CasinoStreamToolsCasinoStreamToolsCasinoStreamToolsCasinoStreamTools

Privacy Policy

Last updated: 2026-10-13

CasinoStreamTools makes OBS widgets for casino and slot streamers. This page lists exactly what we store, who processes it for us, how long we keep it and how you delete it. Questions: [email protected].

Who is responsible

Operator: CasinoStreamTools. Contact: [email protected].

What we store

  • Account: your email address, a salted hash of your password (never the password itself), your plan, the account creation date and a random public page name used in your share links (for example /bonushunt/streamer-a1b2c3d4).
  • Sessions: when you log in, a random session id with its expiry, linked to your account, and one essential httpOnly cookie that holds the signed session token. Logging out or deleting your account removes the session. If you ask for a password reset we store a one-way hash of the reset link token with its expiry (30 minutes); it is deleted one day after it expires.
  • Chat connections: if you connect Twitch, your Twitch channel name and Twitch user id and an access token (and refresh token) that we store encrypted (AES-256-GCM) and never show again. A Kick channel link stores the channel name and its chat room id (and an access token, encrypted, if one was provided). For !sr requests, the display name of the viewer who sent the request.
  • Widget configuration and data: look settings per widget, the live data you enter (bonus hunts, session balance, volatility, countdowns), your own affiliate links, and the permanent tokens inside your OBS URLs.
  • Offers page: your own links and whether you switched on suggested partner offers. For each click on the page the casino name and the time are stored, nothing about the visitor.
  • Moderators: the email addresses you invite and whether the invite was accepted.
  • Waitlist: if you join the Premium/Founder waitlist, your email, the plan, an optional account reference, whether you confirmed, and the dates.
  • Payments: for each purchase the invoice ID, plan, period, amount in US dollars, status, the crypto asset used, the processor fee and the dates. No wallet address, no card data. Crypto Pay sees the invoice (description and an internal, signed reference that contains your account ID, not your email).
  • Support tickets: type, subject, message, optional contact, your plan and the dates, plus our reply.
  • Security: login attempts (email, IP address, success, time) to stop password guessing, and short-lived request counters keyed by a one-way hash of your IP address (the IP itself is not stored there).

Chat data processed by the bot

When a streamer connects Twitch, our bot joins that channel and reads its public chat. Messages are processed in memory and discarded, except messages that start with !sr: for those we store the viewer display name, the requested slot and the time, so the request appears in the streamer's queue. The bot never stores other chat messages and never posts in chat.

Cookies and analytics

Public pages set no cookies. After you log in, one essential, httpOnly session cookie keeps you signed in. Your browser remembers your dark or light theme in local storage. We use Cloudflare Web Analytics on public pages to count page views; it uses no cookies and no local storage. There is no advertising and no Google Analytics. Fonts are served from this site.

Processors

  • Cloudflare hosts the site, the database (D1) and the chat bot, protects the login, signup and waitlist forms with Turnstile (a security check that processes your IP address and browser signals) and provides the page-view statistics. Cloudflare may process data in data centres worldwide.
  • Resend delivers our emails (waitlist confirmation, payment receipt, plan-end reminder, support) and processes your email address and the message for that.
  • Crypto Pay (Telegram, @CryptoBot) processes the payment itself under its own terms and privacy policy; we receive only the payment confirmation.
  • Twitch receives an authorization request when you connect your channel and provides the public chat the bot reads.

We do not sell or rent personal data and share it with no one else.

How long we keep it

  • Account, widget, hunt, offers and Twitch data: until you delete your account.
  • Slot requests: until you or your moderators remove them, or you delete your account.
  • Login attempts: 30 days. Request counters: 1 day. Expired sessions: deleted.
  • Unconfirmed waitlist entries: 7 days. Confirmed entries: until paid plans open and we have sent the launch email, or until you remove yourself.
  • Support tickets: until you delete your account. Payment records: the anonymous record (invoice, plan, amount, status) is kept for bookkeeping after you delete your account; it is no longer linked to you.
  • Deleted data can remain in encrypted database backups for up to 30 days before it is gone for good.

Deleting your data

Dashboard → Account → Delete account (you confirm with your password and by typing your account email) removes your account and every row linked to it at once: widgets and settings, OBS URLs, hunts and history, slot requests, offers links and click counts, your Twitch and Kick connections (we also revoke the Twitch token at Twitch, and the chat bot leaves your channel within a minute), all your sessions (you are logged out everywhere), moderator invites, support tickets and any waitlist entry (payment records lose their link to you and stay as an anonymous bookkeeping entry). Bonuses you added to someone else's hunt as their moderator stay in that hunt. Every waitlist email contains a link that removes you from the waitlist. You can also email [email protected] to get a copy of your data, correct it or have it deleted.

Your rights

Depending on where you live you can request access to, correction or deletion of your data, object to or restrict its processing, receive it in a portable format, and complain to your data protection authority. Write to [email protected].

Age

CasinoStreamTools is for adults only (18+, or the legal gambling age where you live, whichever is higher).