Privacy Policy

1. Scope

This policy applies to information we process about account holders (streamers) and about donors who interact with the Service. It does not cover third-party services you connect or link to, which are governed by their own policies.

2. Information we collect

Information you provide:

• Account details: your email address and a password (stored only as a secure hash — we never store or see your plaintext password).
• Profile: your chosen username and an optional profile-image URL.
• An optional refund/dispute contact email, shown to donors on your paid receipts.
• Wallet connection details: your NWC connection string (encrypted at rest) or your extended public key (xpub), which is a watch-only public key that does not allow spending.
• Subscription information needed to bill you.

Information collected automatically:

• Session data such as your IP address and browser user-agent, and minimal server logs, used to keep you signed in and to secure the Service.
• Page counts, from our own self-hosted GoatCounter running on our servers (not a third-party service): the page address, the referring site, your browser and screen size, and an approximate country derived from your IP address. It sets no cookies, does not store your IP address, and cannot follow you across sites or over time. We count only public pages (the home, pricing, help and legal pages, signup, and donation pages); dashboards, invoices, and overlays are never counted.
• Error reports, from our own self-hosted error tracker (Bugsink, on our servers): when something breaks, the technical details of the error, the page address, and your browser and operating system. Before a report is sent, we remove cookies, IP addresses, email addresses, passwords, wallet connection strings, invoices, and the private part of overlay links.
• We do not use third-party analytics, advertising, or cross-site tracking, and we do not build advertising profiles.

Information from third parties:

• When you link a social platform (Twitch, Kick, X, Rumble), we receive OAuth tokens (stored encrypted) and your handle/user id on that platform.
• When you link a Nostr profile, we store the NIP-05 name or npub you enter and the public key it resolves to, and read your public Nostr profile (including its Lightning address) from public relays. No Nostr private key is ever requested or stored. You can disconnect it at any time in Social settings.
• When someone zaps your linked Nostr profile, we read the zap receipt from public Nostr relays and record it as a donation: the amount, the zapper’s comment, and their public display name (or a shortened npub). These zappers may never visit cheddar.chat; this information is already published on public relays by the zapper’s client and their Lightning provider.
• From our payment providers we receive billing metadata such as customer and subscription identifiers — not your card number.

Donation data: the donor-provided name and comment, the amount, and timestamps for each donation.

3. How we use information

• To provide and operate the Service, authenticate you, and route donation invoices through your own wallet.
• To bill and manage your subscription.
• To send transactional email (such as email verification and billing notices).
• To secure the Service and prevent fraud and abuse.
• To comply with legal obligations.

We do not sell your personal information and do not use it for behavioral advertising.

4. Cookies

We use only cookies the Service needs to work, so we don't ask for consent to them:

• Sign-in session: keeps you signed in, for up to 7 days.
• cc_invite: carries an invite code through signup, for up to 30 days.
• cc_preview: preview access before launch, for up to 30 days.
• Cloudflare Turnstile may set its own cookies on the signup and donation forms, for bot protection.

Our page counts and error reports use no cookies. We do not set third-party analytics or advertising cookies.

5. How we share information

We share information with the service providers (subprocessors) below, only as needed to run the Service:

We may also disclose information to comply with law or valid legal process, to enforce our terms, or to protect the rights, safety, and security of our users or the Service, and in connection with a merger, acquisition, or sale of assets. We do not sell your personal information.

Some information is public by design: your username and any donor name and comment are shown on your public donation page, your on-stream overlay, and the donation receipt page. If you add a refund contact email, it is shown on your paid donation receipts, which anyone with the receipt link can see.

6. Data retention

We keep personal information only as long as we need it:

Encrypted platform tokens are removed when you disconnect the platform. When your account is deleted, we also cancel any card subscription, delete your customer record with our card processor, and revoke our access to the platforms you connected.

Page counts contain no personal information and are kept as statistics. Error reports are kept only while they help us fix a problem and are deleted automatically as newer reports replace them.

7. Security

We protect information in transit with TLS and encrypt sensitive data at rest, including wallet connection secrets and OAuth tokens. Passwords are stored as secure hashes, and wallet connections are scoped so they can never be used to spend your funds. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights and choices

You may access, correct, export, or delete your personal information, and object to or restrict certain processing.

• Download your data or delete your account yourself in Settings → Account and privacy. Deleting locks the account at once and erases it 7 days later; until then you can restore it by logging in or with the link we email you.
• For anything else, email [email protected] from the address on your account. We answer within 30 days.
• Donors can ask us to remove their name and message from a donation: email us the invoice link.

California residents (CCPA/CPRA): you have the right to know what personal information we collect, to request deletion, and to non-discrimination for exercising your rights. We do not sell or "share" personal information as those terms are defined under California law.

EU/EEA, UK, and Swiss users (GDPR): you have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority. Our legal bases are:

9. International data transfers

We operate from the United States, and our servers are in the United States. Your information may also be processed in other countries where our providers operate. For personal information from the EEA, the UK, or Switzerland, we rely on our providers' data processing terms, which include the European Commission's Standard Contractual Clauses (with the UK addendum), and, where a provider is certified, the EU–U.S. Data Privacy Framework.

10. Children

The Service is intended for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact [email protected] and we will delete it.

11. Third-party links and services

The Service links to and integrates third-party services, including wallet providers and connected social platforms. We are not responsible for their content or privacy practices; their own policies apply.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by email or on the Service. The "Effective date" above shows when this version took effect.

13. Contact

Questions or requests: [email protected]
Cheddarchat LLC, Wisconsin, USA

See also our Terms & Conditions. · Back to home