Privacy Policy.

Who controls your personal data

StreamVerse Connect is operated independently in Finland by Alex Ikäheimo.

The operator acts as the data controller for personal information processed through StreamVerse Connect where it determines why and how that information is used.

Privacy contact: contact@streamverseconnect.com

Information we collect

Depending on how you use StreamVerse Connect, we may process information including:

• Account information such as email address, username, account type and authentication identifiers.
• Creator profile information including display name, biography, languages, social or streaming links, platform information and information you choose to make available on your creator profile.
• Developer and studio information including studio name, representative details, game information and publishing authorization.
• Campaign applications, application messages, approvals, rejections and campaign participation history.
• Creator deliverables and content submissions, including links, platform details, notes, review feedback and submission status.
• Game-key activity such as whether a key has been assigned, claimed or associated with a campaign.
• Messages and support requests sent through StreamVerse Connect, including Community message content, channel identifiers, author identifiers and message timestamps.
• Technical information required to operate and secure the service, such as authentication session information, timestamps, device or browser information and security logs where applicable.

How we use your information

We use personal information where necessary to operate StreamVerse Connect and provide creator and developer features.

This includes:

• Creating and securing accounts.
• Displaying creator or studio profiles.
• Processing campaign applications.
• Connecting creators with developers and studios.
• Managing game-key distribution.
• Managing campaign deliverables and reviews.
• Providing messaging and support features.
• Preventing abuse, fraud and unauthorized access.
• Investigating reports and enforcing platform rules.
• Maintaining and improving the service.
• Complying with legal obligations.

Legal bases for processing

Where the EU General Data Protection Regulation (GDPR) applies, StreamVerse Connect relies on one or more lawful bases depending on the processing activity.

These may include:

• Contract: processing necessary to provide the services you request under the StreamVerse Connect Terms of Service.
• Legitimate interests: operating, protecting and improving the platform, preventing abuse and maintaining platform integrity where those interests are not overridden by your rights.
• Consent: where you actively choose to provide optional information or where consent is legally required.
• Legal obligation: where processing is required to comply with applicable law.

Profiles, campaigns and other users

Information that you intentionally publish on a creator, developer or studio profile may be visible to other StreamVerse Connect users and, depending on the feature, may be publicly visible.

When a creator applies to a campaign, relevant profile and application information may be shared with the developer or studio operating that campaign.

When a creator submits campaign content, the associated developer or studio may see the submission, creator identity, content link, platform, notes and review history.

StreamVerse Connect does not authorize developers or creators to use information obtained through the platform for unrelated marketing, harassment, scraping or other unauthorized purposes.

StreamVerse Community channel messages are visible to other signed-in users. Messages display an author's name and may display their avatar. While Community is open, its online-member list may display your name, avatar and account type to other participants using live presence information. Avoid posting private information, confidential material or game keys in channel conversations.

Activity notifications and optional emails

Your private notification inbox records campaign applications and decisions, assigned-key alerts, content reviews, Community mentions and campaign ending reminders. Notifications include a short activity summary, a link, the time and whether you have read them. Notification records and their delivery records are removed after 90 days.

Activity emails are off by default. You can enable them and choose categories in Notifications → Email settings, and turn them off there at any time. Enabling emails applies to new activity; it does not email your existing inbox. We check your preferences again before sending. These emails do not contain game keys or Community message contents. Essential account and support emails are separate from these preferences.

Service providers and subprocessors

StreamVerse Connect may use third-party infrastructure and service providers to operate the platform.

Current or expected providers may include:

• Supabase for authentication, database and application infrastructure.
• Cloudflare for hosting, delivery, security or networking services where enabled.
• Authentication or platform providers that you choose to connect to StreamVerse Connect.

Resend delivers platform emails and processes the recipient email address and email content for that purpose. Additional providers will be added to this policy when introduced. Service providers are permitted to process information only as necessary to provide their services or as otherwise permitted by law.

International data transfers

Some service providers may process personal information outside Finland or outside the European Economic Area.

Where required, StreamVerse Connect will use appropriate safeguards for international transfers, such as adequacy decisions, Standard Contractual Clauses or another legally recognized transfer mechanism.

How long we keep information

Personal information is kept only for as long as reasonably necessary for the purpose for which it was collected, including providing the service, maintaining security, resolving disputes and meeting legal obligations.

Account information will generally be retained while an account is active. Some information may remain for a limited period after deletion where necessary for security, fraud prevention, dispute resolution, legal compliance or backup restoration.

A more detailed retention schedule should be published as StreamVerse Connect moves from prototype to full production.

Security

StreamVerse Connect uses reasonable technical and organizational safeguards intended to protect personal information against unauthorized access, alteration, loss or disclosure.

No online service can guarantee absolute security. Users should use unique passwords, protect authentication credentials and report suspected unauthorized access promptly.

Your privacy and GDPR rights

Depending on applicable law, including the GDPR, you may have the right to:

• Request access to personal information held about you.
• Request correction of inaccurate information.
• Request deletion of personal information.
• Request restriction of processing.
• Object to certain processing based on legitimate interests.
• Request data portability where applicable.
• Withdraw consent where processing relies on consent.
• Lodge a complaint with an applicable data-protection authority.

In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.

Requests can be sent to contact@streamverseconnect.com. We may need to verify your identity before fulfilling a request.

Account and data deletion

Users may request deletion of their StreamVerse Connect account and associated personal information through available account settings or by contacting contact@streamverseconnect.com

Deleting an account may permanently remove access to creator or developer profiles, campaign applications, messages, campaign history and other associated platform information.

Some records may be retained where required for legal compliance, fraud prevention, security, enforcement, dispute resolution or legitimate record-keeping purposes.

Children and age requirements

StreamVerse Connect is not intended for children who are legally unable to consent to the processing of their personal information or enter into the applicable Terms without authorization from a parent or guardian.

Additional age restrictions may apply to particular campaigns, games or third-party services.

Changes to this Privacy Policy

This policy may be updated as StreamVerse Connect develops or when legal, technical or operational requirements change.

Material changes should be communicated to users where appropriate. The date shown at the top of this page indicates when this policy was last updated.

Privacy questions and complaints

Privacy requests and questions can be sent to:

contact@streamverseconnect.com

You may also contact the competent data-protection supervisory authority if you believe your rights have been violated.