Legal

Privacy Policy

Last updated: 2026-11-05

What personal data Struad collects, why we use it, who else handles it, and what you can do about it.

1. Who is responsible

Struad (the “Service”), operated by the Struad team (“Struad”, “we”, “us”), decides how the personal data described here is used. Under the EU and UK General Data Protection Regulation (GDPR), that makes us the controller.

This policy covers struad.com and app.struad.com, the emails we send, our Telegram bots and the on-chain features of the Service. It also covers the public data we read about Twitch and Kick channels, including channels whose streamers never signed up (see public data about Twitch and Kick channels).

For any privacy question or request, write to [email protected].

2. What we collect

If you sign up as a streamer

From Twitch or Kick when you sign in: your account id, username, display name and profile picture.
When you verify your channel: your email address, and the read access that the platform shows you on its consent screen. On Twitch that is your followers and subscribers, and we also store the date your account was created and your broadcaster type. On Kick it is your channel data.
The sign-in tokens the platform gives us, stored encrypted.
What you add yourself: your country, your payout wallet address, listings, offers, donation page and alert settings, alert images and sounds you upload, and stream goals.
Your settings, such as notifications, language and your choice about automatic clips.

If you sign up as a brand

Your company name, work email address and password. We store only a hash of the password.
The one-time codes we email you, stored as hashes.
Your company profile, if you add one: logo, website and description.
Your shortlists, requests and deals, and the wallet address you pay from.

Everyone with an account

Messages and files in requests and deals, and in support chats.
Your notifications, and the Telegram chat you link to our bot, if you link one.
Which onboarding steps you have completed.
How you arrived, if you came through a referral link or an invite link.

If you donate

The amount and currency, the name and message you enter, and the transaction signature. Your wallet address is part of the transaction, which is public on the Solana blockchain.
If the streamer has turned on a voice for alerts, your message is turned into audio by Google Cloud Text-to-Speech, and the audio is stored with the donation.

If you chat in or follow a stream

When we read a channel’s public chat, we count messages and record your platform user id against that channel and day. We also look up when your account was created, to tell new accounts from old ones, and keep that date in a cache with no fixed end date. We do not store the text of chat messages.
If a streamer has verified their channel with Struad, we also store that channel’s follower and subscriber lists: user id, username and display name, with the follow date for a follower, and the tier and any gift (and who gave it) for a subscriber.

If you stream on Twitch or Kick

We read public data about many Twitch and Kick channels, whether or not their streamers signed up. Public data about Twitch and Kick channels says which channels and what we read.

If we contact you

For outreach we keep the email address we have for you (usually one you published on your channel), the letters we send, your replies, and our notes on other contact with you, such as direct messages. If our email provider reports that a letter was delivered, opened or clicked, we record that.
When you open one of our invite links, we record the campaign it came from, the referring page and your browser’s user agent, and, only if you accept optional cookies, a visitor id stored in a cookie. We do not store your IP address.

If you work for a brand we found

Every night we look for brands that advertise on streams: in public Twitch and Kick stream titles, Steam’s list of upcoming games, public licence registries, and public links in channel panels, bios and chat.
For each brand we keep its name, website and the reason we found it. We read its public website (the home page and up to three contact or partner pages) for business contact details: email addresses, social links and affiliate-program links.
We use them to invite the brand to Struad, as outreach (see below).

Technical data

Our gateway uses your IP address to rate-limit requests. It is held only for the length of the rate-limit window. Our logs record the request path and result, not your IP address. No database of ours stores IP addresses.
Cloudflare, our network provider, processes your IP address and request data to deliver the site.

3. Public data about Twitch and Kick channels

Which channels

Twitch and Kick channels we find live with more viewers than a threshold we set.
Channels that a brand has sent a request to through Struad.
Channels whose streamers have signed up to Struad.

What we read

The channel profile: the platform’s channel id, channel name, display name, profile picture, description, language, category and stream title.
Live activity: when the channel is live, and its viewer counts over time.
Audience size: follower totals on Twitch, new follows and subscriber counts on Kick.
Chat activity: per-minute counts, such as messages, unique chatters, emote-only messages, first-time chatters and average message length, and which chatter ids chatted in the channel on which day. We do not store the text of chat messages.
Clips and videos: details of the channel’s public clips and videos, such as title, date, views and link.
Contact details the streamer published: social links and business email addresses in the channel description, social buttons and panels.

If we write to a streamer, we also keep our letters, their replies and our notes on other contact (see “If we contact you” above).

Where it comes from

Twitch’s and Kick’s public interfaces and public channel pages.
The channel’s public chat, which we read without signing in to any account.
Event notifications that Kick sends us for public channel activity, such as chat and follows.

Why we use it

For a catalogue that only signed-in brands can see, with analytics about channels and their audiences that help brands compare channels and choose where to advertise.
For letters to a business address the streamer published, inviting them to Struad or passing on a brand’s request. Every letter has an unsubscribe link.
For automatic clips. On Twitch channels that allow clips, Struad may create a few short public clips of moments when chat reacts strongly, through Struad’s own Twitch account. Across all of Twitch this is limited to a small number of clips per hour. The clips show as clipped by Struad, and the streamer can delete them on Twitch, as with any clip. A streamer who has signed up can choose “Never clip my channel” or “Prioritise my channel” under Moments on their Analytics page. A prioritised channel is not held to the hourly limit, only to a pause between two clips of the same channel. Our team can also start clips by hand on the channels with the busiest chat at that moment; those skip the hourly limit, but never a channel set to “Never clip my channel”.

Analytics are estimates worked out automatically from public data, not findings of fact.

We do not sell this data, and we do not use it to target ads at you.

Legal basis

Our legitimate interests (GDPR Art. 6(1)(f)): running a marketplace where brands can compare channels and streamers hear about paid opportunities. We keep the impact on you low:

we use only data that the streamer or the platform made public;
the same kind of statistics is shown publicly on Twitch and Kick and on other analytics sites, without signing in;
we do not store the text of chat messages;
the catalogue is visible only to signed-in brands;
you can object, or unsubscribe from our emails, at any time.

Who sees it

Signed-in brand accounts, through the catalogue and the channel pages.
Our team, to run the Service and to reach out.
Our providers, who host and deliver the Service and send our emails (see who we share data with).

How long we keep it

Viewer, follower and chat statistics: up to 1 year, some daily figures up to 400 days. Daily summaries of a channel: up to 3 years. Some computed figures: 90 days.
Records of which chatter ids chatted in the channel on which day: no fixed end date.
The channel profile in the catalogue: no fixed end date.
Our letters and contact records: see how long we keep data. If you unsubscribe, your address stays on a suppression list, so that we never write to it again.

Objecting

If your channel is on Struad and you never signed up, you can object to how we use its data by writing to [email protected] with your platform (Twitch or Kick) and channel name.

We stop all emails to you. The unsubscribe link in any of our letters does the same at once.
The channel’s public statistics stay in the catalogue for signed-in brands. They come from public data, the same kind other analytics sites show, and brands rely on them to compare channels.
If you think your case is different, tell us why. We answer within 30 days.

4. Why we use it, and our legal bases

To provide the Service: accounts, listings, requests, deals and their escrow status, donations, goals, referrals, notifications and support. Legal basis: performing our contract with you (GDPR Art. 6(1)(b)).
To build the catalogue and its analytics from public stream data. Legal basis: our legitimate interests (Art. 6(1)(f)). We want to help brands compare channels and choose where to advertise. See public data about Twitch and Kick channels.
To keep the Service secure: rate limits, abuse prevention and fraud checks. Legal basis: legitimate interests.
To contact streamers and businesses about joining Struad or about a brand’s request, to find brands that advertise on streams, and to measure whether our outreach works. Legal basis: legitimate interests. You can object at any time, with the unsubscribe link in every letter or by writing to us.
To credit referrals and invites. Legal basis: legitimate interests, and our contract with the referrer.
To meet legal duties, such as answering lawful requests from authorities. Legal basis: legal obligation (Art. 6(1)(c)).

We do not sell personal data, and we do not use it to target ads at you.

6. International transfers

Our servers are in the EU, but some providers above process data in other countries, such as the United States. Where a provider offers standard contractual clauses or a data processing agreement, we rely on them.

7. Cookies and local storage

We use no advertising cookies and no analytics or tracking scripts. A few cookies are needed for the site to work and are always set. Three optional ones are set only if you accept them in the cookie banner.

Strictly necessary (always set)

__Host-refresh_token: Keeps you signed in. Not readable by scripts. Lasts 7 days.
twitch_oauth_state, kick_oauth_state: Protect a Twitch or Kick sign-in while it is in progress. Last 10 minutes.
oauth_bind: Ties the last step of a sign-in to your browser, so a sign-in link cannot be used by someone else. Lasts 60 seconds.
struad-theme: Remembers the light or dark theme you chose, across struad.com. Lasts 1 year.
struad-locale: Remembers the language you chose, across struad.com. Lasts 1 year.
struad_consent: Remembers whether you accepted or declined optional cookies, across struad.com. Lasts 6 months.

Optional (only if you accept)

struad_ref: Remembers the referral link you arrived through, so the streamer who invited you is credited. Lasts 30 days.
struad_invite: Remembers which of our invite links you opened, so a later sign-up can be tied to it. Lasts 30 days.
struad_vid: A random visitor id set by our invite pages, so that one person opening a link twice counts once and automated link scanners can be told apart. Lasts 6 months.

If you decline, or before you choose, none of the optional cookies is written or read, and any already in your browser, for example from before this banner existed, is deleted when you open a page. A referral or invite link still works on the page you opened it on, but it is not remembered after you leave. You can change your choice at any time with “Cookie settings” at the foot of this page.

Your browser’s local storage also keeps your session (a short-lived access token and a summary of your account), your theme, which wallet you used, a donation you signed but we have not recorded yet, and small interface preferences.

Embedded Twitch and Kick content can set its own cookies. You can delete cookies and local storage in your browser settings at any time; you will then be signed out.

8. How long we keep data

Accounts: As long as your account exists. After you delete it, we keep its history and the details needed to restore it until you ask us to erase your personal data (see deleting your account).
Stream statistics: Viewer, follower and chat statistics up to 1 year, some daily figures up to 400 days. Daily summaries of a channel up to 3 years. Some computed figures 90 days; the latest stay with the channel’s catalogue entry.
Audience lists: Follower and subscriber lists of verified channels 180 days. Records of which chatter ids chatted in which channel on which day are kept without a fixed end date.
Channel profiles: The catalogue entry of a channel has no fixed end date.
Discovered brands: No fixed end date. We delete a brand’s record and contacts on request.
Outreach: Contacts, letters and notes until you ask us to delete them. If you unsubscribe, we keep your address on a suppression list, so that we never write to it again.
Invite visits: No fixed end date yet.
Email codes and links: Deleted 30 days after they are issued.
Backups: Daily disk snapshots, kept 7 days. Snapshots we take by hand before a risky change, and the copies left on old servers when we move to new ones, are deleted within 90 days.
The blockchain: Transactions on Solana are permanent. Nobody, Struad included, can delete them.

9. Your rights

Under the GDPR you have the right to:

get a copy of your personal data;
have wrong data corrected;
have your data deleted;
restrict how we use it;
receive data you gave us in a portable format;
object to processing based on legitimate interests, including outreach;
withdraw consent, where we rely on it.

To use any of these rights, write to [email protected]. We may ask you to prove who you are or that a channel is yours. We aim to answer within 30 days.

You can also complain to the data protection authority in the country where you live or work.

If your channel is on Struad and you never signed up, see objecting.

10. Deleting your account

You can delete your account yourself under Settings, or ask us at [email protected]. A brand confirms with its password; a streamer confirms with the Twitch or Kick account linked to it.

We delete an account only when nothing is still open:

no deal in progress and no money held in escrow for one of your deals;
no open brand request, sent by you or addressed to your channel;
no open donation goal that still holds viewers’ money;
no referral balance at or above the payout minimum (10 USDC or 0.05 SOL). A smaller balance is forfeited; we show you the exact amount before you confirm.

Once the account is deleted:

no one can sign in to it, and your email and your Twitch or Kick account are free for a new account;
your channel is hidden from the catalogue, from search and from channel profiles, and we stop all emails to you;
your listings are taken down;
the account’s history stays: deals with their messages and files, payments, referral records and support conversations, because the other party and the dispute process rely on them. Other users see “Deleted account” in place of your name and profile;
we keep the details needed to restore the account (your email and your Twitch or Kick ids), so we can restore it if you ask.

To have your personal data erased as well, write to [email protected]. We erase your email, name, sign-in and restore details, company details, payout wallet address, the text of your support and Telegram messages, and the addresses in our outreach records. The records of your deals and payments stay, without your name or email.

Transactions on the blockchain cannot be deleted.

11. Security

We protect data with measures that include encrypted sign-in tokens, hashed passwords, a session cookie that scripts cannot read, private file storage served through short-lived links, servers with no ports open to the internet (SSH is reachable only from the address range of Google’s Identity-Aware Proxy), and a separate, access-controlled admin panel. No system is perfectly secure, so we cannot guarantee that data will never be exposed.

12. Children

Struad is for people aged 18 or older. We do not knowingly collect personal data from anyone younger, beyond the chat and follower statistics described above. If you think a child has given us personal data, write to [email protected] and we will delete it.

13. Changes to this policy

We may update this policy. We will post the new version on this page with a new “Last updated” date, and tell account holders about significant changes by email or in the app.

14. Contact