What we use, and why
When you sign in through a connected platform, we receive its account identifier, name, profile image and, where provided, email address. We store the credentials needed to maintain that connection. The platform does not receive your Twitch or Google password.
We store your votes, predictions, points, streaks, badges, challenges and supporter access to run the features you use and keep results consistent. We also keep account preferences and limited moderation and security records to protect the community and prevent duplicate rewards or misuse.
The proposed bases for this processing are providing the service you request, our legitimate interests in security and reliable community results, and your consent for optional analytics. These bases and the associated retention criteria are being finalised before launch.
What other people see
Your community name and participation can appear in community features such as leaderboards and live vote displays. Your email address and sign-in credentials are not shown to other members.
In Account settings, you can control your public voting history, individual scores and favourite genres. You choose separately which connected names appear under “Also known as”. Knights and Bloodqueen can inspect connected names for moderation even when you hide them from other members.
Live voting information may also appear on Cavesta's stream through the voting overlay. Hiding information later does not remove copies already captured in a stream or recording.
Analytics is optional
Usage analytics is off by default. During your first welcome tour, “Help shape this platform” offers a choice between “Allow usage analytics” and “Not now”. You can also change it later under “Help improve this platform” in Account settings. If you enable it, we send selected usage events to PostHog in the EU: for example, opening a page, completing a vote or returning for another session. A random identifier helps us connect those events. It is not your public account name.
The usage information we send does not include your name, email, individual scores or sign-in tokens. We do not use PostHog session recordings or automatic click recording. These measurements help us understand which features people use.
You can switch analytics off at any time in Account settings. Voting and rewards work either way. Switching it off stops new optional measurements; it does not automatically delete events already received by PostHog. Our retention and deletion arrangements for those events are still being confirmed.
Who helps process your information
We use service providers to keep the website available, save your votes, connect your account and, if you choose, measure how the platform is used.
Signing in or playing an embedded stream or video connects you to the relevant platform. It can receive connection information such as your IP address. YouTube players on our home and game pages load after you click to play.
Service providers & their privacy notices
- Vercel — website delivery and operational security.
- Supabase — account and participation storage, and live updates.
- Twitch and YouTube/Google — account connections and embedded media.
- PostHog — optional usage analytics through its EU service.
These providers have their own privacy terms. Some processing may take place outside the European Economic Area. Provider agreements and international-transfer details are being reviewed before launch.
Cookies & browser storage
We use necessary sign-in and security cookies to keep your session and account connections working. Browser storage also remembers interface choices. These are separate from optional analytics.
With analytics enabled, temporary browser-tab storage helps avoid counting the same event repeatedly. Your analytics preference is saved with your account. Withdrawing consent clears this analytics storage on the device where you change it and blocks later event delivery from other devices. Older analytics cookies are not treated as consent.
A stream or video provider may use its own cookies or storage once you load its player. The platform's analytics switch does not change the settings on those external services.
Keeping & deleting your data
Account information is kept while you use your account. When you delete your account, we remove its name, email, profile image, connected accounts and sessions. Names in your community-name requests are removed too.
Votes, predictions and reward history remain so that existing results do not change. Internal account references and some moderation records also remain. Removing your public identity therefore does not mean every historical record becomes fully anonymous.
Participation history currently has no automatic expiry. Recent-activity views use a 30-day window, but that is not a promise that every underlying record is deleted after 30 days. Expired security records and external service logs have separate cleanup and retention rules.
The final retention schedule and the process for requests covering historical records are being reviewed before launch. Turning analytics off or deleting your platform account does not currently trigger automatic deletion of historical PostHog events.
Your rights
Depending on the circumstances, you can request access to your personal data, correction, deletion, a portable copy or restriction of its use, and object to processing based on legitimate interests. You can withdraw analytics consent without losing access to voting or rewards.
We may need to verify your identity before handling a request. The usual response period is one month. If a request needs more time or cannot be fully granted, you should receive an explanation. You can also raise a concern with your local data protection authority.
Manage your choices
Visit Account settings to change your profile visibility, choose which connected names to show, switch usage analytics on or off, or delete your account.
Reading this notice or signing in does not mean giving up your privacy rights. Optional usage analytics remains a separate choice.
