When you connect your Twitch account, we receive your public Twitch username, profile picture, and optionally your email address (only if Twitch shares it during OAuth). We never store your Twitch password. Your email is used solely for service notifications (gifted sub confirmations, account deletion receipts).

Technical data (automatic, no consent required — necessary for the service):

• Country and city (derived from your IP address using a local database — no third-party call)
• Device type (mobile/desktop, from User-Agent)
• Timezone (from browser API)
• Browser language
• Operating system and browser

Behavioural data (automatic, subject to your analytics consent): if you have enabled analytics tracking, the extension records on each impression:

• The Twitch channel you were watching
• The game / stream category
• The stream's viewer count
• Session time and date

This data is used to show you relevant ads and provide advertisers with anonymised audience metrics. If you disable analytics tracking in your settings, none of this is recorded.

Hardware signals (automatic, collected once at install, no consent required — technical data):

• Screen resolution
• CPU core count and estimated RAM
• Network connection type (WiFi, 4G…) and estimated speed
• Touch screen presence
• Dark/light mode preference

These signals are used to categorise your hardware profile (entry/mid/high-end PC) for ad targeting. They are collected once and do not change between sessions.

Profile data (optional, explicit consent only): if you choose to complete the profile survey, we collect your gender, age range, and interests. This requires a separate explicit consent and can be deleted at any time.

We do not collect browsing history, keystrokes, passwords, or any data outside of Twitch.tv pages.

Your data is used solely to operate Subi:

• Calculating and crediting your ad-impression earnings
• Processing gifted subscription redemptions
• Targeting ads to your profile (games watched, language, hardware) — only with your consent
• Showing advertisers aggregate, anonymised metrics (e.g. "60% of users watch FPS games")

Advertisers receive only anonymised audience segments — never individually identifiable data (username, email, IP address).

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Advertisers access only aggregate, anonymised metrics: total impressions, breakdown by game/language/hardware profile. They never receive your Twitch username, email, IP address, or any information that could identify you individually.

Your account data is retained for as long as your account is active. From your dashboard (Privacy & data section) you can:

• Download all your personal data as a JSON file (GDPR Art. 20 portability right)
• Delete your account and all associated data instantly and permanently. A confirmation email summarising the deleted data is sent to you.

The Subi Chrome extension requests the following browser permissions:

• storage: saves your login token, credit balance, and settings locally in your browser. Nothing is sent to third parties.
• tabs: detects when you return to subi.live after Twitch authentication and opens the Twitch OAuth page. We never read the content of other tabs.

The extension only runs on twitch.tv and subi.live pages.

Subi uses a single authentication token stored in your browser's local storage to keep you logged in. No third-party tracking cookies are used.

All data is transmitted over HTTPS. Authentication tokens are short-lived JWTs. We follow industry-standard practices to protect your information.

Questions about this policy? Email us at contact@subi.live.