This website is in beta test. Features and content may change.

Privacy Policy

Last updated: March 2025

1. Who we are

NeoStreamShop (“we”, “us”, “our”) is a company established in France. We operate the website and services at community.neostreamshop.com and related domains (the “Site”), which allow users to use interactive widgets and mini-games on their Twitch and YouTube streams.

We are the data controller for the personal data we collect through the Site. Our contact details are provided at the end of this policy.

2. What data we collect

We collect and process the following categories of data when you use our services:

  • Account and identity (Twitch): When you sign in with Twitch, we receive and store your Twitch user ID, login name, display name, email address (if provided by Twitch), profile picture URL, and tokens that allow us to provide the service (e.g. to show your stream events in widgets).
  • Account and identity (Google/YouTube): If you choose to link your Google/YouTube account, we receive and store your Google user ID, display name, and profile picture URL, as well as tokens needed to maintain the link. We do not access your YouTube channel content, videos, or sensitive data beyond what is necessary to display your linked identity on your account page.
  • Widget and service usage: We store which widgets you have activated, your widget configurations (e.g. settings you choose for each widget), and activation codes you use. We may also keep limited technical logs (e.g. IP address, timestamps) for security, fraud prevention, and troubleshooting.
  • Session and technical data: When you use the Site, we use session cookies and server-side sessions to keep you logged in and to remember your preferences. We may collect your IP address and browser/device information for security and to ensure the service works correctly.

3. Why we use your data

We use your data to:

  • Create and manage your account and link your Twitch and (optionally) Google/YouTube identities.
  • Provide the widget and streaming services (e.g. display widgets on your Twitch or YouTube stream, apply your settings).
  • Process widget activations and purchases.
  • Communicate with you about your account or the service (e.g. important updates) where necessary.
  • Improve, secure, and troubleshoot our services and to comply with legal obligations.

Our legal bases for processing are: performance of the contract (to provide the service you requested), consent (where you explicitly link your Google/YouTube account or agree to optional uses), and legitimate interests (security, fraud prevention, improvement of our services) or legal obligation where applicable.

4. Who we share your data with

We may share your data only as follows:

  • Twitch and Google: When you sign in or link accounts, we interact with Twitch and Google (YouTube) under their respective terms and privacy policies. They process your data according to their own policies; we only receive and store what is necessary for our service.
  • Service providers: We may use trusted providers for hosting, databases, and technical operations (e.g. servers, push/real-time features). These providers act on our instructions and are bound by confidentiality and data protection obligations.
  • Legal and safety: We may disclose data if required by law, to protect our rights or the safety of users, or in connection with a merger or sale of assets, in accordance with applicable law.

We do not sell your personal data to third parties.

5. How long we keep your data

We retain your account and widget data for as long as your account is active. If you stop using the service, we may retain data for a limited period for legal, security, or backup purposes, after which it is deleted or anonymised. Session and technical logs are kept only as long as necessary for security and troubleshooting (typically no longer than required by applicable law).

6. Your rights (especially in the EU/EEA and France)

Under the General Data Protection Regulation (GDPR) and applicable French law, you have the right to:

  • Access: Obtain confirmation as to whether we process your data and a copy of that data.
  • Rectification: Have inaccurate data corrected.
  • Erasure: Request deletion of your data in certain circumstances (“right to be forgotten”).
  • Restriction: Request that we limit how we use your data in certain cases.
  • Data portability: Receive your data in a structured, commonly used format where technically feasible.
  • Object: Object to processing based on legitimate interests or for direct marketing.
  • Withdraw consent: Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
  • Lodge a complaint: You have the right to lodge a complaint with a supervisory authority, in particular in the EU country of your residence. In France, this is the CNIL: www.cnil.fr.

To exercise these rights, please contact us using the details at the end of this policy. We will respond within the time limits required by law (e.g. one month under the GDPR).

7. Cookies and similar technologies

We use session cookies and similar technologies to keep you logged in and to ensure the Site works properly. These are strictly necessary for the service. We do not use advertising or third-party tracking cookies for marketing on this Site. You can control cookies through your browser settings; disabling essential cookies may prevent you from using certain features (such as staying logged in).

8. International transfers

Your data is processed in France and the European Economic Area. If we ever use services located outside the EEA, we will ensure appropriate safeguards (e.g. standard contractual clauses or adequacy decisions) are in place as required by the GDPR.

9. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or alteration. Access tokens and sensitive credentials are stored in an encrypted form. We regularly review our security practices.

10. Children

Our service is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the “Last updated” date. For material changes, we may notify you by email or through the Site where appropriate. We encourage you to review this policy periodically.

12. Contact us

For any questions about this Privacy Policy, your personal data, or to exercise your rights, please contact us:

We will process your request in accordance with applicable data protection law.