Data Policy

Last updated: 30 May 2026

This Data Policy describes, in practical terms, the categories of data MyStreamSpace ("MyStreamSpace", "we", "us", or "our") stores, where that data lives, who processes it, and how long we keep it. It complements our Privacy Policy, which explains the broader principles behind how we handle your information. Where the two documents overlap, the Privacy Policy governs.

1. Categories of Data We Store

  • Identity & account data — email, name, username/handle, hashed password, sign-in provider (password, Google, or KingsChat), email-verification status, and account timestamps.
  • Profile data — display name, bio, avatar, and cover image.
  • Content data — videos, clips, live streams, comments and replies, live chat messages, event RSVPs, reports, and support requests.
  • Engagement data — views, likes, bookmarks, shares, follows, and the interests you select.
  • Transaction data — stars purchases, boosts, gifts, and the associated provider reference, amount, and currency. We do not store card or wallet credentials.
  • Technical data — IP-derived approximate location, device/user-agent, app version, and (on mobile) push notification tokens.

2. Where Your Data Lives

  • Primary database — your account, profile, content metadata, social graph, and transaction records are stored in our managed MySQL database.
  • Cache & counters — high-frequency values such as view and like counts, and short-lived dedupe and rate-limit windows, are held in Redis. Redis is the live source for some counters and is periodically reconciled to the database.
  • Media & CDN — uploaded images and video assets are stored and delivered through Bunny (storage and CDN).
  • Live chat & presence — live stream chat and reactions are stored in Google Firebase (Firestore).
  • On your device — your authentication tokens, theme preference, and web watch history are kept in your browser's local storage and are never uploaded for the watch-history feature.
  • Wallet & stars ledger — your stars balance and transaction ledger are maintained by our separate Watch & Earn service.

3. Processors & Sub-Services

We rely on a small set of trusted processors to operate the Platform. Each receives only the data needed for its function and processes it on our instructions:

  • Payments — Stripe, Paystack, and Espees/CimPay.
  • Media hosting & delivery — Bunny storage and CDN.
  • Live video — Agora real-time streaming.
  • Messaging & live chat — Google Firebase (push notifications and Firestore).
  • Sign-in — Google and KingsChat identity providers.
  • Email — our transactional email provider, used for verification codes and password resets.

4. Retention Periods

  • Account & profile — kept while your account is active.
  • Content & engagement — kept while published; removed or anonymised when you delete content or your account.
  • Transactions — retained as required for accounting, tax, and fraud-prevention purposes, even after account deletion, in anonymised or aggregated form where possible.
  • Verification & reset codes — short-lived; they expire automatically (typically within minutes) and are consumed on use.
  • Cached values — transient; expire on their own schedule and are rebuildable from the primary database.
  • Local-device data — persists until you clear it from your browser or device.

5. Account Deletion

When you delete your account, we soft-delete it: we anonymise the personal details on your profile (such as email, phone, avatar, cover, and bio), scramble your username, remove your authored videos from public view, and revoke your active sessions. Some records tied to past activity or transactions may persist in anonymised or aggregated form where we have a legal or operational need. Data held by our payment processors is subject to their own retention policies.

6. International Processing

The processors above may store and process data in countries other than your own. Where required, we take steps to ensure your data receives an adequate level of protection wherever it is handled.

7. Your Controls

  • View and edit your profile data from your channel settings.
  • Clear your locally-stored watch history from the History page.
  • Disable push notifications from your device settings.
  • Request account deletion in-app.
  • Contact us to exercise regional rights to access, correct, port, or restrict your data.

8. Contact Us

For questions about the data we hold, email privacy@mystreamspace.org, or use the Support option inside the app.

← Back to MyStreamSpace