Privacy Policy

Effective date: February 9, 2026.


1. Introduction

BotOfTheSpecter, operating under the business name YourStreamingTools and registered as a subsidiary of LochStudios, Australia Business Number 20 447 022 747 ("Company," "we," "us," or "our") is committed to protecting your privacy and complying with applicable data protection laws including the GDPR. This Privacy Policy explains how we collect, use, and protect personal information when you visit our Site or use our services.


2. Data controller & contact information

For GDPR purposes, BotOfTheSpecter is the data controller. If you have any questions about this Privacy Policy or our data practices, please contact us at questions@botofthespecter.com.


3. Information we collect

3.1 Personal information

We collect information you provide directly to us (for example: name, email, billing address) when you register, make purchases, subscribe to newsletters, or contact us.

We also use Twitch as our login provider ("Sign in with Twitch"). When you authenticate with Twitch, Twitch Interactive, Inc. may provide us with certain account information associated with your Twitch account (such as your Twitch user ID, username/display name, and the email address linked to your Twitch account where available/authorised). Your use of Twitch is governed by Twitch’s policies, including their Privacy Policy and Terms of Service.

3.2 Usage data

We automatically collect information about how you interact with our Site and services (including our dashboard and related ecosystem pages). This data helps us operate the service, keep it secure, troubleshoot issues, and understand how our features are used.

Usage data may include:

  • Log and device data: IP address, browser type and version, device type, operating system, language and regional settings, user agent, and approximate location derived from IP address.
  • Session and interaction data: pages viewed, buttons/links clicked, timestamps, referring/exit URLs, session identifiers, and authentication-related events (e.g., login/logout) to help prevent fraud and unauthorized access.
  • Technical and performance data: error reports, diagnostics, response times, and other performance metrics used for reliability monitoring and debugging.

3.3 Payment information

We use third-party payment processors for transactions. We record transaction references and receipts but do not store full card details on our servers.

For services that we operate and bill directly, we use Stripe as our payment processor. Stripe’s legal terms and policies are available at https://stripe.com/au/legal.

For BotOfTheSpecter Premium features/perks, we use Twitch subscription services. A subscription to the bot developer Lachlan (gfaUnDead, https://twitch.tv/gfaundead) grants you premium perks for BotOfTheSpecter for as long as you remain subscribed to the developer’s Twitch channel.

3.4 Cookies and tracking

We use cookies and similar technologies (such as local storage and session storage) to help our Site function, remember your preferences, improve performance, and understand how our services are used.

Cookies and tracking technologies we use may include:

  • Strictly necessary cookies: required for core functionality such as session management, login/authentication, security protections, and enabling key site features.
  • Preference cookies: used to remember settings you choose (for example, display preferences) so you don’t have to re-enter them each time.
  • Analytics and measurement: used to understand traffic and feature usage so we can improve reliability and user experience. Where required by law, we will request consent before using non-essential analytics cookies.

You can control cookies through your browser settings (including blocking or deleting cookies). Please note that disabling certain cookies may affect the availability or functionality of parts of the Site. See our cookie settings in the site footer (if available) for options to manage preferences.


4. Lawful bases for processing

  • Consent: Where you have given consent (e.g., marketing emails).
  • Contractual necessity: To provide services you have requested.
  • Legal obligation: To comply with laws and regulations.
  • Legitimate interests: For our legitimate business interests, provided your rights are respected.

5. How we use your information

  • To provide and improve our services, process payments and manage accounts.
  • To communicate with you about orders, account changes, and updates.
  • For marketing with your consent.
  • To comply with legal and security obligations.
  • To detect, prevent, investigate, and take action against spam, abuse, fraud, and other prohibited activity, including enforcing our Terms of Service.

6. Sharing your information

We do not sell your personal information. We share or disclose personal information only when necessary to operate our services, provide requested features, comply with legal obligations, or protect the security and integrity of our systems.

Data that we store on our servers is hosted in Australia. In general, personal data stored on our servers does not leave our servers except in limited situations such as:

  • Legal requests: where we are required to disclose information under applicable law, including lawful requests from government authorities (including from another country where applicable legal processes apply).
  • GDPR data export delivery: when you request an export via our Export my Data feature or via a manual GDPR request, we will send your export as a ZIP file to the email address linked to your Twitch account (or otherwise provided/verified). For security, the download is available for a limited time (currently up to 7 days); after that, the export is removed and you will need to request a new export.
  • Payment processing: when you purchase services, relevant transaction information is shared with our payment processors (for example, Stripe) to process payments and prevent fraud. We do not receive or store full card details.

Where we use third-party service providers (for example, payment processors or email delivery providers), they process personal information only as needed to provide services to us and are required to protect it.


7. Data retention

We keep personal data only for as long as it is reasonably necessary to provide our services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce our agreements, and protect the security and integrity of our systems.

Retention depends on the type of data and why we collected it. For example:

  • Account and profile data: retained while you maintain an account with us so we can provide the services you request. If your access is terminated or your account is closed, we may retain limited data for compliance, fraud prevention, security, and dispute resolution.
  • Usage, security, and diagnostic logs: retained for a limited period as needed for security monitoring, abuse prevention (including spam investigations), troubleshooting, and service reliability.
  • Payment and transaction records: where applicable, we retain transaction references/receipts and related accounting records as required for financial compliance and audit purposes. We do not store full card details on our servers.
  • GDPR data exports: when you request an export, the generated ZIP export is made available for download for a limited time (currently up to 7 days) and is then removed; you can request a new export if needed.

Where retention is required by law (including tax, accounting, or regulatory requirements), or where we need to establish, exercise, or defend legal claims, we may retain relevant information for longer.


8. Your rights under GDPR

If the GDPR applies to you, you may have the following rights in relation to your personal data (subject to certain conditions and exemptions):

  • Right of access: request access to the personal data we hold about you.
  • Right to rectification: request that we correct inaccurate or incomplete personal data.
  • Right to erasure (“right to be forgotten”): request deletion of your personal data in certain circumstances.
  • Right to restriction of processing: request that we limit how we use your personal data in certain circumstances.
  • Right to data portability: request a copy of certain personal data in a portable format.
  • Right to object: object to processing in certain circumstances (including certain processing based on legitimate interests).
  • Right to withdraw consent: where we rely on consent, you can withdraw it at any time (this does not affect processing already carried out).

To exercise these rights, contact us at gdpr@yourstreamingtools.com. To protect your privacy and security, we may need to verify your identity before completing your request. We aim to respond within the timeframes required by applicable law (generally within one month, and may be extended where permitted).

You may also lodge a complaint with your local data protection authority (supervisory authority) if you believe our processing of your personal data infringes applicable law.

8.1 Export my Data (automated download)

If you would like to access or export the personal data we currently hold about your account/profile, you can use the Export my Data button available on the profile page across our ecosystem. When you click Export my Data, our system automatically collects the information currently stored about your account/profile, packages it into a ZIP file, and emails it to the email address linked to your Twitch account (this address is shown when you click the export button).

If the email address shown is not correct, please either update your email address on Twitch, log out and log back into the dashboard site, and try again. Alternatively, you can email us at gdpr@yourstreamingtools.com to request your export manually.


9. Security

We implement reasonable technical and organisational measures designed to protect personal data from accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

Our security measures may include (as appropriate):

  • Access controls: limiting access to personal data to authorised personnel and systems on a need-to-know basis.
  • Encryption in transit: using HTTPS/TLS for data transmitted between your device and our services where supported.
  • Monitoring and logging: maintaining security and diagnostic logs to detect suspicious activity, prevent abuse (including spam), and investigate incidents.
  • Operational safeguards: applying security updates, using least-privilege principles, and maintaining backup and recovery practices appropriate to the service.

You are responsible for keeping your account access secure (for example, protecting your Twitch account and any devices you use to access our services). While we work to protect your personal data, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.


10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, legal requirements, or for other operational reasons.

When we make changes, we will post the updated policy on this page and update the "Effective date" date above. Unless stated otherwise, changes take effect when they are posted.

If we make material changes, we may provide additional notice where appropriate (for example, by displaying a notice on the Site or contacting you via an email address associated with your account). We encourage you to review this policy periodically.


11. Contact us

If you have questions or would like to contact us about privacy or our services, you can reach us at the following addresses: