Privacy Notice

UltStream is a community-first live streaming platform. We collect the data we need to run the platform — your account, what you watch, what you say in chat — and nothing else. We don't sell or share your data with advertisers, brokers, or anyone outside the trusted vendors listed below.

If you have a question about anything in this notice, the contact section at the bottom is the fastest path to a real human.

When you sign up: your email address (for account access + transactional notices like password resets) and a username (chosen by you, public).

When you use the platform: your follows, your chat messages, the channels you watch, and a basic record of when you watched (used to mint Energy credits for live watch-time).

If you set a profile avatar: the image you upload, stored in our object storage.

If you apply to be a creator: the pitch you write and any social links you supply, stored on a `creator_applications` row tied to your account.

We only send marketing emails to users who opt in. There are two opt-in paths:

• At sign-up there's a checkbox titled something like "Get the launch update + creator drops." It's unchecked by default. You can toggle it later from Settings → Profile.

• On the public landing page there's a "Notify me when more creators arrive" form for visitors who don't want to create an account. That email goes on the same list with explicit opt-in.

What you'll get: launch updates, new-creator announcements, occasional product news. No high-frequency drip, no third-party offers. Every email has an unsubscribe link.

What we keep: just your email address and the source of the opt-in (signup checkbox vs anonymous form). We use external email tools (Mailchimp / Beehiiv / similar) to send — we export the list to those tools rather than sending from inside UltStream itself.

UltStream is a live platform first. We are NOT a VOD library.

For each channel, we keep at most ONE most-recent recording. When a creator finishes a live session and a new recording is produced, the prior recording is automatically deleted from our video provider's storage. Older recordings are gone — there's no archive to recover from.

We do NOT store clips on UltStream. Creators who make clips do so on external platforms (Twitch, YouTube, etc).

Chat messages are tied to live sessions and visible during + briefly after the stream ends. They're not retained as a long-term searchable archive.

You can delete your account at any time from Settings → Account. The deletion is immediate and irreversible. Here's exactly what happens:

• DELETED: your auth record (email + password), your profile (username, bio, avatar, theme prefs), your marketing opt-in, your follows, any pending creator application, your security event log.

• ANONYMIZED: your authored chat messages stay in their channel's history but are detached from your user id. The author shows as "[deleted]" in chat. This preserves the channel's chat history (so other people's conversations don't have holes) without retaining a pointer back to you.

After deletion you can sign up again with the same email address.

If you'd rather request deletion via email, see the contact section below — we honor email requests within 30 days.

We use only what's necessary to keep you signed in: session cookies issued by our auth provider (Supabase). We don't run third-party advertising trackers, behavioral profiling, or remarketing pixels.

Vercel Analytics (page-view metrics). UltStream runs Vercel's first-party analytics to count visits and identify which pages are popular. It is designed to be privacy-respecting:

• No cookies are set for analytics — it's a cookie-less system.

• Your IP address is hashed and truncated server-side before storage; we never receive a usable IP.

• What's collected: the page URL you visited, your country (derived from the truncated IP), referrer (where you came from), and user-agent category (mobile vs desktop). No exact device fingerprinting, no scroll depth, no mouse tracking.

• Data is aggregated within 24 hours and individual events are discarded.

• Retention: aggregate counts are kept on the project dashboard; we cannot drill down to a specific person.

• Provider: Vercel Inc. — see https://vercel.com/legal/privacy-policy for their handling.

A cookie / analytics consent banner is on our roadmap (planned story); when shipped, you'll be able to opt out before any analytics call is made. Until then, given the cookie-less + IP-hashed design, we believe the current collection sits inside the "essential first-party analytics" carve-out under most jurisdictions, but jurisdictions vary — please contact us if you'd like to opt out manually in the interim.

When we add Sentry for error monitoring, additional payment processors, or any other tracking surface, we'll update this section.

Questions about your data, this notice, or a deletion request? The fastest path is to reach out via the channels listed in our footer.

We read every message. We're a small team — your message goes to a real person, not a ticket queue.