ChatCards
Log in

Privacy Policy

Last updated: October 16, 2026

Who we are

ChatCards is run by a private individual, who is responsible for your data (data controller). Contact: [email protected].

What we collect

  • From Twitch when you log in: your Twitch ID, login, display name, avatar, account creation date and, if shared, your email.
  • The channels you follow on Twitch that also exist on ChatCards, and your follow date.
  • If you link your Discord account: your Discord ID, username, avatar and account creation date and, in the Discord servers registered on ChatCards, when you joined, your roles and whether you boost the server.
  • While a channel you follow is live: the minutes you spend in its chat, to earn live boosters.
  • For streamers: follower, subscriber, moderator and VIP lists and clips, used only to build the collection.
  • For streamers who connect them: their Discord server (name, icon, roles) and their YouTube channel (name, avatar, statistics, public videos).
  • What you do in the game: boosters opened, cards owned, mottos, shards earned and spent, shop items.
  • The Twitch channels you ask to see on ChatCards.
  • If you support ChatCards on Ko-fi: the name, email address, message, amount and date Ko-fi sends us, to give you your shards.
  • Technical data needed to run the site: session cookies, IP address in server logs.
  • Visit statistics, measured with Umami Cloud (Umami Software): pages viewed, the site you came from, browser, type of device and country. No cookies, and your IP address isn’t kept.
  • If you write to us through the contact form: the topic, your message, the email address you give us and, if you’re signed in, your account.
  • If you report a card: your comment, the card and, if you’re signed in, your account.

Why

  • To run the game and your account (performance of the service).
  • To show your Viewer card to other players, only if you opted in (consent, which you can withdraw in Settings).
  • To keep the service secure and prevent abuse (legitimate interest).
  • To know which links and pages bring players, and which streamers to reach out to, so we can improve the game (legitimate interest).
  • To answer what you send through the contact form and follow it up (legitimate interest, or performance of the service when it is about your account).
  • To let streamers and the ChatCards team act on reported cards (legitimate interest in keeping the game safe).

Who can see it

Your display name, avatar and collection are public on the site. Viewer card details (follow date, account year, sub and role status, motto) are visible on copies of your card. We don’t sell your data.

Contact requests are only read by the ChatCards team. A card report’s comment is shown to the streamer of the collection, without your name; only the ChatCards team sees who sent it. The contact and report forms are protected by Cloudflare Turnstile, which processes technical data from your browser to tell humans from bots (Turnstile privacy policy).

Where it is stored

Your data is stored on servers hosted by OVHcloud (OVH SAS) in France. Cloudflare protects the site and its traffic goes through Cloudflare’s network, which may involve transfers outside the European Union under the safeguards provided by the GDPR (standard contractual clauses, EU-US Data Privacy Framework). When you log in or link an account, Twitch, Discord and YouTube (Google) handle that step under their own privacy policies.

Visit statistics are handled by Umami Cloud, whose servers are in the European Union.

Retention

We keep your data while your account exists. When you delete your account, your profile and collection are deleted, and you choose whether copies of your Viewer cards pulled by other players stay in their collections or are deleted (their owners then get a booster per copy in compensation). The minutes spent in live chats are deleted after 2 days, contact requests 12 months after they are sent, card reports 12 months after they are handled.

Your rights

Depending on where you live, you can access, correct, delete or export your data, object to processing, and withdraw consent. Write to us through the contact form (topic “My personal data”) or at [email protected]. You may also complain to your local data protection authority.

Cookies

We only use cookies that are strictly necessary for logging in and keeping the site secure.