Privacy Policy

Effective date: 14 October 2026 · Last updated: 14 October 2026

This Privacy Policy explains how streamstash ("streamstash", "we", "us", "our") collects, uses, stores, shares and protects information when you use our website and our service, including when you connect a TikTok account to streamstash. By using streamstash you agree to this policy. If you do not agree, please do not use the service.

1. Who we are

streamstash is operated by an individual developer based in Croatia, European Union (the "controller" for the purposes of the EU General Data Protection Regulation, GDPR). Contact for all privacy matters: rene@llamesic.com.

2. What streamstash is

streamstash is a tool that finds highlight moments in public live streams, edits them into short vertical videos with a title and captions, and, after the account owner's authorization, publishes them to the account owner's own TikTok account through TikTok's official Login Kit and Content Posting API.

3. Information we collect

3.1 Information from TikTok (only after you authorize)

• Basic profile information (permission user.info.basic): your TikTok open ID, display name and avatar URL. Used only to show which account is connected.
• Publishing access (permission video.publish): an access token and refresh token that allow us to upload and publish videos to your account on your behalf.

We do not request or collect your password, direct messages, contacts, followers list, watch history, private videos, payment details or any data beyond the permissions you grant on TikTok's authorization screen.

3.2 Information you give us

• Your email address and the content of your message when you contact us.
• Settings you choose, such as which streams to follow, clip style and publishing preferences.

3.3 Content we process

• Public live-stream video and audio, public chat activity and automatically generated transcripts, used to detect moments and produce clips.
• The finished videos, titles, captions and publishing status.

3.4 Technical information

Our website is hosted on Vercel. Like most hosting providers, Vercel may process standard server logs (IP address, browser type, pages requested, time). We do not use advertising cookies, tracking pixels or third-party analytics on this website.

4. How we use information

• To connect your TikTok account and show you which account is linked.
• To upload and publish videos to your account, only when you have authorized this.
• To operate, maintain, secure and improve the service, and to prevent abuse.
• To answer your questions and handle data requests.
• To comply with legal obligations.

Legal bases (GDPR Art. 6): your consent (the TikTok authorization), performance of the service you requested, our legitimate interest in operating a secure service, and legal obligation.

5. What we do not do

• We do not sell your personal information.
• We do not share your TikTok data with advertisers or data brokers.
• We do not use TikTok data for profiling, targeted advertising or any purpose unrelated to the service.
• We do not post anything to your account without your authorization.

6. Sharing of information

We share information only with: (a) TikTok, to authenticate you and publish videos you authorized; (b) infrastructure providers that host or process data for us under confidentiality obligations (for example website hosting); (c) authorities where required by law. Providers act on our instructions and may not use the data for their own purposes.

7. Storage, security and retention

• Access and refresh tokens are stored encrypted and are used only to publish content for you.
• Tokens are kept only while your account stays connected. When you disconnect or ask us to delete your data, we delete the tokens and related records within 30 days.
• Finished videos and processing files are deleted after publishing or after a short processing period, unless you ask us to keep them.
• Contact emails are kept for as long as needed to answer you and for up to 24 months afterwards.
• We use industry-standard safeguards (encryption in transit with HTTPS, restricted access, secure credential storage). No system is perfectly secure, and we cannot guarantee absolute security. If a breach affecting your data occurs, we will notify you and the authorities as required by law.

8. International transfers

Our providers and TikTok may process data outside your country, including outside the European Economic Area. Where this happens we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

9. Your rights

Depending on where you live (including under the GDPR and, for California residents, the CCPA/CPRA), you have the right to: access your data; correct it; delete it; restrict or object to processing; data portability; withdraw consent at any time (withdrawal does not affect earlier processing); and lodge a complaint with a supervisory authority (in Croatia: AZOP, azop.hr). To exercise a right, email rene@llamesic.com from the address you use with TikTok and mention your TikTok display name. We respond within 30 days.

10. Revoking access

You can stop streamstash accessing your TikTok account at any time: TikTok → Settings and privacy → Security and permissions → Apps and websites → select streamstash → Remove. Access ends immediately. You can also email us to have your data deleted.

11. Children

streamstash is not directed to anyone under 18 and we do not knowingly collect data from children. If you believe a child has provided data to us, contact us and we will delete it.

12. Cookies

This website does not set advertising or tracking cookies. Only strictly necessary technical data needed to deliver the pages may be processed by the hosting provider.

13. Changes to this policy

We may update this policy. The "last updated" date above shows the latest version. If a change is material, we will give notice on this website.

14. Contact

streamstash, Croatia. Email: rene@llamesic.com. See also our Terms of Service.