Privacy Policy

We only collect what a feature actually needs:

• Twitch sign-in.When you sign in with Twitch we receive your Twitch user ID and username, plus access and refresh tokens limited to the “view your follows” scope (user:read:follows). These are stored in an encrypted, HttpOnly session cookie; your username is also kept server-side so we can show it in leaderboards and the creator's admin view.
• Watch-to-earn activity. If you participate in the points program, we record activity tied to your Twitch ID — time watched while the stream is live, your points balance, and anti-abuse timestamps. Points are credited server-side based on real elapsed time.
• Game activity.If you play the daily “Who's That Baller?” game while signed in, we keep aggregate stats tied to your Twitch ID (games played, correct answers, best score, and streak). Your username appears on that game's leaderboard only if you opt in.
• Redemptions & merch orders. When you redeem points or buy merchandise, we store the order details and the name, email, and shipping address you provide at checkout so the order can be fulfilled and you can be contacted about it.
• Payment information. Card and payment details are handled entirely by PayPal. We never see or store your full card number — only a PayPal order/receipt identifier and the amount, for reconciliation.
• Optional Discord linking. If you link your Discord account (e.g. to claim a supporter role), we store the connection between your Discord and site identities.

• Run the features you use — sign-in, points, redemptions, and checkout.
• Fulfill and ship the merch and rewards you order, and contact you about them.
• Operate the points leaderboard and on-stream displays, which show your Twitch username and points. The separate daily-game leaderboard shows your username only if you opt in.
• Prevent fraud and abuse of the points economy.

We do not use your information for third-party advertising, and we do not sell or rent it.

Our own cookies are limited to what the site needs to function — chiefly an encrypted session cookie that keeps you signed in, and short-lived cookies that secure the sign-in flow. We do not set advertising or cross-site tracking cookies.

Some pages embed the creator's live Twitch and YouTube players. When an embedded player loads, Twitch or YouTube may set their own cookies and collect data under their privacy policies — we don't control those cookies. You can avoid them by not opening pages with an embedded player.

We share information only with the service providers needed to run the site, and only what each one needs:

• Twitch — sign-in, live-stream status, and embedded player.
• YouTube / Google — the embedded video player and channel content.
• PayPal — payment processing at checkout (including Venmo and card payments made through PayPal).
• Apliiq / Fourthwall — merch printing and fulfillment; they receive the recipient name and shipping address for orders you place.
• Resend — transactional email. Order and redemption alerts sent to the creator include the recipient name, shipping address, and email so the order can be fulfilled.
• Discord — community features and account linking, if you use them.
• Vercel (hosting) and Upstash(Redis data store) — infrastructure that runs and stores the site's data.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service.

The creator's own stream recordings are uploaded to the creator's YouTube channel by an automated tool that uses YouTube API Services. That tool accesses only the creator's own YouTube account — it does not access, collect, or store any YouTube data about site visitors. In addition to this policy, Google's handling of data is described in the Google Privacy Policy.

• By using pages of this site that include YouTube content, you also agree to the YouTube Terms of Service.
• We do not store any YouTube API data about you, so there is no such data to retain or delete. Embedded YouTube players are covered in the Cookies section above.
• The creator can revoke the tool's access to the YouTube account at any time from Google security settings.

We keep information for as long as needed to provide the features above and to meet legal, tax, and record-keeping obligations — for example, your points balance and redemption history while your account is active, and merch order records for as long as needed for support, reconciliation, and those obligations. You can ask us to delete your data at any time (see “Your choices” below), subject to records we're required to retain.

The site is served over HTTPS. Session tokens are encrypted with AES-256-GCM and stored in HttpOnly, Secure cookies, and all points crediting is server-side. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.

• Access or delete. Email us to request a copy of the data we hold about you, or to have it deleted.
• Sign out.Signing out clears your session cookie. You can also revoke this site's access from your Twitch connections settings.
• California residents. Under the CCPA/CPRA you have the right to know, delete, and correct your personal information, and to not be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by California law.

This site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy from time to time. When we do, we'll revise the “Last updated” date at the top of this page. Continued use of the site after a change means you accept the updated policy.

Questions or requests about your privacy? Email tyler@underscaepe.com.