Privacy Policy

Last updated: March 4, 2026

SwipeStream ("we," "us," or "our") operates as a Twitch Extension that enables streamers to display product cards to viewers during live streams. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

SwipeStream collects the following information through the Twitch Extension platform:

• Channel ID: The unique Twitch channel identifier for the streamer using SwipeStream. Used to associate products with a specific channel.
• Opaque User ID: An anonymized, non-reversible identifier provided by Twitch for viewers. We do not receive your real Twitch username or account details.
• Product Data: Product names, prices, URLs, and images uploaded by streamers via the configuration panel.
• Interaction Events: Anonymous events such as card impressions, swipes, and buy button clicks, associated only with opaque user IDs.

2. Information We Do Not Collect

• Real names or email addresses of viewers
• Payment information (purchases are completed on third-party retailer sites)
• Browsing history outside of the SwipeStream extension
• Precise location data
• Any personal information beyond what Twitch's extension platform provides

3. How We Use Information

• To provide the service: Channel IDs are used to load and display the correct products for each streamer's channel.
• Analytics: Aggregated, anonymized interaction data (impressions, swipes, clicks) is provided to streamers so they can understand how their products are performing.
• Service improvement: Aggregate usage data may be used to improve the extension's features and performance.

4. Data Sharing

We do not sell, rent, or share your personal information with third parties except:

• Service providers: We use Supabase (database and storage) and Vercel (hosting) to operate the service. These providers process data on our behalf under their own privacy policies.
• Legal requirements: If required by law, court order, or governmental authority.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice.

5. Twitch Extension Data

SwipeStream operates within Twitch's Extensions framework. Twitch's own Privacy Policy and Extension Policies also apply to your use of SwipeStream.

We only request the minimum permissions necessary to operate: we use the channel ID to load products, and opaque user IDs for anonymized analytics. We do not request access to your Twitch account, followers, subscriptions, or any other personal data.

6. Cookies and Local Storage

SwipeStream may use browser local storage to remember which product cards you have already dismissed during a stream session. This data is stored locally in your browser and is not transmitted to our servers.

7. Data Retention

Analytics events are retained for up to 90 days. Product data is retained for as long as the streamer's account is active or until the streamer deletes it. Streamers may delete their products at any time via the configuration panel.

8. Security

We implement industry-standard security measures including HTTPS encryption for all data transmission, JWT-based authentication for all write operations, and row-level security on our database. However, no method of transmission over the internet is 100% secure.

9. Children's Privacy

SwipeStream is designed for use on Twitch, which requires users to be at least 13 years old. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date at the top of this page. Continued use of SwipeStream after changes constitutes acceptance of the updated policy.

11. Your Rights

Depending on your location, you may have rights regarding your personal data including the right to access, correct, or delete information we hold about you. Since we collect minimal personal data and primarily use anonymized identifiers, most of our data is not tied to identifiable individuals.