How Beacon handles your data, Privacy policy

1. Who we are

Beacon is run by Andrea Tombolato (Lombardy, Italy), the data controller for the data described here. Beacon is part of HeyAtom: sign-in and accounts are handled by HeyAtom's identity service on our behalf.

For anything about your data, write to [email protected].

2. What data

• Your account: email address, username, password (stored only as a hash), two-factor settings, the language you chose, and your active sessions with their IP address and browser, so you can see and end them in Settings.
• Twitch, if you link it: the id and name of your Twitch channel and the email Twitch shares at sign-in. We ask Twitch for read access only: never your chat, never permission to act on your channel.
• Channels shown by a team: public data from Twitch and Kick (channel name, display name, profile picture, banner, stream title, game, viewer count, start time) and what we compute from it: streams, average and peak viewers, time per game. A channel can be shown by a team without having a Beacon account: this section applies to it too.
• Your creator profile, if you claim your channel: the description and social links you write, and the Discord webhook for your channel’s alerts if you set one (kept secret, never shown in full; removed if you unlink Twitch).
• Organizations and teams: names, descriptions, logo addresses, members with their username and profile picture, and the Discord webhook a team sets up (kept secret, never shown in full).
• The Twitch panel: the id of the channel it is installed on, from the token Twitch gives the extension. Nothing about viewers is stored.
• Technical logs: IP address, page or API route and time of each request, for security and troubleshooting.

3. Why, and on what basis

• Providing the service you asked for (account, teams, statistics, notifications): necessary to perform our agreement with you.
• Showing channels on team pages: our legitimate interest, and the team's, in a public page of who streams together. We use only data the platforms already make public, and every channel can leave a team and stay out of it (section 6).
• Security and abuse prevention (rate limits, logs): legitimate interest.

We do not sell data, show ads or build profiles for marketing.

4. Cookies

Only technical cookies, needed for the site to work, so there is no consent banner:

• beacon_token, beacon_refresh: keep you signed in (1 hour and 30 days).
• beacon_oauth, beacon_2fa: a sign-in in progress (10 and 5 minutes).
• beacon_claim: whether your Twitch channel is linked to your account (30 days).
• i18n_redirected: the language you chose.

No analytics or advertising cookies, no third-party scripts. Fonts are served by Beacon itself.

5. Who receives it

• Hosting: servers in the European Union, under the GDPR.
• Cloudflare: network delivery and protection; it sees your IP address.
• Brevo: sends our emails (confirmation, password reset); it receives your email address.
• Twitch and Kick: we read their public APIs; signing in with Twitch happens on Twitch.
• Discord: when a team or a streamer sets up notifications, live alerts with public stream data are sent to the Discord server they chose.

Our data is stored in the European Union. Where a provider processes some of it outside the European Economic Area, the transfer relies on the safeguards the GDPR provides, such as standard contractual clauses.

6. Your rights

• Access and portability: download all your data from Settings.
• Correction: change your username and creator profile yourself; channel names and pictures come from the platform.
• Erasure: delete your account from Settings. Your personal space and its teams are deleted; your channel stays in the teams that show it, no longer linked to you, with its statistics.
• Objection: leave any team from My channel or from the Twitch panel; that team cannot add you back. Without an account, write to us and we remove your channel.
• Complaint: you can complain to the Italian data protection authority (Garante per la protezione dei dati personali) or to the one of the EU country where you live.

We answer requests by email within one month.

7. How long we keep it

• Account: until you delete it. Accounts never confirmed are deleted automatically.
• Statistics of a channel: while a team shows it or it is linked to an account. When a manager removes it from its last team, the channel and its statistics are deleted. A channel that left a team keeps a minimal record so it is not added back.
• Viewer samples taken every 5 minutes during a stream: 6 months; the totals of each stream remain.
• Technical logs: a short period, then overwritten.

8. Changes

The date at the top changes with every update. We tell account holders about significant changes by email before they apply.