Stream Evolution

Privacy Policy

Last updated: October 9, 2026

This Privacy Policy explains how Stream Evolution ("we", "us", "our") collects, uses, and protects your information when you use Stream Evolution (the "Service").

1. Information we collect

This is everything Stream Evolution stores, and why.

  • Your TikTok account. When you log in with TikTok we receive your username, display name, avatar URL and account identifiers (open ID and union ID), plus the access and refresh tokens used to run the Service for you.
  • Your alerts and media. The alerts you set up (names, triggers, text, styling, positions) and the images, GIFs, videos and sounds you upload or pick for them. Also your presets, Bus Battle setup and record, and settings such as alert language and combo handling.
  • Viewer profiles. To welcome back regulars, we keep, per streamer, the TikTok usernames of viewers who comment, with when we first and last saw them and how many LIVEs and comments they've had.
  • LIVE activity history. While monitoring is on, we record the gifts (with coin values), follows and comments from your LIVE, including the viewer's public username and the comment text. This powers your dashboard feed, Stats, the Last LIVE recap and supporter lists.
  • Song requests. Requests viewers make with !sr: the requester's username, what they asked for and, if you use Spotify, the matched track.
  • Spotify (optional). If you connect Spotify we store your Spotify app's client ID, its client secret (encrypted), the refresh token Spotify gives us (encrypted), your Spotify account name and your request rules.
  • Phone app devices. For each phone you pair: its name, when it was paired and last seen, and a SHA-256 hash of its device token (never the token itself).
  • Alert library. Alerts you share publicly (title, description, media, styling, your username and display name, and an optional donation link). If anyone reports a listing, we store the reason and a hash of the reporter's IP address (salted, so it can't be reversed into the IP), and the reporter's username if they were logged in.
  • Your public viewer page. /r/your-username shows anyone the alerts you've set up and how to trigger them. It doesn't show viewer names or messages.
  • Payments. If you support Stream Evolution, Stripe processes the payment. We receive the amount, currency, status, an optional message and your username, never your card details.
  • Technical data. A session cookie that keeps you logged in (sessions are stored on our server for up to 30 days), the secret key in your overlay URL, and basic server logs.

2. How we use it

  • To log you in and run your alerts, overlay, phone app, song requests and Bus Battle.
  • To show your dashboard feed, Stats, LIVE recaps and supporter lists.
  • To run the public alert library and handle reports about it.
  • To process payments through Stripe.
  • To secure, maintain, debug and improve the Service.

3. How we share it

We do not sell your personal information. We share data only with service providers needed to run the Service — our hosting provider DigitalOcean (servers and storage), TikTok (login and live data), Stripe (payments), Spotify (only if you connect it) and Giphy (GIF search) — and where required by law. Each is governed by its own privacy policy.

Where data-protection law such as the GDPR applies, we rely on:

  • Contract — to run the Service you signed up for: your account, alerts, overlay, phone app and the LIVE data that triggers your alerts.
  • Legitimate interests — to process viewers' public usernames and comments on a streamer's LIVE so their alerts, welcome-backs and stats work, and to keep the Service secure. We keep this data minimal and delete it on the schedule below.
  • Consent — for optional connections such as Spotify, which you can disconnect at any time.
  • Legal obligation — to keep payment records where the law requires it.

5. Data retention

We keep your account, alerts and media while your account exists. Some LIVE data is removed automatically:

  • Comment history is deleted after about 90 days.
  • Viewer profiles are deleted when a viewer hasn't been seen for about 180 days.
  • Finished song requests (played, skipped or removed) are deleted after about 7 days.
  • Uploaded media that no alert or library listing uses any more is deleted after about 7 days.

Gift and follow history stays until you delete your account, so your Stats keep working. When you delete your account, everything listed above is removed straight away (see Your rights). Copies in server backups are overwritten as the backups rotate.

6. Your rights

You can delete your account yourself at any time: open your dashboard, go to Settings, and use Delete my account. This removes your TikTok tokens, alerts, uploaded media (unless another streamer imported it from your library listing and still uses it), viewer profiles, LIVE history, song requests, presets, Bus Battle setup, Spotify link, paired phones, library listings, payment records we hold, and your sessions, and it switches off your overlay URL and viewer page. Stripe keeps its own payment records under its policy.

You can also revoke Stream Evolution's access to your TikTok account in TikTok's settings, and ask us for a copy or correction of your data by emailing legal@undisclosed.global.

7. If you are a viewer

If you watch or comment on the LIVE of a streamer who uses Stream Evolution, we process your public TikTok username, the comments, gifts and follows you send in that LIVE and, for regulars, when you were first and last seen — only on behalf of that streamer and only to run their alerts and stats (see Data retention). We don't build profiles across streamers and never sell this data. To have your data removed or to object, email legal@undisclosed.global with your TikTok username.

8. Security

We use reasonable technical and organizational measures to protect your data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their data.

10. Cookies

We use a strictly necessary session cookie to keep you logged in. We do not use it for third-party advertising.

11. Changes

We may update this Policy from time to time; the "Last updated" date above reflects the latest version.

12. Contact

Privacy questions or requests: legal@undisclosed.global.