PRIVACY

The data controller is pixel57, operating SzczurBot at szczurbot.pixel57.pl. General contact: contact@pixel57.pl; anything about personal data: privacy@pixel57.pl.

Each channel's ranking is run by its streamer: they decide that the bot joins their chat, how the economy works and when data is wiped. The service provides the tool and stores the data on their behalf.

From chat viewers:

• your Kick nickname and the account id Kick assigns (the id is permanent, the nickname is not),
• your Kick profile picture - only for the top three places on the board,
• the messages you send in that channel's chat, with the time you sent them,
• your points, your balance in the channel currency, tickets bought and prizes claimed,
• a record of every currency movement: who, what, how much, when - kept to settle disputes.

From streamers who sign in:

• Kick nickname, account id and profile picture,
• an access token for the Kick account, so the bot can post in the channel on their behalf,
• dashboard settings and, optionally, a custom domain.

Viewers' IP addresses are not collected - the server keeps no access logs. Cloudflare, which protects and delivers the site, processes visitors' IP addresses for that purpose under its own terms.

From public Kick chat: the bot receives messages from a channel its streamer allowed it into, through the same feed anyone watching can see. Streamer account data comes from signing in with Kick, with the consent given in Kick's own authorisation screen.

• The ranking and chat statistics - the legitimate interests of the streamer and the service (GDPR art. 6(1)(f)): running an activity board that is part of the broadcast.
• The chat economy, draws and shop - the same legitimate interests; the movement log protects both sides of an argument about who got what.
• A streamer's account - performing the service they asked for (GDPR art. 6(1)(b)).
• Security - spotting abuse and bots; legitimate interests.

• Message content: 90 days. After that the text itself is deleted automatically, leaving a record of who wrote when and what it was worth on the board - nothing of what was said.
• Ranking counters and balances: until the streamer clears the board or the channel is removed.
• The currency movement log: until the channel is removed - it is a record that deliberately cannot be edited.
• Streamer account data and tokens: until the platform is disconnected or the account deleted.

• Kick - the source of the data and the recipient of anything the bot posts.
• OVH - the server provider. The data sits on a machine in Warsaw, Poland.
• Cloudflare - protection and delivery of the site.
• Discord - if notifications are switched on, entries from the movement log (nickname, amount, date) go there.

Nothing is sold and nothing is shared for behavioural advertising. Cloudflare and Discord also process data outside the European Economic Area, under the European Commission's standard contractual clauses.

The ranking page shows nicknames, points or message counts, channel-currency balances and positions on the board, and its search box answers the same for anyone who has ever typed in that chat. This is the same information the chat itself shows publicly. The text of individual messages is never published.

In the European Economic Area, the United Kingdom or Switzerland you have the right to access your data, to have it corrected or erased, to restrict or object to processing based on legitimate interests, and to receive your data in a portable form.

You may complain to your national supervisory authority - in Poland the President of the Personal Data Protection Office (UODO), in the UK the ICO.

If you live in California, Virginia, Colorado, Connecticut, Utah or another state with its own privacy act, you have the right to know what is collected, to get a copy, to correct it, to ask for deletion, and not to be treated worse for exercising any of that. You may use an authorised agent.

Under the California CCPA/CPRA, two categories are collected: identifiers (nickname, Kick account id) and internet activity (chat messages, when they were sent, balances and movements). No sensitive personal information as defined by that act is collected. In the past twelve months no personal information has been sold or sharedfor cross-context behavioural advertising, and there are no plans to - which is why there is no "Do Not Sell or Share My Personal Information" switch to find.

Write to privacy@pixel57.pl with the nickname in question and the channel. Answers come within 30 days, or 45 days for US requests, matching the deadlines those laws set.

On a deletion request the nickname and account id are anonymised and the message text is deleted. Aggregate numbers - how many messages were sent on a given day - may remain, because they no longer point at anyone.

The service is not directed at children and does not knowingly collect data from anyone under 13. If such data reaches the database, it is removed once reported to the contact address.

The database runs on a server in Poland, reachable only from that machine and never exposed to the internet. The site is served over an encrypted connection. The dashboard requires signing in with Kick.

This page changes as the service does. The date of the last change is at the top.