Privacy Policy

Last updated: August 15, 2026

Your privacy matters. This page explains plainly what data we collect, why, and who we share it with.

1. What we collect

Account data: your email address, an encrypted (hashed) password, an optional display name and your language preference.

Streamer data: the TikTok username you link, your overlay settings, and statistics generated while you stream (gifts, likes, follows, viewer counts, top supporters). These come from TikTok's public LIVE data for your own stream.

Purchases: which products and subscriptions you bought, when, and a reference to the payment. We never see or store your card number.

Technical data: standard server logs (IP address, request path, time) kept briefly for security and debugging.

2. What we use it for

To run the service: showing your overlays, computing leaderboards and analytics, delivering your purchases, and emailing you verification links, password resets and purchase receipts.

We do not sell your data, run third-party advertising, or use tracking pixels.

3. Cookies

We use only functional cookies: a session cookie to keep you signed in and a locale cookie to remember your language. No advertising or cross-site tracking cookies.

4. Payment processing

Online payments are processed by Lemon Squeezy (lemonsqueezy.com) as merchant of record. Your card details go directly to them and are governed by their privacy policy; we receive only the order confirmation (your email, the product, and a payment reference).

5. Email delivery

Transactional emails (verification, password reset, purchase delivery) are sent through our email provider. Your address is used solely to deliver these messages.

6. Data retention and deletion

Your data is kept while your account exists. You can delete your account by contacting us at support@tokalerts.com; this permanently removes your account, streamer settings and statistics. Purchase records may be retained where required for accounting.

7. Security

Passwords are stored hashed with bcrypt, connections are encrypted with TLS, and production data lives on servers in the EU (Hetzner, Germany/Finland region) with nightly backups.

8. Your rights

Depending on where you live (including under the EU GDPR), you may have rights to access, correct, export or erase your personal data. Email support@tokalerts.com and we will handle your request.

9. Contact

Privacy questions: support@tokalerts.com.