Privacy Policy

1. Introduction

PeekCast is operated by Starry Mountain LLC, a Washington limited liability company ("Starry Mountain," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use our service. By using PeekCast you agree to the practices described here.

2. Information We Collect

2.1 Account Registration

When you register for an account we collect your email address and a password (stored as a one-way cryptographic hash — we cannot recover your plain-text password). We use your email address to verify your account, send important service notices, and allow you to reset your password. We record the date and time you accepted our Terms of Service. We do not sell or rent your email address to third parties.

2.2 Usage Data

We may collect standard server log data such as IP addresses, browser type, and pages visited in order to operate and improve the service. This data is retained for a limited period and is not sold or linked to advertising profiles.

2.3 Twitch Content

PeekCast operates by fetching publicly available streaming data (stream titles, viewer counts, thumbnails, channel names, categories, and tags) from the Twitch API and storing it temporarily in our own infrastructure to power the discovery service. This data is retained for a limited period as described in Section 11 and is used solely to operate PeekCast. We do not collect Twitch user credentials, do not act on your behalf via Twitch's API, and do not link Twitch stream data to your PeekCast account unless you explicitly create an Event that references specific content.

3. How We Use Your Information

• To create and manage your account
• To authenticate you when you sign in
• To send transactional emails (account confirmation, password reset, service notices)
• To record your acceptance of our Terms of Service as required for legal compliance
• To operate, maintain, and improve the PeekCast service
• To comply with applicable legal obligations
• To detect and prevent fraud or abuse

4. Data Storage and Security

Account data (email address, password hash, event configurations, and session tokens) is stored in Amazon DynamoDB hosted in the United States.

Twitch-sourced content (stream metadata, video metadata, and search indexes) is stored in Amazon S3 and indexed in Elasticsearch, both hosted in the United States. This data is automatically deleted on the schedule described in Section 11.

We implement reasonable technical and organizational security measures, including password hashing and HTTP-only session cookies, to protect your data. No method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

5. Cookies and Sessions

We use cookies solely to maintain your authenticated session. No third-party advertising or tracking cookies are currently used. Session cookies are deleted when you log out or your session expires. If we add analytics or other non-essential cookies in the future, we will update this policy and obtain required consents before doing so.

6. Third-Party Services

PeekCast uses the Twitch API to retrieve publicly available streaming data. Your use of PeekCast is subject to  Twitch's Privacy Notice with respect to data Twitch holds about you.

7. Your Rights (General)

Depending on your location you may have rights under GDPR, CCPA, or other applicable law. In general, you may request to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Delete your personal data (subject to legal retention requirements)
• Receive a portable copy of your data
• Object to or restrict processing in certain circumstances

To exercise any of these rights, email us at contact@peekcast.com. We will respond within 30 days.

8. Account Deletion

To request deletion of your account and associated personal data, email accounts@peekcast.com with the subject "Account Deletion Request" and include the email address associated with your account. We will process your request and remove your personal data within 30 days, except where retention is required by law (such as Terms-of-Service acceptance records, which may be retained for the period required to defend against potential legal claims).

9. GDPR — Additional Rights for EEA and UK Users

If you are located in the European Economic Area (EEA) or the United Kingdom, the following additional information applies. The data controller is Starry Mountain LLC, contactable at contact@peekcast.com.

Legal Basis for Processing

• Contract performance: processing your email address and account data to provide the Service you signed up for.
• Legal obligation: retaining records of your Terms acceptance as required by applicable law.
• Legitimate interests: server logs and security monitoring to operate and protect the Service.

International Data Transfers

Your data is stored in the United States. Transfers of personal data from the EEA or UK to the United States are subject to appropriate safeguards. By using the Service and accepting these Terms you acknowledge this transfer.

Right to Complain

You have the right to lodge a complaint with your local supervisory authority if you believe we have not handled your personal data in compliance with applicable law.

10. CCPA — Additional Rights for California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the CPRA provides you with the following additional rights.

Categories of Personal Information Collected

• Identifiers (email address)
• Internet or other electronic network activity information (server logs, session data)

We Do Not Sell or Share Your Personal Information

Starry Mountain LLC does not sell your personal information to third parties and does not share your personal information for cross-context behavioral advertising. You do not need to opt out because no such sale or sharing occurs.

Your CCPA Rights

• Right to know what personal information is collected and how it is used
• Right to delete personal information (subject to certain exceptions)
• Right to correct inaccurate personal information
• Right to non-discrimination for exercising your CCPA rights

To exercise your CCPA rights, email us at contact@peekcast.com.

11. Data Retention

We retain account information for as long as your account is active or as needed to provide the service. Upon account deletion we will remove your personal data within 30 days, except where retention is required by law (such as Terms-of-Service acceptance records).

Twitch-sourced stream and video metadata (titles, viewer counts, thumbnails, and related fields) is retained for a maximum of 30 days and then automatically deleted from our systems. Categories, tags, and channel reference data are refreshed continuously from Twitch's public API and do not constitute a permanent archive.

Event configuration data you create (filter rules, blocklists, and event descriptions) is retained until you delete your account. This data belongs to you and references Twitch content by identifier only — it does not duplicate stream or video payload data.

12. Children

PeekCast is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us immediately at contact@peekcast.com and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact Starry Mountain LLC at contact@peekcast.com.