Privacy Policy

Last updated: April 11, 2026

1. Overview

CoinChime ("we," "our," "the Service") respects your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data.

2. Information We Collect

Data	Who	How
Twitch display name, username, avatar	Streamers	Twitch OAuth login
Cryptocurrency wallet addresses	Streamers	Entered in settings
Donor display name	Donors	Entered at donation time (optional)
Donation messages	Donors	Entered at donation time (optional)
Donation amounts (USD and crypto)	Both	Recorded per transaction
Transaction hashes	Both	From blockchain confirmation

3. Information We Do NOT Collect

Donor wallet addresses are never stored. Transactions are processed on-chain or through our payment provider without recording the sender's wallet.
We do not collect payment card information, bank details, or government-issued IDs.
We do not use tracking cookies or third-party analytics.

4. How We Use Your Information

To process and display donations on streamer pages.
To trigger real-time donation alerts for streamers.
To display leaderboards of top donors (using donor display names only).
To apply content moderation (profanity filtering) on donation messages.
To authenticate streamers via Twitch.

5. Third-Party Services

We use the following third-party services:

Twitch — for streamer authentication (OAuth). Subject to Twitch's Privacy Policy.
NOWPayments — for processing QR code cryptocurrency payments. Subject to NOWPayments' Privacy Policy.
Supabase — for database hosting. Data is stored securely with row-level security enabled.
Pusher — for real-time donation alerts. No personal data is stored by Pusher.
CoinGecko — for cryptocurrency price data. No user data is shared with CoinGecko.

6. Data Retention

Donation records are retained indefinitely to maintain accurate leaderboards and streamer history. Streamers may request deletion of their account and associated data by contacting us.

7. Data Security

We implement the following security measures:

Row-level security on all database tables.
Encrypted session tokens with HttpOnly cookies.
Rate limiting on all API endpoints.
HMAC signature verification on payment webhooks.
All data transmitted over HTTPS.

8. Your Rights

You have the right to:

Request access to your personal data.
Request deletion of your account and associated data.
Opt out of having your donor name displayed (by donating anonymously).

9. Children's Privacy

CoinChime is not intended for use by anyone under 18 years of age. We do not knowingly collect information from minors.

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.

11. Contact

For privacy-related questions or data requests, contact us at ardasensoz@outlook.com.