Privacy Policy

Introduction

ViewerQ ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. We comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

Information We Collect

Account Information

• Email Address: Used for account authentication and important notifications (stored securely)
• Password: Stored as a cryptographic hash (bcrypt) - we never store your actual password
• Account Creation Date: For record-keeping purposes

Third-Party Account Data

When you connect your Twitch, Kick, or Discord accounts, we collect:

• Twitch: User ID, username, and OAuth tokens (for chat commands)
• Kick: User ID, username, and OAuth tokens (for chat commands)
• Discord: User ID, username, and OAuth tokens (for voice channel invites)

Note: OAuth tokens are used solely to perform actions on your behalf (like sending Discord invites) and are stored securely.

Usage Data

• Queue Participation: Records of when you join queues and are selected
• Session Data: Voice channel participation timestamps
• Streamer Settings: Queue configuration preferences

How We Use Your Information

• To provide and maintain our queue management service
• To authenticate your identity and manage your account
• To send Discord voice channel invites when you're selected from a queue
• To listen for Twitch and Kick chat commands (!join, !leave)
• To improve our service based on usage patterns
• To communicate important service updates

Legal Basis for Processing (GDPR)

• Contract: Processing necessary to provide our service to you
• Consent: When you connect third-party accounts (Twitch/Kick/Discord)
• Legitimate Interests: To improve and secure our service

Data Storage & Security

• Data is stored on secure servers with encryption at rest
• Passwords are hashed using bcrypt (12 rounds)
• OAuth tokens are stored securely and used only for their intended purpose
• We use HTTPS for all data transmission
• Authentication tokens (JWT) expire after 7 days

Data Retention

We retain your personal data only as long as necessary to provide our service:

• Account Data: Until you delete your account
• Queue History: 90 days after participation
• Session Data: 30 days after the session ends

Your Rights

Under GDPR and other privacy laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Withdraw Consent: Unlink connected accounts at any time
• Object: Object to processing of your personal data

You can exercise these rights from the Settings page or by contacting us.

Third-Party Services

We integrate with the following third-party services:

• Twitch: For authentication and chat integration. Twitch Privacy Policy
• Kick: For authentication and chat integration. Kick Privacy Policy
• Discord: For authentication and voice channel invites. Discord Privacy Policy

Cookies & Local Storage

We use minimal local storage for essential functionality:

• Authentication Token: Stored in localStorage to keep you logged in
• Consent Preference: Stored to remember your privacy choices

We do not use tracking cookies or third-party analytics. See our Cookie Policy for more details.

Children's Privacy

Our service is not intended for users under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

International Data Transfers

Your data may be processed in the United States or other countries. We ensure appropriate safeguards are in place for any international transfers of personal data in compliance with applicable laws.

Contact Us

For privacy-related inquiries or to exercise your rights, contact us at:

We will respond to your request within 30 days.