Privacy Policy
This policy explains what personal data SWAGVERSE collects when you use it, why, who it is shared with, how long it is kept and how you can use your rights. It applies to the SWAGVERSE website at streamieverse.com, its installable web app and the SWAGVERSE games that run in a creator's Twitch chat.
It also serves as the information notice ("aydınlatma metni") required by Türkiye's Personal Data Protection Law No. 6698 (KVKK).
Who we are
SWAGVERSE is an unofficial fan community run by a single individual based in Türkiye, who is the data controller for the personal data described here.
- Data controller: Ahmet Yiğit Sunar (individual), Türkiye
- Email: legal@streamieverse.com
- Signed-in members can also write to us from the Support page
SWAGVERSE is not operated by, affiliated with or endorsed by Twitch or any streamer unless this is stated explicitly on the site.
What we collect
| Category | What exactly | Where it comes from |
|---|---|---|
| Sign-in identity | Your Twitch user ID, Twitch username and profile picture address | Twitch, when you sign in |
| Age check | Nothing about your birth date is stored — only the date you confirmed you are 16 or older (or that the check failed) | You, once, during sign-up |
| Profile | Your display name (you can change it); your handle and avatar are copied from Twitch | You and Twitch |
| Activity | XP and level history, quests, achievements, collectible cards, game results, likes and dislikes, bookmarks, poll votes, event registrations and check-ins | Your use of SWAGVERSE |
| Support requests and comments | Messages you send to Support, and comments once they open | You |
| Member rooms | The rooms you host or join, your seat and your moves in a game | Your use of SWAGVERSE |
| Twitch chat games | When a creator runs a SWAGVERSE game in their Twitch chat: your Twitch user ID, username and display name, and the game commands you type (messages starting with !) | Twitch chat, while a game is running |
| Clips | Public clips from the creator's Twitch channel, including the Twitch name of the person who made the clip, its title and view count | Twitch |
| Reports and moderation | Reports you send, reports about you or your content, moderation decisions, appeals and the evidence they refer to | You, other members and moderators |
| Consent records | Which version of these documents you accepted and when, with a one-way hash of your IP address (never the IP itself) | Your browser, when you accept |
| Security data | For each active sign-in session: the IP address and browser user-agent. The sign-in event log keeps only one-way hashes of these | Your browser |
| Product usage events | Records of actions such as "quest completed", linked to your account | Your use of SWAGVERSE |
| Push notifications (optional) | An encrypted push subscription token for your browser | Your browser, only if you turn notifications on |
We ask for your birth year and month only to check that you are 16 or older. The value is used for that single check and is never saved.
Twitch chat games and people who are not members
A creator can run SWAGVERSE games in their own Twitch chat. While a game is running, SWAGVERSE receives the channel's chat messages from Twitch. Only messages that start with `!` are read as game commands — every other chat message is ignored and never stored. Anyone who types a game command takes part, including viewers who do not have a SWAGVERSE account. Their Twitch name and score can appear on the creator's stream overlay, which is public. A winner without an account can claim the prize by signing in within 3 days.
The Cheeseburger assistant
Questions and chat messages you send to Cheeseburger, the SWAGVERSE assistant, are answered by language models that run on SWAGVERSE's own server — they are not sent to an outside AI company. So that a casual chat can follow on, your browser sends your previous message and Cheeseburger's reply along with the new one. Your messages and the answers are not stored; only counters are kept to apply the limits: how many questions you asked today (for 24 hours) and how many chat messages you sent recently (for 5 minutes).
What we do not collect
We do not ask Twitch for your email address or password. We do not collect your real name, precise location, contacts or full date of birth. SWAGVERSE does not take payments, so we hold no payment details. We do not use advertising or tracking cookies and we do not sell personal data.
Why we use your data
| Purpose | Legal basis (UK/EU GDPR · KVKK) |
|---|---|
| Signing you in, showing your profile, calculating XP and levels, running quests, games, events, polls, rooms and seasons | Performance of our agreement with you (GDPR Art. 6(1)(b) · KVKK Art. 5(2)(c)) |
| Running chat games on a creator's stream, including for viewers without an account | Our and the creator's legitimate interest in running the game (GDPR Art. 6(1)(f) · KVKK Art. 5(2)(f)) |
| Keeping SWAGVERSE safe and fair: preventing bots, multiple accounts and vote manipulation, moderating, securing sessions | Legitimate interests (GDPR Art. 6(1)(f) · KVKK Art. 5(2)(f)) |
| Understanding how the product is used, from first-party usage events | Legitimate interests (GDPR Art. 6(1)(f) · KVKK Art. 5(2)(f)) — never used for advertising, never sold |
| Push notifications and other optional features that ask for permission | Your consent (GDPR Art. 6(1)(a) · KVKK Art. 5(1)), which you can withdraw at any time in Settings |
| Answering valid requests from authorities and keeping records the law requires | Legal obligation (GDPR Art. 6(1)(c) · KVKK Art. 5(2)(ç)) |
| Establishing, exercising or defending legal claims | Legitimate interests (GDPR Art. 6(1)(f) · KVKK Art. 5(2)(e)) |
Some checks are automatic — for example daily XP caps and limits on how fast actions can be repeated. They never make decisions with legal or similarly significant effects about you; account restrictions are decided by a person.
Who we share it with
We never sell your personal data. We use a small number of service providers ("data processors") to run SWAGVERSE; they may only use the data to provide their service to us.
- Oracle Cloud Infrastructure — the servers and database that run SWAGVERSE, in Oracle's United Kingdom (London) region.
- Cloudflare — network protection, secure connection to our servers, and storage for files and encrypted database backups.
- Twitch — sign-in, chat games and clips. On the live page you can choose to load Twitch's player and chat; they then load directly from Twitch and Twitch's own privacy policy applies to them.
- YouTube (privacy-enhanced mode), TikTok and Kick — only if you click to load a video a creator linked.
- Your browser's push service (for example Google, Mozilla or Apple) — only if you turn push notifications on.
Other members see what you make public on SWAGVERSE: your display name, avatar, level, achievements, cards you show, comments and game results. Moderators of a community see reports and moderation records for that community.
We may disclose data when the law requires it, to answer a valid request from an authority, or to protect the safety of members.
International transfers
SWAGVERSE's servers are in the United Kingdom and the operator is based in Türkiye. Twitch and Cloudflare process data in the United States and other countries. Where personal data leaves the UK, the EU or Türkiye, we rely on the safeguards the law provides — such as adequacy decisions, standard contractual clauses and the standard contracts required by KVKK Article 9 — offered by these providers.
How long we keep it
| Data | Retention |
|---|---|
| Sign-in sessions (including IP address and browser) | Deleted 7 days after you sign out or the session expires |
| Sign-in event log (IP address kept only as a one-way hash) | 30 days |
| IP addresses in the administrator audit log | 7 days, then removed from the record |
| Product usage events and notifications | 90 days; daily totals without personal data up to 13 months |
| Twitch chat game records | 90 days after the game ends |
| Member rooms | Deleted one day after the room expires |
| Assistant question counter | 24 hours |
| Assistant chat message counter | 5 minutes |
| Secret card tap counter | 60 seconds |
| Moderation evidence | 90 days after a case is closed, unless an appeal or legal requirement needs it longer |
| Your profile, activity and comments | While your account exists |
| Data export files | Deleted 7 days after they are ready |
| Encrypted backups | 35-day cycle; deletions are re-applied if a backup is ever restored |
Records that have reached their period are deleted automatically every day. If a person's records are subject to a legal hold (for example, a valid request from an authority), their deletion is paused until the hold ends.
Your rights
Depending on where you live — including under the UK GDPR, the EU GDPR and KVKK Article 11 — you can:
- Find out whether we process your data, what we hold, why, and who it has been shared with in Türkiye or abroad;
- Access and download your data — Settings, "Download your data". An export is prepared within 24 hours and the download link is short-lived;
- Correct your data — change your display name in SWAGVERSE; your Twitch username and picture are updated from Twitch when you next sign in;
- Delete your account — Settings, "Delete account". You will be asked to sign in again first. Your public profile is hidden, sessions are ended, your Twitch link is removed, your chat game records are anonymised and your personal data is removed. Records we must keep for security or legal reasons are explained when you request deletion;
- Ask us to tell the providers we shared your data with about a correction or deletion;
- Withdraw consent at any time in Settings, without affecting what was done before;
- Object to processing based on legitimate interests, or to a result reached solely by automated analysis that is against you, and restrict some processing;
- Claim compensation if you suffer damage because your data was processed unlawfully.
To use a right that is not available in Settings, email legal@streamieverse.com from an address we can reply to, or write to us from Support. Viewers without an account can make requests about chat game records the same way, giving their Twitch username. We answer within one month (KVKK: within 30 days) and free of charge.
You can also complain to a data protection authority — for example the Information Commissioner's Office (ICO) in the UK, your local authority in the EU, or the Personal Data Protection Board (KVKK Kurulu) in Türkiye. We would appreciate the chance to sort it out first.
Age requirement
SWAGVERSE is only for people aged 16 or older. If the age check shows you are younger, the account is blocked and signed out. If you believe a younger person is using SWAGVERSE, please contact us and we will remove their data.
Security
Sign-in uses HttpOnly cookies that page scripts cannot read. All traffic is encrypted, IP addresses in sign-in and consent logs are stored only as one-way hashes, backups are encrypted, and administrator actions require a passkey. No system is perfectly secure; if a breach is likely to put your rights at risk, we will tell you and the relevant authority as the law requires.
Changes to this policy
Each version of this policy has a version number, shown at the top of this page. When it changes in a way that matters, we will tell you on SWAGVERSE before the change applies. Where a change needs your consent, we will ask for it.