← Back to Death Counter

1 · Controller

The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR / DSGVO) is:

Tony Hilbert
Email: [email protected]
Service: Death Counter — deathcounter.kasaicore.com

2 · What Data We Process

We collect only the data necessary to provide the service. The following table summarises what is processed, why, and on what legal basis.

Data Purpose Stored in Legal basis (GDPR) Retention
Twitch username & channel ID Identify your account, authenticate via Twitch OAuth Server-side (Cloudflare R2) Art. 6(1)(b) Until you disconnect the service
Death counter & session data Track in-game deaths per stream session Server-side (Cloudflare R2) Art. 6(1)(b) Until deleted by user or account removal
Sound preferences & enabled/disabled states Remember your sound configuration Server-side (Cloudflare R2) Art. 6(1)(b) Until deleted by user or account removal
Uploaded audio files + metadata (name, size, duration) Store your custom sounds for playback Cloudflare R2 (USA) — see § 4 Art. 6(1)(b) Until deleted by user, rejected, or account removal
Auth cookie dc_auth (encrypted channel ID + username) Keep you logged in after Twitch OAuth — see § 6 Browser cookie Art. 6(1)(b) 30 days, or until logout
Server & access logs (IP address, timestamp, request path) Security, abuse prevention, error diagnosis Server (local, not shared) Art. 6(1)(f) 14 days, then automatically deleted

No profiling or automated decision-making takes place.

3 · Twitch OAuth

Authentication is handled via Twitch's OAuth 2.0 flow. We receive your public Twitch username and channel ID from Twitch. We do not store your Twitch password or access token beyond the active session. Twitch's own privacy policy applies to data processed by Twitch: twitch.tv/p/legal/privacy-notice.

4 · Sound Uploads & Cloud Storage

Audio files you upload are stored in Cloudflare R2, an object storage service operated by Cloudflare, Inc. (USA). Cloudflare participates in the EU–US Data Privacy Framework and processes data in accordance with standard contractual clauses (SCCs) under Art. 46(2)(c) GDPR, providing an adequate level of protection for transfers to third countries.

All uploaded sounds are reviewed before they become active (see Terms of Service § 4). Files rejected during review are deleted immediately and permanently from all storage.

5 · Content Delivery

Static assets and sound files are served via Cloudflare's CDN. When you access the service, your IP address may be processed by Cloudflare for routing and DDoS protection purposes. Cloudflare's privacy policy applies: cloudflare.com/privacypolicy.

6 · Cookies

This service sets exactly one cookie:

No tracking, analytics, advertising, or third-party cookies are set. No cross-site tracking occurs. This service does not use Google Analytics, Meta Pixel, or similar technologies.

7 · Your Rights

Under the GDPR (Art. 15–21, 77) you have the following rights regarding your personal data:

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days as required by Art. 12 GDPR.

9 · Obligation to Provide Data

Providing your Twitch account data via OAuth is required to use the service — without it, login is not possible and the service cannot be provided. Uploading sounds is entirely voluntary and optional.

11 · Data Security

All data is transmitted over HTTPS (TLS). Uploaded files are stored in access-controlled cloud storage. Server logs are retained for a maximum of 14 days and are not shared with third parties unless required by law.

12 · Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the service after a change constitutes acceptance of the updated policy.

13 · Contact

For privacy-related inquiries, data subject requests, or questions about this policy: [email protected]