Stream Hatchet Creator Privacy Policy

Last updated June 2, 2026

TABLE OF CONTENTS
  1. Who is the data controller?
  2. Who does this Policy apply to?
  3. What personal data do we process?
  4. How do we obtain your data?
  5. Why do we process your data, and on what legal basis?
  6. What happens when you connect an external platform?
  7. Do we generate metrics, rankings or profiles?
  8. Who do we share your data with?
  9. Where is your data hosted? Do we make international transfers?
  10. How long do we keep your data?
  11. What are your rights?
  12. Changes to this Privacy Policy

This Privacy Policy explains how Stream Hatchet processes the personal data of individuals who use the Platform, including creators, streamers, managers, agents, agencies and other users who access its features. This Policy should be read together with the Platform's Terms and Conditions.

The Platform allows users to consult, organise and display metrics from live-streaming platforms and social networks, claim profiles, connect external accounts, and generate dashboards, media kits, rankings, reports and visualisations relating to creators' digital activity.

1. Who is the data controller?

The controller of your personal data is STREAM HATCHET, S.L.U. (referred to in this Policy as "Stream Hatchet", "we", "us" or the "Controller"), with registered office at Avenida Diagonal 420, Barcelona, Spain, and Spanish Tax ID (NIF) B98820913.

You may contact us by email at [email protected].

Stream Hatchet is part of a corporate group whose parent company is GameSquare Holdings, Inc., with registered address at 6775 Cowboys Way #1335, Frisco, TX, 75034.

Data Protection Officer (DPO)

If you have any questions about this Privacy Policy or about how we process your personal data, you may contact our Data Protection Officer:

  • Email: [email protected]
  • Auris Legal, represented by Xavier Saula Adell
  • Postal address: Paseo de Gracia 47, 1, 08007 Barcelona
  • Website: www.auris.legal

2. Who does this Policy apply to?

This Policy applies to users of the Platform, including creators, streamers, managers, agents, agencies and representatives who create an account, claim a profile, connect external platforms, access dashboards, view metrics, generate media kits or use any feature of the Service.

It may also apply to the processing of public information, or information obtained from external platforms, relating to creators or profiles that appear on the Platform, even where those profiles have not yet been claimed by their owner.

Where an individual acts on behalf of a creator, client, brand, agency or other entity, that individual must have the necessary authority to provide data or manage profiles on that person's or entity's behalf.

3. What personal data do we process?

The personal data we process will depend on your relationship with Stream Hatchet, the features you use, the external platforms you connect, and the settings of your account or profile.

As a general rule, we do not ask you to provide special categories of personal data. Please do not provide this type of information unless it is strictly necessary.

3.1. Data you provide directly to us

When you create an account, set up your profile or complete your media kit, we may process information such as your username, email address, role, biography, country, language, gender, age, interests, profile image, banner, brand partnerships, display preferences and any other information you choose to add voluntarily.

If you contact us, request information, complete forms, use support channels or send a commercial enquiry, we may also process your contact details, company details and the content of the communication you send to us.

If you act as a manager, agent, agency or representative, we may process your account and contact details, together with your role, permissions and associated access rights. We may also record which access rights have been granted to you, who authorised them, when they were granted or revoked, and which permissions you have in relation to particular creators, profiles or features.

3.2. Registration, authentication and account data

The Platform allows users to register by email and password, magic links or authentication through external platforms. To manage account access and security, we may process credentials, email verifications, session tokens, IP address, user-agent data, account identifiers and technical logs associated with use of the Platform.

When you connect an external account through OAuth (for example, when you register on our platform using your Google account), we may process the data needed to maintain that connection and provide the requested features, such as access tokens, authorised permissions, user identifiers, username, display name, avatar, email address and other data associated with the relevant provider.

3.3. Data obtained from external platforms

When you connect or claim a profile, or when the Platform consults information available through official APIs, we may process data from platforms such as Twitch, YouTube/Google, Instagram/Meta, TikTok, X/Twitter, Kick, IGDB and other compatible platforms.

Depending on the platform, the permissions authorised and the features used, this data may include account identifiers, usernames, handles, avatars, biographies, country, followers, subscribers, views, posts, videos, clips, stream data, games, interactions, audience metrics, performance metrics, aggregated demographic data, traffic sources, devices, impressions, reach or estimated revenue.

The availability, freshness and scope of this data depend on each external platform, its APIs, the permissions granted and the terms applicable at any given time.

3.4. Data generated through use of the Platform

Through the use of the Platform, Stream Hatchet may generate technical and analytical information needed to provide the Service, such as metric histories, growth variations, trends, technical records, audit logs, display preferences, profile status information and aggregated or derived metrics.

3.5. Derived, inferred or calculated data

The Platform may produce proprietary or derived metrics using data provided by the user, data obtained from external platforms and data generated through use of the Service. These metrics may include trend scores, cross-platform aggregated totals, rankings, comparisons, categories, estimated sessions, popular games, confidence classifications, profile status indicators, and performance, affinity and audience profiles.

These metrics are internal estimates or calculations and may differ from the official figures displayed by the source platforms.

3.6. Data relating to unclaimed profiles

The Platform may display or index certain public data, or data obtained through official APIs, associated with creators or profiles that have not yet been claimed by their owner.

This data may include, among other things, username, avatar, public biography, linked platforms, public metrics, streaming activity, categories, popular games or similar information that is publicly available or accessible through authorised APIs.

3.7. Data relating to minors

The Platform is not directed at minors. To create an account and use the Service, you must be of legal age and have sufficient legal capacity to accept the Terms and this Policy.

However, certain public data relating to minor creators may appear incidentally where it is obtained from external platforms or public sources. If you believe that we are improperly processing data relating to a minor, you may contact us so that we can review the matter and take appropriate steps.

4. How do we obtain your data?

The personal data we process may come from the following sources:

4.1. Data provided directly by you

Most account and profile data comes directly from the user when they register, set up their profile, claim a creator profile, connect platforms, configure their dashboard, request support or use contact forms.

4.2. Data obtained automatically when you use the Platform

Some information is collected automatically through technical logs, authentication tools, audit records, security systems, usage-limitation mechanisms or error-detection tools that are necessary to provide, protect and improve the Service. The use of cookies, SDKs or similar technologies will be governed, where applicable, by the Cookies/SDKs Policy.

4.3. Data from external platforms

When you connect or claim external accounts, we will obtain data through the official APIs of the relevant platforms and based on the permissions you authorise. Depending on the platform and the feature used, this collection may occur through OAuth, application tokens, API keys, webhooks or other authorised mechanisms.

We may also obtain public data available through those platforms or compatible official sources, such as IGDB, where necessary to provide analytics, classification, search, profile, dashboard or media-kit features.

4.4. Data generated by Stream Hatchet

Stream Hatchet may generate its own data through processes such as normalisation, aggregation, deduplication, trend calculation, snapshot creation, growth analysis, profile classification or reconstruction of streaming sessions.

5. Why do we process your data, and on what legal basis?

We process your personal data only where there is a valid legal basis for doing so, and only to the extent that the processing is appropriate, relevant and limited to what is necessary for the relevant purpose.

5.1. Creating and managing your user account

We process your data to allow you to register, sign in, keep your account active, configure your profile, manage your credentials, authenticate your identity and provide support in connection with your use of the Platform.

Legal basis: performance of the contractual relationship or steps taken prior to entering into a contract.

5.2. Providing the Platform's features

We process your data to allow you to use the core features of the Service, including the connection of external accounts, synchronisation of metrics, creation or updating of profiles, dashboards, media kits, rankings, searches, reports and other available analytics tools.

Legal basis: performance of the contractual relationship. Where the connection of an external account requires specific authorisation, we may also rely on the consent or permission granted by the user through the relevant platform.

5.3. Generating metrics, analyses and derived features

We process data to calculate proprietary or derived metrics, historical trends, categories, comparisons, rankings, profile status indicators, data-refresh frequency and similar features.

Legal basis: performance of the contractual relationship where these features form part of the Service requested by the user; and Stream Hatchet's legitimate interest in improving, organising and presenting analytical information in a useful way, provided that the user's rights or interests do not override that interest.

5.4. Protecting the Platform and preventing misuse

We process technical data and activity records to maintain the security of the Platform and to prevent fraud, abuse, unauthorised access, scraping, bots, impersonation, breaches of the terms of use and technical incidents.

Legal basis: Stream Hatchet's legitimate interest in protecting its systems, users, data and services; and compliance with legal obligations where applicable.

5.5. Handling enquiries, requests and communications

We process your data to respond to support requests, commercial enquiries, complaints, account-related communications, operational notices, changes to the Service and any other communication necessary for our relationship with you.

Legal basis: performance of the contractual relationship, steps taken prior to entering into a contract, legitimate interest in properly handling the requests we receive, and compliance with legal obligations where applicable.

5.6. Improving the Service and carrying out internal analytics

We process usage data, aggregated metrics, technical records and feedback to analyse the operation of the Platform, detect issues, improve features, optimise the user experience, develop new tools and maintain the quality of the Service.

Legal basis: Stream Hatchet's legitimate interest in improving its products and services; consent, where the processing depends on cookies, SDKs or similar technologies that require it.

5.7. Sending commercial communications, where applicable

We may process your data to send you communications about products, services, updates, content, events or initiatives related to Stream Hatchet, provided that there is a valid legal basis for doing so.

Legal basis: the user's consent, where required; or legitimate interest in the context of professional relationships or prior customer relationships, to the extent permitted by applicable law and always with the ability to object.

5.8. Complying with legal obligations and responding to requests

We may process and, where appropriate, disclose data where necessary to comply with legal, accounting, tax, corporate, regulatory, data-protection or security obligations, or to respond to requests from authorities, courts and tribunals.

Legal basis: compliance with legal obligations.

6. What happens when you connect an external platform?

When you connect an external platform, Stream Hatchet will request the permissions needed to provide the associated features. The data available to us will depend on the permissions authorised, the technical conditions of the relevant platform and the policies applicable at any given time.

The connection may allow us to synchronise metrics, complete or update your profile or media kit, display data in dashboards, generate metric histories, calculate trends, prepare rankings or reports, and keep your profile up to date.

When you disconnect an external account, we will stop synchronising new data from that platform and will revoke the access tokens associated with that connection where applicable. Certain public metadata, metric histories, snapshots, and aggregated or derived metrics may be retained in accordance with this Policy, unless deletion is required.

Your use of each external platform is also governed by its own terms, policies, permissions and documentation. Stream Hatchet does not control those platforms and cannot guarantee the continuity, accuracy, freshness or availability of their APIs, data, permissions, quotas or features.

7. Do we generate metrics, rankings or profiles?

Yes. Stream Hatchet may generate proprietary metrics from the data available on the Platform, including data provided by the user, public data, data obtained from external platforms and data generated through use of the Service, provided that the terms of use of the APIs we rely on allow us to do so.

These metrics may be used to display dashboards, media kits, creator profiles, rankings, aggregated reports, game pages, growth analyses, categories or similar features.

Some of these metrics may affect how a profile is displayed within the Platform, for example whether it appears in rankings, reports, searches or categories. They may also affect how frequently certain data is updated or whether certain features are available.

These metrics are calculated using technical criteria defined by Stream Hatchet. Based on the information available, opaque artificial intelligence models are not used to make automated decisions that produce legal effects for users.

If you believe that a metric, classification, ranking or result relating to your profile is inaccurate or may adversely affect you, you may request a review by writing to the support or privacy channel indicated in this Policy.

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you, unless we expressly inform you and apply the safeguards required by law.

8. Who do we share your data with?

We may share personal data with providers acting on behalf of Stream Hatchet where they are necessary to provide, host, protect, maintain and improve the Platform.

We may also disclose data where necessary to comply with legal obligations, respond to requests from authorities, protect our rights, investigate security incidents or handle user requests.

Certain profile data, metrics or public information may be visible to other users or third parties depending on the Platform's settings, the public nature of the profile and the features used. In any event, Stream Hatchet does not sell personal data, does not share data with advertisers for personalised advertising, and does not use data brokers.

Companies within the GameSquare Holdings, Inc. group may access personal data where there is a valid legal basis and where such access is necessary for internal, operational, commercial or support purposes, as described in this Policy.

9. Where is your data hosted? Do we make international transfers?

As a general rule, information processed through the Platform may be hosted on technology infrastructure and cloud services used by Stream Hatchet or by providers acting on our behalf.

Some providers, group companies or external platforms may be located outside the European Economic Area or may allow remote access from third countries. Where this occurs, Stream Hatchet will adopt the appropriate safeguards required by data-protection law, such as adequacy decisions, standard contractual clauses, supplementary measures or other valid mechanisms.

10. How long do we keep your data?

We will keep your personal data only for as long as necessary to fulfil the purpose for which it was collected and, thereafter, for the legally applicable limitation and retention periods.

While your account remains active, we will keep the data needed to provide the Platform, maintain the profile, synchronise metrics, manage permissions, protect the security of the Service and handle support requests.

Aggregated or anonymised data may be retained indefinitely, provided that it does not reasonably allow a natural person to be identified.

11. What are your rights?

You may exercise at any time the rights granted to you by data-protection law, on the terms and within the scope provided by law. In particular, you may exercise the following rights:

  • Access: to know what data we process about you and to obtain information about that processing.
  • Rectification: to request the correction of inaccurate or incomplete data.
  • Erasure: to request the deletion of your data where legally applicable.
  • Objection: to object to certain processing, especially processing carried out for direct marketing purposes or based on legitimate interest, where there are grounds relating to your particular situation.
  • Restriction of processing: to ask us to temporarily suspend certain processing in the circumstances provided by law.
  • Portability: to receive your data in a structured, commonly used and machine-readable format, or to request its transmission to another controller where applicable.
  • Withdrawal of consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
  • Not to be subject to decisions based solely on automated processing, including profiling, where they produce legal effects concerning you or similarly significantly affect you, on the terms legally applicable.

These rights may be subject to limits where the processing is necessary to comply with legal obligations, handle claims, protect third-party rights, retain public or aggregated data, or maintain the security and integrity of the Platform.

You may exercise your rights by sending a request to:

To process your request properly, we may ask you for reasonable additional information to verify your identity, especially where this is necessary to prevent unauthorised access to your data or to third-party profiles.

We will respond to your request within the legally applicable period. As a general rule, requests must be answered within one month, although that period may be extended where necessary due to the complexity or number of requests.

If you believe that the processing of your personal data infringes applicable law, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

12. Changes to this Privacy Policy

Stream Hatchet may update this Privacy Policy at any time to reflect legal, interpretative, technical, organisational or functional changes.

Where the changes are material, we will notify you by reasonable means, for example through a notice on the Platform or, where appropriate, through direct communications.

Last updated: 7 May 2026