Home Services Work About Play Let's Talk

DOCUMENTATION

ZaeonPlay Privacy Policy

Last updated: August 26, 2026


ZaeonPlay is a multi-platform streaming toolkit provided by Zaeon Labs ("Zaeon Labs," "we," "us"), used by streamers worldwide with OBS Studio, Twitch, YouTube, and Kick. This Privacy Policy explains what data ZaeonPlay accesses and stores, and the rights available to you depending on where you live.

This policy covers the ZaeonPlay product. For website-level data practices, see our main Privacy Policy.

1. Summary

ZaeonPlay is offered in two forms with two different data models:


  • Web version — to link your Twitch, YouTube, and/or Kick accounts, we store only the minimum data required to establish and maintain those connections (authentication tokens and basic account identifiers). This is the only data we store.
  • Desktop/plugin version — the downloadable OBS plugins and desktop application run entirely on your own computer. We do not store any of your data anywhere. All credentials, chat data, and event data stay local to your device.

We do not sell your data or use it for advertising.


2. Information ZaeonPlay Accesses

  • Platform API tokens/credentials for Twitch, YouTube, and/or Kick.
  • Stream metrics (follower, subscriber, viewer counts).
  • Chat messages from connected platforms.
  • Event data (follows, subscriptions, raids, bits, Super Chats, gifted subs).
  • Discord webhook URLs you configure.
  • Payment gateway data (PayPal, Stripe, Ko-fi, Buy Me a Coffee, Streamlabs) used to trigger donation alerts, which may include donor display names, amounts, and messages.
  • OBS Studio connection data via obs-websocket v5.

ZaeonPlay never asks for your platform account passwords — only the API tokens/keys those platforms issue for third-party app access.


3. How Data Is Stored

Web version: we store only the minimum data required to keep your connected accounts linked. This data is stored on our servers solely to maintain the connection.

Desktop/plugin version: we do not store any data at all. Credentials are encrypted (AES) and kept locally on your device. Chat, alert, and event data are processed locally in memory and are never uploaded anywhere.


4. Legal Basis for Processing (EU/EEA/UK Users)

Where GDPR/UK GDPR applies, we process your data on the following bases:


  • Contractual necessity — to link your accounts and operate the web version's connection features.
  • Consent — where you actively connect a third-party account or enable an optional feature (e.g., a payment gateway integration).
  • Legitimate interests — to maintain the security and functioning of the web version.

You may withdraw consent at any time by disconnecting the relevant account; this does not affect the lawfulness of processing before withdrawal.


5. Data We Do Not Collect

Across both versions, we do not collect or store your chat history, viewer lists, or donation history beyond what's needed to display a live alert. We do not run advertising trackers.


6. Third-Party Services

  • Twitch — twitch.tv/p/legal/privacy-notice
  • YouTube / Google — policies.google.com/privacy
  • Kick — kick.com/privacy
  • Discord — discord.com/privacy
  • PayPal, Stripe, Ko-fi, Buy Me a Coffee, Streamlabs — see each provider's own privacy policy

Your use of these integrations is subject to your agreements with those platforms. Zaeon Labs does not control how these third parties handle data on their end.


7. Your Chat Viewers and Donors

If you use ZaeonPlay's chat, alert, or donation features, you are responsible for having a lawful basis to display your viewers' and donors' information on stream, and for your own audience-facing disclosures. Zaeon Labs does not act as a data controller for your viewers or donors.


8. Cross-Border Data Transfers

ZaeonPlay is used worldwide, and the third-party platforms it connects to (Twitch, YouTube, Discord, and payment gateways) process data outside your home country. Where we transfer web-version connection data internationally:


  • For EU/EEA/UK users, transfers rely on adequacy decisions or Standard Contractual Clauses (SCCs) where applicable.
  • For India users, transfers are made in accordance with the Digital Personal Data Protection Act, 2023, which permits cross-border transfer except to countries specifically restricted by the Indian government (none notified as of this policy's last update — confirm current status before relying on this).


9. Data Retention

  • Web version: connection data is retained for as long as your account remains linked, and deleted within 30 days of disconnection or a verified deletion request.
  • Desktop/plugin version: locally stored credentials persist until you uninstall ZaeonPlay or manually clear its local application data.


10. Your Rights


10.1 All Users

You may request information about what data we hold about you (web version only, since the desktop/plugin version stores nothing on our end) and request its correction or deletion.


10.2 EU/EEA/UK Users (GDPR/UK GDPR)

You have the right to: access your data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict processing, data portability, object to processing, and lodge a complaint with your local supervisory authority (e.g., your national Data Protection Authority, or the ICO in the UK).


10.3 India Users (Digital Personal Data Protection Act, 2023)

You have the right to: access information about your data, correction and erasure of your data, grievance redressal, and to nominate another individual to exercise these rights on your behalf in the event of death or incapacity. You may also file a complaint with the Data Protection Board of India if unsatisfied with our response.


10.4 Other Regions

If your local law (e.g., California's CCPA/CPRA, or other applicable data protection law) grants you rights not otherwise listed here, those rights apply and will be honored on request.


11. How to Exercise Your Rights

Send requests to lushhorizon.icy@gmail.com. We aim to respond within 30 days. We may need to verify your identity before actioning a request.


12. Grievance Officer (India)

In accordance with Indian law, our Grievance Officer can be reached at lushhorizon.icy@gmail.com. [INSERT: Indian law requires a named individual, not just a role/email — insert the Grievance Officer's name and designation before publishing]


13. EU Representative

[INSERT: if ZaeonPlay is not established in the EU/EEA and offers services to EU users at more than an occasional/low-risk level, Article 27 GDPR may require appointing an EU representative — confirm applicability with counsel and insert their contact details if required]


14. Children's Privacy

ZaeonPlay requires users to be at least 18 years old to create an account or use the web version, due to the platform's connection to payment and donation features. This age requirement is set above the minimum consent age in every jurisdiction where ZaeonPlay operates (including the 13–16 range used under GDPR member state law and COPPA, and the 18 threshold under India's DPDP Act) so that no regional minimum is violated.


15. Security

Web-version connection data is stored using industry-standard security practices. Desktop/plugin credentials are encrypted at rest (AES) on your own device. No method of storage is 100% secure.


16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.


17. Contact

lushhorizon.icy@gmail.com

Zaeon Labs Noida, India