Privacy Policy

1. Privacy at a Glance

The following notes provide a simple overview of what happens to your personal data when you visit this website.

2. Data Collection on this Website

Data processing on this website is carried out by the website operator. We collect and process personal data only to the extent necessary for providing a functional website and our content and services.

3. OAuth Login: Twitch and Discord

For login or account linking, we use the OAuth interfaces of Twitch and Discord. Depending on the selected scope, data such as account identifier, profile name, email address and avatar may be processed by us. These services are used for authentication and – within the permitted scope – for connecting your channels to Streamboard (e.g. go-live signals, server notifications). Details about the respective providers can be found in their privacy policies.

4. Google Account, YouTube and YouTube Data API v3

When you use Streamboard via "Sign in with Google / YouTube" or link your Google account in your account settings, we access data from Google within the scope of Google OAuth 2.0 and the YouTube Data API v3. This section fulfills the transparency requirements of the Google API Services User Data Policy and describes which Google user data may be affected and how we use them.

4.1 Requested OAuth Permissions (Scopes) and Justification

When connecting your Google account, Streamboard requests the following permissions through Google's official OAuth consent screen (shown in abbreviated form depending on Google's display; technical designation):

  • OpenID Connect (openid) – for secure identification of your session and association with your Streamboard account.
  • Profile (profile) – display and context information from your Google profile, as provided by Google.
  • Email (email) – for login, account recovery and commercial user communication within the legally permitted scope.
  • YouTube: read-only access – Scope: https://www.googleapis.com/auth/youtube.readonly (often described in the Console as YouTube channels or data read).

Why we need youtube.readonly: Streamboard is a platform for creators that delivers automatic notifications to Discord, Telegram and other targets. For YouTube channels you link with us, we need to read public and channel-associated YouTube metadata without modifying videos or publishing content on your behalf. Specifically, the read-only scope enables:

  • Retrieval and updating of the YouTube channel overview (e.g. channel IDs, titles, visible metrics such as subscriber counts, as delivered by YouTube and not marked as confidential), so you can select and assign your channels in Streamboard.
  • Livestream status and live metadata (e.g. whether you are live, title/thumbnail as available via the API), to trigger notifications at the start or during livestreams and – where provided in the app – to provide tracking/logging of live status for your configured targets.
  • Evaluation of uploaded videos and playlist assignments (e.g. uploads playlist, playlists you selected or filtered), to send notifications for new uploads and to restrict the selection to specific playlists or upload contexts – according to your settings in Streamboard.

We use this data exclusively to provide you with the described Streamboard features. There is no access for uploading, editing or deleting YouTube content through this OAuth permission.

4.2 Which Google/YouTube Data We May Process (Data Accessed)

Depending on API responses and your settings, the following categories may apply:

  • Google Account / OAuth: identifiers assigned by Google, authentication tokens (access/refresh tokens stored in encrypted form, see below), profile and email-related fields according to the granted scopes.
  • YouTube Channel: channel IDs, display names, custom URL, thumbnails, aggregated statistics, as retrievable via the API in read-only form.
  • Live and Video Context: information about livestreams (e.g. live status, metadata) as well as videos and playlists, as required for your activated notifications and filters and available via the API.

4.3 How We Use the Data (Data Usage)

We process the aforementioned data to: (1) create or log in to your account and manage the Google/YouTube connection; (2) display and synchronize YouTube channels you selected in the application; (3) detect events such as "Live" or "new video" and trigger the notifications you configured (e.g. to Discord or Telegram); (4) ensure technical operation, error analysis and abuse prevention within reasonable limits.

4.4 Disclosure to Third Parties (Data Sharing)

Google itself processes OAuth and API requests in accordance with the Google Privacy Policy. We do not sell your Google or YouTube data.

Content-wise, parts of notifications you selected (e.g. titles, links, channel name) may be transmitted to third-party providers you connected when you set up targets there – typically Discord, Telegram or similar channels. This transmission occurs only according to your configuration in Streamboard and is technically necessary for delivering notifications. The respective provider may be an independent data controller; please refer to their privacy policies.

Furthermore, our general data processors (e.g. hosting) apply to the storage of application data, but not to any "reselling" of Google user data.

4.5 Storage and Protection (Data Storage & Protection)

Access credentials (e.g. OAuth tokens) and structured data obtained from the YouTube API are stored in our application database and in secured server environments. We employ industry-standard technical and organizational measures (including TLS in transit, access restrictions, regular updates) to prevent unauthorized access. Details about hosting can be found – where described – in the legal notice or in agreements with the host.

4.6 Retention and Deletion (Data Retention & Deletion)

We store Google/YouTube-related data as long as your account exists and an active connection is maintained or a legal retention obligation applies. You can disconnect your Google account in Streamboard's account settings; this will discontinue further use of the connection for new queries after successful disconnection, as technically implemented.

You may request the deletion of your user account and associated data through the contact options listed in the Legal Notice, provided no legal obligations prevent this. After a confirmed deletion, the associated personal data will be removed or anonymized to the extent permitted.

Note on the consent flow: When first connecting, Google displays the OAuth consent screen with the requested permissions; you can accept or cancel access there and revoke the authorization later in your Google account settings for connected apps.

5. Cookies and Analytics (Marketing Website)

On the public marketing pages, we store your decision regarding optional features in your browser's local storage ("streamboard_cookie_consent_v1"). This includes enabling analytics with Google Analytics (Google Ireland Ltd. / Google LLC, USA) and loading the Tabler icon font via the jsDelivr CDN (Open-JS-Foundation / providers in the USA) instead of from our server.

For Google Analytics, we use Google Consent Mode: the tag may be technically integrated, but storage and analysis for analytics purposes remain disabled without your consent (analytics_storage denied). Only when you agree will measurement be activated. Without consent, no analytics measurement with cookies for advertising/statistical purposes takes place. Icon fonts are served from our server without CDN consent.

If you consent, Google may create pseudonymous usage profiles within the described scope; when retrieving the icon stylesheet via jsDelivr, technical data (e.g. IP address, user agent) may be collected by the CDN operator. More information about Google: https://policies.google.com/privacy. You can revoke your consent at any time via "Cookie Settings" in the footer and make a new decision.

6. Payment Processing

Payments are processed through Stripe. Your payment data is processed directly by Stripe and is not stored on our servers.

7. Notice

This presentation serves as information about the data processing common on this website. It does not replace individual legal advice; for questions about your rights or for commercial use, review by a legal professional is recommended.