Privacy Policy

1. Controller

The data controller is the operator of moonst3ad.com, a private individual based in the Czech Republic. Contact: contact@moonst3ad.com.

2. What data we process

When you sign in with Twitch, we receive and store:

• your numeric Twitch user ID (permanent account identifier);
• your Twitch login and display name;
• your Twitch avatar URL;
• your site role (viewer / moderator / admin), including whether you moderate the moonst3ad Twitch channel;
• the version of the legal documents you agreed to and the time of consent;
• account timestamps (created, updated, last sign-in).

2a. What we do NOT receive

We deliberately request no additional Twitch scopes at sign-in: we do not receive your e-mail address or any private Twitch account data. Your Twitch access token is used once to read your public profile and is never stored.

Our hosting provider processes technical server logs (such as IP addresses) for security and operations; we do not use them to identify you.

3. Purposes and legal bases

We process this data for the following purposes:

• creating and operating your account and signing you in — performance of a contract, Art. 6(1)(b) GDPR;
• syncing the moderator role with the Twitch channel's moderator list — legitimate interest in consistent community moderation, Art. 6(1)(f) GDPR;
• recording your consent to the legal documents — legal obligation / legitimate interest, Art. 6(1)(c) and (f) GDPR;
• optional anonymous usage analytics — only with your consent via the cookie banner, Art. 6(1)(a) GDPR.

4. Cookies

The Site uses these cookies:

• ms_session — keeps you signed in (strictly necessary; 7 days);
• ms_oauth_state — protects the sign-in redirect against forgery (strictly necessary; 10 minutes);
• NEXT_LOCALE — remembers your language choice (preference; 1 year);
• Vercel Analytics — anonymous usage statistics, set only if you accept the cookie notice.

5. Recipients and processors

Your data is processed by the following service providers:

• Twitch Interactive, Inc. — identity provider; your Twitch profile is governed by Twitch's own privacy policy;
• Vercel Inc. — website hosting (may process data in the USA under EU standard contractual clauses);
• Neon (database) — account storage, hosted in the EU (Frankfurt).

6. Retention

We keep your account data for as long as your account exists. You can request deletion of your account at any time by e-mail; we will delete your data without undue delay unless we must keep specific records to comply with the law.

7. Your rights

Under the GDPR you have the right to:

• access the data we hold about you;
• have inaccurate data corrected;
• have your data erased (“right to be forgotten”);
• restrict or object to processing based on legitimate interest;
• receive your data in a portable format;
• withdraw consent at any time (for processing based on consent).

7a. Complaints

To exercise your rights, write to contact@moonst3ad.com. You also have the right to lodge a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů, uoou.gov.cz) or your local supervisory authority.

8. Changes to this policy

We may update this policy. Each version is identified by the version date at the top; the current version is presented for consent every time you sign in.