Twitchspy

Privacy Policy

Last updated: 3 July 2026

1. Who is the controller

The controller of your personal data is Axiometra Limited, a company registered in Scotland (SC892597), 3 Prospect Place, Westhill, Aberdeenshire, AB32 6SY, trading as Twitchspy. Contact: contact@twitchspy.app.

2. What we collect

  • Account data (via Twitch OAuth): Twitch user ID, login name, display name, email address as provided by Twitch, and your profile image URL.
  • Billing data (via Stripe): we store your Stripe customer and subscription identifiers, plan, status and renewal date. Card details are held by Stripe; we never see or store them.
  • Product usage: pages visited and features used, collected via Google Analytics 4 (measurement ID G-PH0MKDLTSW) only after you have accepted analytics cookies. IP addresses are truncated by GA before storage.
  • Preferences: language choice and other in-product settings you have chosen.
  • Server logs: IP address, user agent, request paths and timestamps, retained for a short period for security, abuse prevention and debugging.

3. Why we use it and the lawful basis (UK GDPR Art. 6)

  • Providing the Service (authentication, showing your dashboard, generating recommendations) — performance of a contract.
  • Billing and fraud prevention — performance of a contract and legitimate interests in preventing fraud.
  • Security, abuse prevention and debugging — legitimate interests in operating a secure service.
  • Product analytics via Google Analytics — consent (given via our cookie banner).
  • Keeping tax and accounting records — legal obligation under UK tax law.

4. Sub-processors and data sharing

We use the following processors to run the Service:

  • Supabase — application hosting, database and authentication (EU and US regions).
  • Stripe Payments Europe, Ltd — payment processing.
  • Twitch Interactive, Inc. — OAuth sign-in and the source of most Twitch-related data displayed in the Service.
  • Google LLC — Google Analytics 4 (loaded only after consent).
  • Cloudflare, Inc. — content delivery, DDoS and bot protection.

Where processors transfer personal data outside the United Kingdom, we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, as applicable, and (where relevant) the UK Extension to the EU–US Data Privacy Framework.

5. How long we keep it

  • Account data: while your account is active, plus up to 30 days after deletion for backup rotation.
  • Billing records: 6 years, as required by UK tax law.
  • Google Analytics data: 14 months (GA4 default).
  • Server logs: up to 30 days.

6. Your rights

Under UK GDPR you have the right to:

  • request a copy of your personal data (access);
  • correct inaccurate data (rectification);
  • ask us to delete your data (erasure);
  • restrict or object to certain processing;
  • ask for data portability;
  • withdraw consent for analytics cookies at any time via the "Cookie preferences" link in the footer.

To exercise any right, email contact@twitchspy.app. We will respond within one month.

If you believe we have not handled your data properly, you can complain to the UK Information Commissioner's Office at ico.org.uk.

7. Children

Twitchspy is not directed at children under 13 and we do not knowingly collect their personal data.

8. Changes to this policy

We may update this policy from time to time. When we make material changes we will notify you by email or in the Service. The "Last updated" date at the top of this page always reflects the current version.