Privacy policy

This policy explains how StreamRated handles personal information, consistent with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. If you are in the EU or UK, the section on your rights covers the equivalent protections.

What we collect

When you create an account

You sign in through Twitch, Kick or Google. We receive and store your platform user ID, your username or display name, your avatar URL, and your email address. We never receive or store your password on those platforms.

We generate a StreamRated username from your platform name. It is fixed, and it is shown on reviews you do not post anonymously.

We use your email address to write to you about your own account, reviews, claims and complaints. We send product updates only if you turn them on under Updates on your account page; they are off by default, every one carries an unsubscribe link, and you can switch them off there at any time. We do not sell or rent your email address.

When you write a review

We store the review itself, your rating, tags, and how you told us you watched the channel. Where you signed in with Twitch and granted the follows permission, we record once whether you followed that channel at the moment you submitted, and the date the follow began. That check is never repeated.

We also store a one-way hash of your IP address, salted and rotated daily, used only to detect one person posting repeatedly on a channel from the same connection. It cannot be reversed into an IP address. It is deleted after 30 days by an automated job. We do not store raw IP addresses.

We also compute a one-way hash of characteristics of your browser and device, such as screen size, time zone and graphics renderer, and keep it with your review and your account for 90 days. It exists to notice one person writing reviews from several accounts. It cannot identify you or your device to anyone else, and it is hashed again with a secret before it is stored.

When you file a complaint

The complaints form asks for your name, email, and your relationship to the content. We use these to assess the complaint and to write to you about it. We do not disclose your identity to the author of the review; they are told only the category of the grounds.

Automatically

Our hosting provider records standard server logs. Cloudflare Turnstile runs on our forms to tell people from bots; it is designed to work without tracking cookies and without profiling you across sites.

What we do not collect

• No advertising or cross-site tracking cookies.
• No payment details. There is nothing to pay for.
• No raw IP addresses stored against your reviews.
• Nothing from the streaming platforms about your viewing history, beyond the single follow check described above.

Why we collect it

• To run accounts and let you sign in.
• To publish your reviews with an author attached, which is what makes them credible.
• To enforce one review per person per channel, and to detect coordinated rating attacks.
• To moderate content and to answer complaints within our published time frame.
• To meet legal obligations.

What is public

Your published reviews, with any signals attached to them such as “following since” or how you watched. A review you post anonymously, per review or by default from your account, shows as “Anonymous viewer” with your review count only. Otherwise it shows your username, avatar and country if you set one. Either way your email is never public, moderators can see which account wrote a review, and the streamer cannot. Reviews awaiting moderation are visible only to you and to moderators.

Who we share it with

Service providers who host and run the site: our database and authentication provider, our hosting provider, our email provider, our rate-limiting provider, and Cloudflare for bot protection. They process data on our instructions. Some are outside Australia, including in the United States and the European Union, and by using the service you consent to that transfer.

We do not sell personal information, and we do not share it with advertisers.

How long we keep it

• Account details: until you ask us to delete them.
• Published reviews: indefinitely, unless removed under the guidelines or a complaint.
• IP hashes: 30 days.
• Device hashes: 90 days.
• Viewer statistics for channels: raw viewer snapshots for two days, per-stream session records for 90 days, daily aggregates indefinitely.
• Moderation and complaint records: kept as a record of decisions made, including after content is removed.

Your rights

You can ask us to:

• tell you what personal information we hold about you;
• correct anything inaccurate;
• delete your account and personal information;
• provide a copy of your reviews in a portable format.

Deleting your account removes your profile, your linked platform identifiers and your email. Reviews you wrote are deleted with it. Where a review is the subject of a live complaint or an ongoing legal matter, we may retain a record of the decision.

To make any of these requests, or to complain about how we have handled your information, use the contact form and say it is a privacy request. We aim to respond within 30 days. If you are not satisfied you may complain to the Office of the Australian Information Commissioner.

Security

Access to personal information is restricted to those who need it to operate the service. Data is encrypted in transit. Platform access tokens, where held at all, are stored server-side for a few hours at most and never sent to your browser.

Children

The service is not intended for people under 16, and we do not knowingly collect their personal information.

Changes

Material changes will be noted by the date at the top of this page.