Our transparent policy explaining how we collect, use and protect your personal data.
The organization acting as data controller under Turkish Personal Data Protection Law No. 6698 (KVKK):
Email: kvkk@streamrooms.live | Web: streamrooms.live
For questions about our personal data processing, you can use the contact details above.
For legal bases, recipients and how to apply: KVKK Information Notice.
| Data Type | Information Collected | Purpose | Basis |
|---|---|---|---|
| Identity | First name, last name, username | Account creation and authentication | Contract |
| Contact | Email address, phone number | OTP verification, notifications, support | Contract |
| Financial | IBAN details | Making income payouts | Contract |
| Technical | IP address, browser information, session data | Security, debugging, fraud prevention | Legitimate interest |
| Location | Latitude, longitude and accuracy from the browser; the street-level address found from them; page and time | Account and payment security, fraud detection. Location permission is required to use the dashboard. | Legitimate interest |
| Platform Key | Kick, Twitch, YouTube stream key (encrypted) | Stream delivery (restream) | Contract |
| Stream Data | Stream duration, viewer count, income information | Income calculation and statistics | Contract |
| Engagement Data | Message count, unique chatters, engagement rate, peak moments | Stream health score, analytics, sponsorship metrics | Contract / Legitimate interest |
| Ad Impressions | Impression count, viewer data at the time of impression | Ad income calculation, bot/manipulation detection | Contract |
Platform stream keys are especially sensitive data. Additional security measures apply to them:
All platform keys are encrypted with the AES-256-GCM algorithm before being saved to the database. They are never stored in unencrypted (plain-text) form in any system.
Keys are transmitted through an encrypted tunnel using TLS 1.3. No third party can read the data in transit.
No staff member, including Streamrooms employees, can see your platform keys in plain text. The encryption key is kept in a separate Key Vault.
Keys are held in memory only for the duration of an active stream. When the stream ends, the memory is permanently erased by overwriting.
Your personal data is not sold or rented to any advertising company or third-party data broker. It may be shared only in the following cases:
KVKK-compliant data processing agreements have been signed with all service providers.
Sharing with advertisers and sponsors: Only the following may be shared:
Never shared under any circumstances: earnings and payment information; stream keys; email and contact details (unless written permission is given); individual viewer/chatter identities and chat contents; moderation records; IP and security logs.
Our servers are in the European Union (Hetzner, Germany). Some of our service providers are abroad: Cloudflare (USA, site infrastructure and security), Resend (USA, email sending), Anthropic (USA, chat bot and profile images), Paddle (UK, subscription payments), OpenStreetMap Foundation (UK, address lookup from location), Google (USA, fonts). These transfers are made under KVKK Article 9 with standard contracts and other appropriate safeguards. Transfers to Kick, Twitch and YouTube are made at your request to deliver your stream to these platforms. Details: KVKK Information Notice.
| Data Type | Retention Period |
|---|---|
| Account information | While the account is active + 3 years |
| Platform keys | Deleted immediately when the connection is removed |
| Stream statistics | 2 years |
| Security logs | 1 year |
| Location records | 1 year |
| Financial records | 10 years (legal obligation) |
| Session data | At session close or 30 days |
Under KVKK No. 6698 you have the following rights:
To exercise your rights, email kvkk@streamrooms.live. Applications are answered within 30 days.
Streamrooms uses only required technical cookies:
No advertising, tracking or third-party analytics cookies are used. For details including Cloudflare's security cookies and browser storage: Cookie Policy.
If this policy is updated, a notice is sent to your registered email address. Updates take effect 30 days after publication.