Privacy Policy

This website is operated by:

tawmae – Thomas Leleko
Konrad-Zuse-Str. 6a
28359 Bremen
Germany

Email: support@tawmae.xyz

For all questions regarding this Privacy Policy or your personal data, you can contact me at the email address listed above.

This website is hosted on servers of Hetzner Online GmbH in Germany. When you access the site, the following data may be automatically processed in server log files:

• IP address
• Date and time of access
• Visited pages and files
• Amount of data transferred
• Referrer URL
• Browser type and version, operating system

The processing is necessary to ensure the stability and security of the service (Art. 6(1)(f) GDPR). Log files are stored only for as long as necessary for these purposes and then deleted or anonymised.

You can sign in on this website using your Twitch account. Twitch acts as the authentication provider and transmits certain profile data to this site, in particular:

• Twitch user ID
• Display name and login name
• Avatar image (profile picture)
• Email address (if provided by Twitch)

These data are stored in a database and used to:

• Provide login and account functionality
• Assign purchases and entitlements to your account
• Prevent misuse and secure the platform

The legal basis is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in secure and abuse-resistant operation).

Your login details for Twitch (password, 2FA, etc.) are not stored on this website. Authentication takes place exclusively via Twitch. Further information on how Twitch processes personal data can be found in Twitch’s own privacy notice.

4.1 Purchases and Entitlements

If you purchase access to extensions or overlays, the following additional data may be processed and stored:

• Purchased product(s) and internal product ID
• Price and currency
• Date and time of purchase
• Payment status and internal transaction identifiers
• Assigned entitlements (which products you can access)

This data is required to perform the contract, to provide you with the purchased digital content and to document the transaction for legal and tax purposes (Art. 6(1)(b) and 6(1)(c) GDPR).

4.2 Payment via PayPal

Payments are processed by PayPal. When you choose PayPal at checkout, you will be redirected to PayPal’s pages. PayPal is responsible for processing your payment data (e.g. bank details, credit card data). I only receive information necessary to assign the payment to your order (e.g. a transaction ID, payment status).

The legal basis for this processing is Art. 6(1)(b) GDPR (contract performance). For further details on data processing by PayPal, please refer to PayPal’s own privacy notice.

5.1 Technically Necessary Cookies / Storage

Technically necessary cookies or similar technologies (such as local storage) may be used to:

• Maintain your login session
• Store basic preferences (e.g. language)
• Protect the site from abuse (e.g. CSRF tokens)

The use of such technologies is necessary for the proper functioning of the site (Art. 6(1)(f) GDPR in conjunction with § 25(2) TTDSG).

5.2 Analytics (e.g. Google Analytics 4)

If analytics tools such as Google Analytics 4 are used, they serve to analyse how visitors use the website in order to improve content and performance. Where such tools set cookies or similar identifiers, they are only activated with your consent, if applicable, via the website interface.

The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG). You can withdraw your consent at any time with effect for the future, for example via the settings provided on the website or by adjusting your browser settings.

Many of the tools offered (extensions, overlays, widgets) run locally in your own setup (e.g. in Streamer.bot or OBS). Where these tools connect to external services (such as Twitch, Discord or Spotify), this usually happens directly from your computer to the respective service.

As a rule, your account credentials for these services and the content of your chat messages are not transmitted to this website, unless explicitly described otherwise in the documentation of a specific extension.

The processing of your data by these external services is governed solely by their own privacy policies.

If you contact me by email (for example at support@tawmae.xyz), your email address, the content of your message and any additional information you provide will be processed in order to handle your request.

Depending on the context, the legal basis is Art. 6(1)(b) GDPR (contract-related communication) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). Correspondence is stored only for as long as necessary to deal with your request and to comply with statutory retention obligations.

In addition to the hosting provider and payment service providers mentioned above, technical service providers (such as infrastructure or analytics providers) may be involved as processors within the meaning of Art. 28 GDPR. They are contractually bound to process data only according to instructions.

Some providers (e.g. Twitch, PayPal, Google) are based outside the EU/EEA. Where data is transferred to countries without an adequate level of data protection, this is done on the basis of appropriate safeguards such as Standard Contractual Clauses or adequacy decisions, where available.

Personal data are stored only for as long as necessary for the purposes described in this Privacy Policy or as required by statutory retention periods (e.g. under tax or commercial law). After these periods expire, the data are deleted or anonymised.

As a data subject, you have, in particular, the following rights under the GDPR:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR)
• Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).

This Privacy Policy may be updated from time to time to reflect changes in the website, in legal requirements or in technical developments. The version available on this page applies.