This Privacy Policy explains what personal data Stream collects, why, how we use and protect it, and the rights you have. Stream is operated by [LEGAL ENTITY NAME] ("we", "us"), the data controller. Stream is built to be private by design: no ads, no advertising trackers, and no behavioral profiling.
1. Data we collect
- Account data — your email address, optional display name, and a hashed password. If you sign in with Google, we receive your email, name, and Google account identifier (we never receive your Google password).
- Content you create — the feeds and sources you subscribe to, articles you save, read/favorite status, translations, and PDF exports you generate.
- Payment data — handled entirely by our payment provider, Paddle. We receive confirmation of your subscription status and limited billing details (such as country and the last digits of your card for support), but we never see or store your full card number.
- Technical data — IP address, browser/device type, and log data needed to operate, secure, and debug the Service.
2. How we use it
- to provide the Service — sync your feeds, store your library, translate and export articles;
- to create and secure your account and authenticate you;
- to process subscriptions and prevent fraud (via Paddle);
- to send essential service messages (e.g. verification, password reset, billing notices);
- to maintain, improve, and troubleshoot the Service; and
- to comply with legal obligations.
We do not sell your personal data, and we do not use it for advertising.
3. Legal bases (GDPR)
Where the GDPR applies, we process your data on these bases: performance of a contract (to provide the Service you signed up for), legitimate interests (to secure and improve the Service), legal obligation (e.g. tax and accounting), and consent where required (which you can withdraw at any time).
4. Who we share data with
We share data only with service providers who process it on our behalf, under contract:
- Paddle — payment processing and Merchant of Record. See Paddle's Privacy Notice.
- Google — optional "Sign in with Google" authentication.
- Hosting & infrastructure providers — to run the servers and database that store your data.
- Translation / text-processing providers — to generate translations and parse article text when you request it.
We may also disclose data where required by law, or to protect our rights, users, or the Service.
5. Cookies
Stream uses only the cookies and local storage strictly necessary to keep you signed in and remember preferences such as your interface language. We do not use advertising or cross-site tracking cookies. Paddle may set cookies during checkout to process your payment securely.
6. Data retention
We keep your account and content data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain certain records (e.g. invoices) to meet legal obligations.
7. International transfers
Your data may be processed in countries other than your own. Where we transfer personal data internationally, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) to protect it.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data; to object to or restrict certain processing; and to withdraw consent. To exercise these rights, email privacy@stream.yh.net.ua. You also have the right to lodge a complaint with your local data-protection authority.
9. Children
Stream is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
10. Changes
We may update this Policy from time to time. We'll revise the "Last updated" date above and, for material changes, take reasonable steps to notify you.
11. Contact
Data controller: [LEGAL ENTITY NAME], [REGISTERED ADDRESS]. For any privacy question or request, email privacy@stream.yh.net.ua.