Privacy Policy
1. Introduction and Data Controller
CreatorPlatform (“CreatorPlatform”, “we”, “us”, or “our”) operates the software-as-a-service (SaaS) platform, web tools, live stream overlays, bonus trackers, giveaway utilities, and branded website publishing infrastructure available at creatorplatform.appand associated domain networks (collectively, the “Service”).
Under Regulation (EU) 2016/679 (the General Data Protection Regulation or “GDPR”), the UK Data Protection Act 2018 / UK GDPR, and applicable global privacy regulations, CreatorPlatform operates as the Data Controller with respect to the personal information collected directly through our website, user registration, account administration, and platform security systems.
For any questions regarding this Privacy Policy or our data protection practices, you may contact our designated privacy team at contact@creatorplatform.app.
2. Strict Age Restriction (Strictly 18+) & Non-Gambling Disclaimer
Mandatory Age Requirement: The Service is strictly intended for individuals who are at least eighteen (18) years of age or the legal age of majority in their jurisdiction, whichever is greater. We do not knowingly solicit, collect, or process personal data from children or minors under 18. If we discover that an individual under 18 has created an account or submitted personal data, we will immediately terminate the account and permanently delete all associated information.
Platform Nature: CreatorPlatform is an independent software and digital infrastructure provider for content creators. CreatorPlatform is not an online casino, gambling operator, sportsbook, or lottery organizer. We do not accept bets, wagers, gaming deposits, or process gambling transactions.
3. Categories of Personal Data We Collect
In accordance with the principle of data minimization (GDPR Article 5(1)(c)), we collect only data that is adequate, relevant, and limited to what is strictly necessary to operate our platform securely and effectively:
A. Account & Identification Information
When you register or log in, we collect your email address, chosen username, display name, account role (Free, Trial, Premium, Admin), profile avatar URL, and account creation timestamp. If using password authentication, passwords are cryptographically hashed using industry-standard one-way hashing algorithms (we never store plain-text passwords).
B. Single Sign-On (SSO) & OAuth Identity Providers
If you authenticate via Google, Twitch, or Kick, we receive basic public profile identifiers authorized by those providers (e.g., Google Subject ID, Twitch User ID, Kick User ID, verified email address, public username, and avatar URL). For streamers connecting Twitch or Kick chat features, we securely store encrypted API tokens required to interact with chatrooms or giveaway systems.
C. Network, Security & Anti-Fraud Logs (ipData)
To protect our infrastructure against cyberattacks, automated abuse, DDoS attacks, and unauthorized account takeovers, our systems log security telemetry upon authentication and administrative actions. This includes your IP address, access timestamps, coarse geographical location (country, region, city), Internet Service Provider (ISP), Autonomous System Number (ASN), and automated threat indicators (proxy, VPN, or hosting data center detection). We also utilize privacy-preserving automated anti-bot verification to confirm genuine human interactions without harvesting personal behavioral profiles.
D. Creator Content & Tool Configurations
Information you voluntarily input into our creator tools, including branded website layout configurations, custom domain mappings (DNS hostnames), casino affiliate links, bonus hunt calculations, slot lists, stream overlay settings, and giveaway rules.
E. Billing & Subscription Transaction Metadata
For paid memberships, payments are processed via authorized third-party gateways or approved direct channels. We record transaction invoice IDs, payment status, subscription dates, and order amounts. We do not collect, process, or store payment card numbers, bank account numbers, or private cryptocurrency wallet keys.
F. Pseudonymous Usage & Analytics Data
With your consent, our built-in tracker generates a random pseudonymous visitor ID (_cp_vid) stored in your local browser storage to calculate unique page views, outbound affiliate link clicks, and live audience presence for creator dashboards. This telemetry is not merged with third-party advertising profiles.
4. Legal Bases for Processing under GDPR (Article 6)
We only process personal data when a recognized lawful basis applies under European and international law:
| Processing Activity | Data Categories | GDPR Legal Basis |
|---|---|---|
| Account creation, authentication, providing core SaaS tools, overlays, and website builder | Account details, OAuth tokens, user content | Performance of a Contract (Article 6(1)(b)) |
| Platform security, DDoS prevention, fraud mitigation, bot detection | IP address, security logs, anti-bot verification tokens | Legitimate Interests (Article 6(1)(f)) |
| Audience telemetry, visitor counts, analytics cookies | Visitor UUID, session country, click logs | Consent (Article 6(1)(a) & ePrivacy Art. 5(3)) |
| Tax, commercial accounting, and responding to lawful legal orders | Order history, invoice records, audit logs | Legal Obligation (Article 6(1)(c)) |
5. Sharing of Personal Data & Third-Party Service Providers
We do not sell, rent, monetize, or trade your personal data to data brokers or advertising exchanges. We share data solely with trusted operational infrastructure providers under strict confidentiality and security commitments:
- Cloud & Network Infrastructure: Enterprise cloud hosting, content delivery networks, and DDoS mitigation providers to maintain platform availability and security.
- Encrypted Data Storage: Secure database and caching infrastructure deployed with industry-standard TLS encryption in transit and AES-256 encryption at rest.
- Payment Gateways: Authorized cryptocurrency settlement gateways and verification processors to facilitate transaction provisioning.
- Authentication Providers: Third-party OAuth services (such as Google, Twitch, or Kick), strictly when you voluntarily choose to authenticate or link chat integrations.
- Legal & Law Enforcement: Competent judicial or regulatory authorities when strictly required by a valid, binding legal subpoena, court order, or mandatory statutory obligation.
6. International Data Transfers
CreatorPlatform operates globally. When personal data of individuals located within the European Economic Area (EEA), United Kingdom, or Switzerland is transferred outside these territories, we ensure appropriate safeguards are implemented in compliance with Chapter V of the GDPR. This includes utilizing Standard Contractual Clauses (SCCs) approved by the European Commission, the UK International Data Transfer Addendum, and verifying adequacy decisions or Data Privacy Framework certifications where applicable.
7. Your Data Protection Rights (EU GDPR, UK GDPR & International)
Under both Regulation (EU) 2016/679 (EU GDPR) and the UK Data Protection Act 2018 / UK GDPR, you have comprehensive statutory rights regarding your personal data:
- Right of Access (Art. 15): Obtain confirmation as to whether your personal data is processed, and receive a copy of that data.
- Right to Rectification (Art. 16): Correct inaccurate or incomplete profile information without undue delay.
- Right to Erasure (Art. 17 “Right to be Forgotten”): Request permanent deletion of your account and personal records where statutory grounds apply.
- Right to Restriction of Processing (Art. 18): Request temporary restriction of data processing while a contest or verification is pending.
- Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Object (Art. 21): Object to data processing based on legitimate interests (Article 6(1)(f)) or direct marketing at any time.
- Right to Withdraw Consent (Art. 7(3)): Revoke consent for analytics or non-essential storage at any time with immediate effect.
- Automated Decision-Making (Art. 22): You have the right not to be subject to a decision based solely on automated processing having legal effects on you. We do not use automated profiling for legal or significant individual decisions.
Supervisory Authority & Complaints: If you are based in the United Kingdom, you have the right to lodge a complaint directly with the Information Commissioner's Office (ICO) at ico.org.uk. If you are located in the European Union / EEA, you may lodge a complaint with your national supervisory authority (such as the DPC in Ireland, CNIL in France, BfDI in Germany, or AEPD in Spain).
8. Data Retention Periods
In accordance with GDPR Article 5(1)(e) (storage limitation), we retain personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Active Account Data: Retained for the active duration of your account and deleted within 30 days upon receipt of a verified deletion request.
- Security & Network Logs: Retained for 90 days for threat detection, DDoS defense, and rate-limiting enforcement, then automatically purged.
- Billing & Transaction Invoices: Retained for up to 6–7 years strictly to satisfy mandatory statutory accounting, fiscal reporting, and tax compliance obligations.
- Pseudonymous Analytics Data: Aggregated and automatically expired within 12 months.
9. Cookies & Tracking Technologies
We use strictly necessary cookies for session authentication, token refresh, and CSRF protection. Optional analytics telemetry is disabled by default unless you grant explicit affirmative consent.
For complete technical details on our cookie identifiers, storage keys, lifetimes, and to manage your preferences at any time, please review our comprehensive Cookie Policy.
10. Discord Bot & Chat Integrations
When an account administrator links the CreatorPlatform Discord Bot to their server:
- We store the Discord Guild ID to link the bot to the appropriate creator profile.
- When a “Guess the Balance” or giveaway event is active, the bot reads messages solely in the designated channel to record user entries (Discord ID, username, and entry value).
- We do not monitor, read, or permanently store private direct messages or unrelated server channels.
11. Contact Information & Exercising Your Rights
To exercise your privacy rights, request account erasure, or submit a data protection inquiry, please contact our team:
Email: contact@creatorplatform.app
Support Channel: support@creatorplatform.app
Direct Telegram Support: @Vizzi0n
Requests are typically acknowledged within 24–48 hours and fulfilled within statutory deadlines (30 days under GDPR).