Privacy Policy

Last updated: October 02, 2026

  • Introduction
  • Information We Collect
  • How We Use Your Information
  • Legal Bases for Data Processing
  • Cookies and Local Storage
  • Third-Party Services
  • How We Share and Disclose Your Information
  • Data Retention
  • Data Security
  • International Transfers of Your Data
  • Your Rights and Choices
  • Children's Privacy
  • Changes to This Privacy Policy
  • Contact Us

Introduction

Faneo (“Faneo”, “we”, “our” or “us”) provides tools that help content creators run contests on YouTube livestreams and track Super Chats. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. It applies to creators, who use our dashboard to manage livestreams, and it also describes how we handle the data of Super Chat senders, whose public Super Chats we process on behalf of a creator to power the contests and scoreboards.

Information We Collect

Creator Account Information

When you sign in as a creator with Google and as you use the dashboard, we collect:

  • Your name, email address and basic profile information from your Google account (through the OpenID, email and profile scopes).
  • Account and organization identifiers (such as your user ID and tenant ID) and settings like your language preference.
  • The livestreams, tags, contests and other configurations you create — including the public YouTube video or livestream you connect for tracking.
  • We authenticate you through Google sign-in and do not store your Google access or refresh tokens.
Super Chat Information

To power the contests and analytics, we read Super Chat data from the public YouTube Data API for the livestreams a creator connects. This may include:

  • The Super Chat message text and its YouTube message identifier.
  • The sender’s display name and YouTube channel identifier.
  • The donation amount and currency and, for non-USD donations, the converted amount and the exchange rate used.
  • The time the Super Chat was posted and the times any tag assignment is changed.
  • The keywords extracted from the message that match a creator’s tags, and the points and tag or team assignments derived from them.
Content You Provide

Creators can upload and enter content that we store to operate the Service, including tag and team names, keywords and emojis; uploaded tag images; and the titles and options of FaneoPlay sessions, such as polls, giveaways and gifts.

Technical and Usage Information

Like most online services, our servers automatically receive and log limited technical information — such as your IP address, browser and device type, and access timestamps. This includes records of sign-in attempts (with the IP address and user agent) that we keep for security monitoring and troubleshooting.

What We Do Not Collect

We do not collect or store:

  • Payment card or financial account data — all Super Chat payments are handled by YouTube and Google, and we never receive them.
  • Your Google account password.
  • Precise geolocation data.
  • Advertising identifiers or cross-site tracking data; we do not use third-party ad trackers or sell your information.

How We Use Your Information

We use the information we collect to:

  • Provide, operate and maintain the Service, including running livestream contests and FaneoPlay sessions.
  • Read, process and track Super Chats in real time, and calculate points, tags and leaderboards.
  • Authenticate creators and keep their accounts and sessions secure.
  • Display Super Chat data and results in creator dashboards, analytics, overlays and public scoreboards.
  • Maintain historical records of livestreams, contests and campaigns.
  • Measure product usage and reliability through privacy-respecting analytics and session recording, and improve features.
  • Protect the Service, prevent abuse, debug issues and comply with legal obligations.

Legal Bases for Data Processing

When data protection laws such as the EU/UK GDPR apply, we rely on the following legal bases: the performance of a contract (to provide the Service that you or the creator request); legitimate interests (to operate, protect and improve the Service and run contests, balanced against your rights); consent (where we request it, and which you can withdraw); and compliance with legal obligations. Creators are responsible for having an appropriate legal basis for the Super Chat and audience data they ask us to process on their behalf.

Cookies and Local Storage

We use a small number of cookies and browser storage mechanisms, focused on operating the Service rather than tracking it:

  • A secure, httpOnly authentication cookie that keeps creators signed in and that JavaScript cannot read.
  • If you choose “Keep me signed in on this device” at sign-in, a second secure, httpOnly cookie that JavaScript cannot read, used only to renew your sign-in without asking you to sign in again. It lasts up to 30 days from your last use, is sent only to our sign-in endpoints, and is deleted when you sign out. This cookie is not set unless you turn the option on.
  • Browser local storage for preferences and basic interface data — such as your language, display theme and limited account data, including your name and email address — to keep you signed in and personalize the interface.
  • Product analytics and session recording (PostHog), which store a device or session identifier in your browser’s local storage to measure usage and reliability. We do not use cookies for this.
  • We do not use advertising or cross-site tracking cookies.

Third-Party Services

We rely on a limited set of third-party providers to deliver the Service. Their processing of your data is governed by their own policies:

  • Google sign-in (OAuth) — used to authenticate creators. Google’s Privacy Policy (https://policies.google.com/privacy) applies to the data processed during sign-in.
  • YouTube API Services — we use the YouTube Data API (through a Google API key) to read public livestream and Super Chat information. Your use of Super Chats is subject to the YouTube Terms of Service (https://www.youtube.com/t/terms), and Google’s Privacy Policy (https://policies.google.com/privacy) describes how Google handles the data.
  • PostHog — product analytics and session recording, processed on our behalf (PostHog Cloud, European Union).
  • OBS and similar streaming software — creators display Faneo overlays through browser sources; we do not control their streaming software.
  • Currencyapi.com — used to convert donation amounts between currencies; no personal data is sent.
  • Email delivery (SMTP) — used to send transactional emails such as invitations and security notifications.
  • Cloud hosting and object storage — our database and creator-uploaded images are hosted with Hetzner in Germany (EU).
  • Cloudflare — serves our web application and acts as a content delivery network and security layer in front of our API; it processes network information, such as your IP address, to route and protect requests.
  • Grafana Cloud (European Union) — used to collect operational and access logs, which may include IP addresses, to monitor and troubleshoot the Service.

How We Share and Disclose Your Information

We do not sell your personal information. We share information only when necessary to operate the Service:

  • With creators: a creator can see the Super Chat data (message, amounts and tag assignments) from their own livestreams, to use in dashboards, analytics and scoreboards.
  • Publicly on scoreboards and overlays: display names, tag or team assignments, points and donation amounts may be shown publicly as part of a livestream’s contest, including on screen and on live scoreboards.
  • With service providers that process data on our behalf (such as hosting, storage, analytics and email delivery), under contracts that limit their use.
  • For legal reasons: to comply with applicable law, respond to legitimate requests, or protect the rights, safety and integrity of Faneo, our users and the public.
  • In a business transfer, such as a merger or acquisition, subject to this Privacy Policy.

Data Retention

We retain information for as long as necessary to provide the Service and for legitimate business and legal purposes. Super Chat and contest data is kept as part of a livestream’s historical record and remains associated with the relevant livestream and creator. Authentication cookies expire automatically, and we do not store Google’s OAuth tokens from sign-in. You can ask us to delete your account data as described in “Your Rights and Choices” below.

Data Security

We use appropriate technical and organizational measures to protect information. While no method of transmission or storage is completely secure, our safeguards include:

  • Storing creator authentication in secure, httpOnly cookies that JavaScript cannot access.
  • Not storing Google’s OAuth tokens from sign-in.
  • Encrypting data in transit with HTTPS.
  • Validating input at our API and isolating each creator’s data through a multi-tenant architecture.
  • Restricting data access to authorized personnel who need it.

International Transfers of Your Data

Your information may be processed in countries other than the one you live in. Our database and uploaded images are hosted in Germany (EU), and our analytics provider PostHog and our logging provider Grafana Cloud process data in the European Union. Some providers, such as Google/YouTube, process data in the United States and other countries, and Cloudflare, which serves and protects our application, operates a global network that may process network information (such as your IP address) outside the EU. Where necessary, we rely on appropriate safeguards — such as the European Commission’s Standard Contractual Clauses — for cross-border transfers.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights over your personal information:

  • Access a copy of the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your data, subject to legal and legitimate business exceptions.
  • Object to or restrict certain processing, and withdraw consent where processing is based on it.
  • Receive your data in a portable format.

To exercise these rights, contact us at info@faneo.app; we will respond within the timeframe required by applicable law. Because creators decide which contests to run and how Super Chat data is used within their own livestreams, for data shown in a specific livestream you may also need to contact the relevant creator, who acts as the controller for that activity.

Children's Privacy

The Service is not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect their personal information. If you believe a child has provided us with information, please contact us at [email protected] and we will take steps to delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Service or for legal, operational or regulatory reasons. We will post the updated policy here and revise the “Last updated” date above. Your continued use of the Service after an update takes effect means you accept the revised policy.

Contact Us

If you have questions or requests about this Privacy Policy or our data practices, please contact us at [email protected]