Privacy policy
This is a translation for convenience. The German version is legally binding. Read the German version.
This page explains which personal data Riglayer processes, what for, for how long and which rights you have. Riglayer only collects what is needed to operate the service. There is no tracking, no advertising and no analytics services.
1. Controller
The provider details will be added.
Email: info@riglayer.de
No data protection officer has been appointed because the law does not require one. For any questions about data protection you can reach us at the address above.
2. Signing in with Twitch
You sign in exclusively with your Twitch account. Signing in runs through Twitch; we never see your Twitch password. From Twitch we receive and store:
- your Twitch ID, login name, display name, the address of your profile picture, your verified email address (see section 6) and your Twitch status (affiliate, partner or neither),
- the access and refresh tokens from Twitch (stored encrypted) and which permissions you granted,
- timestamps: account creation, last seen, acceptance of the terms of use (with version).
When you sign in, Riglayer asks Twitch for the permissions needed for the Twitch features: manage channel (title, category, raids, moderators and VIPs), read and manage polls and predictions, read and write chat, whispers, announcements and shoutouts, read followers, subscribers, bits, channel point redemptions, hype train and channel editors, create clips and read moderation data, and view your verified email address. Twitch shows you the full list before you agree. You grant them even before your channel is approved; for your own channel, however, Riglayer only uses them after approval. You can disconnect at any time at twitch.tv/settings/connections. Twitch notifies us of this; we then immediately delete the stored tokens, the granted permissions and your email address and no longer access your Twitch account. Your Riglayer account and your content remain until you delete your account in the settings or ask us to delete it.
Legal basis: Art. 6(1)(b) GDPR (use of Riglayer as agreed in the terms of use).
3. Approval by admins
Riglayer can only be used by approved channels. If you request access, admins see your display name, your login, your profile picture and the status of your request (requested, rejected, blocked, approved, each with a date). For operations, admins also see usage figures per channel (for example the number of overlays, storage used, time of last activity), but not the content of your overlays.
If your account is deleted while your channel is blocked or a request was rejected, we keep your Twitch ID with the date of the block or rejection. This way a block cannot be bypassed by deleting your account and signing in again. The entry is deleted as soon as the block is lifted, for a rejection after 14 days and at the latest after two years. Legal basis: Art. 6(1)(f) GDPR (protection against abuse).
4. Content of your channel
We store everything you create in Riglayer so that it works: overlays and their elements, uploaded images and sounds, logo rotations, alerts, quizzes, tournaments, chat commands, triggers, presets, earlier versions of overlays (at most 40 automatic and 40 manual ones each), team members and roles, invitations and Stream Deck links. Optionally you store a Discord webhook for the “live” notification.
In addition Riglayer keeps a log: who changed what and when (with the name of the person acting). Only people with the matching right in your channel can see the log.
During a broadcast we store the viewer count and the number of followers and subscribers every minute, plus the start, end, title and category of the broadcast, to show you the statistics.
Legal basis: Art. 6(1)(b) GDPR.
5. Data from Twitch chat and viewers
For the chat overlay, chat commands, triggers, alerts and quiz, Riglayer reads the chat and the events of your channel (for example new followers, subscriptions, bits, raids). This processes Twitch names, Twitch IDs and messages from viewers. Chat messages and events are processed live only for the display and the triggered actions and are not stored permanently. Exception: in the quiz we store the leaderboard (name and points) in the state of the quiz during and after a quiz until you reset or delete it. We keep the answers to individual questions only in memory.
As a streamer you are yourself responsible to your viewers for this data. Riglayer processes it on your behalf (see the terms of use, section on data processing). Legal basis on our side: Art. 28 GDPR in conjunction with Art. 6(1)(f) GDPR.
6. Email
When you sign in, we fetch your verified email address from your Twitch account and store it. We use it exclusively to send you status emails: when a decision is made about your request and when your channel is approved, rejected, blocked or unblocked. We send you neither advertising nor newsletters and never pass the address on. Emails are sent through a mailbox at STRATO GmbH, Berlin. You can turn the emails off at any time in the settings and delete the stored address there; it will then not be stored again at your next sign-in as long as the emails are off. Legal basis: Art. 6(1)(b) GDPR (information about the status of your request and your channel).
6a. Discord connection (optional)
In the settings you can connect your Discord account with Riglayer. You then automatically get the “Streamer” role on the Riglayer Discord if Twitch lists you as an affiliate or partner. Without this connection nothing changes about your use of Riglayer.
- What we store: your Discord ID, your Discord name, the time of the connection and your Twitch status (affiliate, partner or neither), which we read from Twitch. We do not store a password, an email address or an access key from Discord: we use the short-lived access only once to read your Discord ID and revoke it immediately afterwards.
- Why and on what basis: to assign the role, based on your consent (Art. 6(1)(a) GDPR). You give it by establishing the connection.
- What Discord learns: Riglayer asks Discord whether you are a member of the server and assigns or removes the “Streamer” role.
- Withdrawal: in the settings under “Discord” with “Disconnect”. We then delete the stored Discord details and remove the role if Riglayer assigned it. The same happens when you delete your account.
7. Cookies and local storage
Riglayer only sets cookies that are needed for operation: a cookie for signing in and, if you choose the language yourself, a cookie with that choice. In addition Riglayer stores some settings in your browser. There are no tracking, analytics or advertising cookies. Details are on Cookies and local storage. Legal basis: Section 25(2) no. 2 TDDDG and Art. 6(1)(b) GDPR.
7a. Language and country detection
So that you see Riglayer in the right language, Riglayer assigns the IP address of your request to a country: from Germany, Austria and Switzerland the site appears in German, from everywhere else in English. If the country cannot be determined, the language of your browser decides. Search engines are not redirected.
- How: This happens on our server with a local country database (“IP to Country Lite” by DB-IP, license CC BY 4.0). The IP address is only used briefly in memory for this; it is not stored and not sent to third parties. Once a month our server downloads the database file from download.db-ip.com; DB-IP only sees the address of our server, no data of visitors.
- Your choice: With the DE | EN switch you choose the language yourself. A cookie (
rl_lang, 1 year) then stores only this choice. Signed-in users can also set the language in the account settings; it is then stored in your account. - Legal basis: Art. 6(1)(f) GDPR (legitimate interest in an understandable presentation); for the cookie Section 25(2) no. 2 TDDDG.
8. External services and recipients
| Service | Purpose | Data |
|---|---|---|
| Twitch Interactive, Inc., USA | Sign-in, chat and events, channel features, profile pictures and emotes | Data from sections 2 and 5; when images are loaded from Twitch, your IP address. Twitch is its own controller for this (Twitch privacy notice). |
| 7TV, BetterTTV, FrankerFaceZ, Chatterino and Chatterino Homies | Additional emotes, badges and name colors in the chat overlay | Our server requests the emote lists of your channel (Twitch ID) and, depending on the setting, the badges of individual chat participants (Twitch ID). The browser loads the images directly from their servers (IP address); in the OBS overlay that is your OBS, in the preview your browser. |
| YouTube (Google) and Twitch clips | Video element in the overlay | Only if you insert a video. The provider then loads the video directly from its servers (IP address and the provider's cookies), in the preview in Riglayer in your browser and in the OBS overlay in your OBS. |
| Discord Inc., USA | Optional “live” notification and optional Discord connection (“Streamer” role) | Live notification only if you enter a webhook: channel name, title, category and link when a broadcast starts. Connection only if you establish it: your Discord ID and name (see section 6a), after that checks whether you are on the server and the assignment of the role. |
| STRATO GmbH, Berlin | Sending the status emails | Your email address and the text of the email. |
| Hosting | Operating the server | The server is operated at STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin. |
All fonts are hosted on our own server. We do not embed fonts, scripts or analytics services from third parties.
Some recipients (for example Twitch and Discord) are located in the USA. The data protection rules of the respective provider apply there. We only transmit what is needed for the stated function.
9. Server logs and security
In normal operation the web server does not write access logs with IP addresses. To protect against abuse, Riglayer briefly counts requests per IP address in memory (a few minutes, then deleted). Technical error messages may briefly contain an IP address. The connection is encrypted with HTTPS, and Twitch tokens are stored encrypted. Legal basis: Art. 6(1)(f) GDPR (secure operation).
A backup copy of the database and the uploaded files is made every day. The automatic backups of the last 7 days are kept, older ones are overwritten.
10. Retention
- Account and content: until you delete your account (Settings, “Delete account”). We then delete your account, your channel with all its content and your Twitch tokens and revoke the connection at Twitch. In the logs of other channels your name then only appears as “Deleted account”.
- Sign-in (session): up to 90 days without activity.
- Discord connection: until you disconnect it or delete your account.
- Log of a channel: 12 months.
- Statistics (viewers, followers, subscribers, broadcasts): about 13 months.
- Backups: 7 days (automatic). Deleted data disappears from the backups at the latest then.
11. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw any consent at any time with effect for the future.
You can exercise many rights yourself: under Settings you can download your data as a file, delete your email address and delete your account. For anything else write to us at info@riglayer.de.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for your place of residence.
No automated decision within the meaning of Art. 22 GDPR takes place. People decide on approvals.
12. Changes
When Riglayer changes, we adapt this policy. For significant changes we ask for your agreement to the terms again at your next sign-in.