Privacy Policy

1. What we collect

Account data: your email address and, if you sign in with Twitch or Google, the name, avatar and username that provider shares with us. We never see your Twitch or Google password.

Connected channels: when you connect Twitch or Kick we store your channel ID and display name, plus the access and refresh tokens needed to receive follow, subscription and donation events for your overlay. Tokens are kept on the server and are never shown in your browser.

Stream events: the events your overlay receives (for example a follow or a tip, with the viewer name and message the platform provides) are stored so your activity feed and overlay can show them.

Overlay and purchases: your overlay settings, the packs you own, orders and subscription status.

Tiridy AI: the text you type to describe a design and the design we generate.

Technical data: cookies needed to keep you signed in and remember your language, and standard server logs such as IP address and browser type.

2. Why we use it

To run your account, show your overlay in OBS, deliver what you buy, prevent abuse and fraud, and answer support requests. We do not sell personal data and we do not use it for third-party advertising.

3. Who processes it for us

Supabase (database and sign-in, hosted in Frankfurt, Germany). Twitch and Kick (event delivery for channels you connect). Google (sign-in, only if you choose it). Dodo Payments (payments; card details go to them directly, we never see them). Anthropic (generates designs from the text you submit to Tiridy AI; do not include personal data in prompts). Our web host and email provider.

These providers may process data outside your country. Where required, we rely on contractual safeguards such as standard contractual clauses.

4. Cookies

We use only essential cookies: a session cookie from sign-in, a short-lived cookie during platform connection, and a language preference. We do not use advertising or cross-site tracking cookies.

5. How long we keep it

Account and overlay data is kept while your account exists. Stream events and AI prompts are kept while your account exists unless you ask us to remove them sooner. Order records are kept as long as tax and accounting rules require. When you delete your account we remove or anonymize your personal data, except what we must keep by law.

6. Your rights

You can ask to access, correct, export or delete your data, to restrict or object to processing, and to withdraw consent, including under the GDPR and Turkey's KVKK where they apply. Write to support@tiridy.com. You can disconnect Twitch or Kick at any time from your dashboard, and revoke Tiridy's access in your Twitch or Google account settings. You may also complain to your local data protection authority.

7. Children

Tiridy is not for children under 13, or under the minimum age to use Twitch, Kick or Google in your country. If you believe a child has given us data, contact us and we will delete it.

8. Security

Data is encrypted in transit, access to the database is restricted by row-level security, and platform tokens are only handled by our server. No system is perfectly secure, so please use a strong password and turn on two-step verification on your Twitch and Google accounts.

9. Changes

We may update this policy. We will change the date above and, for material changes, tell you by email or in the dashboard.