote picker. We fetch both from Twitch when needed and never store them. On every sign-in we take name, picture and email address again from Twitch. The email address identifies your account, also when more sign-in methods are added later. We never send you advertising and never pass it on. We store the access keys encrypted in our database. A session cookie keeps you signed in for up to 60 days. For each session we store the IP address and browser identifier so we can detect abuse and you can see your signed-in devices. Both are deleted with the session, after 60 days at the latest. When you sign out we revoke access at Twitch.
- Data
- Twitch ID, name, picture, email, keys, sessions
- Legal basis
- Art. 6(1)(b) GDPR
- Retention
- Until you delete your account
05Chat through our server
When you open a channel, our server connects to Twitch on your behalf and relays the messages to your devices in real time. What you write is sent to Twitch by our server with your access key. So that nothing is missing when you come back, the server reads a channel for you for 12 hours after you open it, even with the app closed. Opening it again and every message you write start these 12 hours over. Per channel we keep at most the last 300 messages in your account and the last 50 on your device. Every message is deleted automatically after at most 24 hours, and deletions by moderators apply right away. The cache is yours alone. If you clear it in the settings, sign out on your last device or delete your account, the server stops reading right away. If AutoMod holds back one of your messages for review, Nytro shows it to you together with the result of the review. We do not store these notices. For saved channels that are live, the server also receives the chat while you are connected: it counts new messages and keeps the last 50 in memory only, so the channel opens instantly. These messages are not written to the database.
- Retention
- At most 24 hours
- Legal basis
- Art. 6(1)(b) GDPR
06Nytro mark in chat
People using Nytro see a small Nytro mark next to the names of other Nytro users. For this, our server matches the Twitch ID of the person writing against the Twitch IDs of Nytro accounts. It is visible only in Nytro, not on Twitch. You can turn the mark off for yourself in the settings at any time; then nobody sees it next to your name.
- Stored
- Only your setting (on or off)
- Legal basis
- Art. 6(1)(f) GDPR, objection via the switch
07Levels and XP
We award points (XP) for sent messages, days in a row and new channels. For each booking we store time, kind, points, channel ID and the ID of the sent message, plus your time zone so day boundaries are right. We do not store the content of your messages for this. Only you can see your level.
- Retention
- Until you delete your account
- Legal basis
- Art. 6(1)(b) GDPR
08Twitch as a recipient
Twitch Interactive, Inc. (San Francisco, USA) processes chat data as an independent controller under the Twitch privacy notice (legal.twitch.com). How Twitch safeguards transfers from the EU to the US is described there.
09Emote services
For emotes the app loads images from Twitch and the community services 7TV, BetterTTV and FrankerFaceZ directly into your browser. These services receive your IP address. Images are cached for at most 24 hours.
- Legal basis
- Art. 6(1)(f) GDPR
10Saved channels, settings, cookies
In your account we store your saved channels, the last 20 channels you visited, language, color scheme, time zone and when you accepted this privacy policy. A copy stays in your browser storage so the app starts fast. One technically necessary session cookie keeps you signed in. No tracking, no ads, no analytics.
- Legal basis
- Section 25(2) TDDDG
11Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection. Just send us an email. In the app you can delete your account yourself under Settings: we then remove all data and revoke access at Twitch. You can also end access any time in your Twitch settings under “Connections”.
12Right to complain
You can complain to a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Lautenschlagerstraße 20, 70173 Stuttgart, Germany).